$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.cer File: 5EEF74EC549BBA3A98586948A652EF1E67729F08.cer (raw, json) Hash identifier: G9HK6kTcMH2UbcI7uNq1wQZEgRmMtYaqj+skpmeLZMY= Subject key identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 56D9637D1BC0C5112371FDAFA29923AB40F05FB9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:52:43 +0000 Certificate not after: Tue 04 Mar 2025 17:57:43 +0000 Subordinate resources: AS: 52420 IP: 152.231.48.0/20 IP: 201.220.144.0/20 IP: 2803:a900::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:d9:63:7d:1b:c0:c5:11:23:71:fd:af:a2:99:23:ab:40:f0:5f:b9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:52:43 2024 GMT Not After : Mar 4 17:57:43 2025 GMT Subject: CN=5EEF74EC549BBA3A98586948A652EF1E67729F08 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:f6:17:23:c7:62:2f:84:1e:01:e7:2a:e8:c8: c8:1e:8e:0f:5b:4f:93:17:1b:4d:4c:7b:25:6d:95: ec:bc:00:1d:8b:9e:6f:39:7d:36:9c:88:7c:cb:69: 29:4b:2a:71:bf:6e:d4:26:28:b8:07:99:e1:e6:56: 8a:26:e7:9a:7f:2c:4c:39:ea:d5:d3:a0:00:1d:c7: bd:d8:cb:53:90:36:d6:24:ed:66:4d:e3:8c:df:4d: 23:19:bc:2f:15:7b:17:c0:f4:db:d5:9c:56:1b:d2: 45:6f:19:5b:af:bd:1a:7f:03:eb:0a:2e:40:68:4d: a4:e3:4f:52:94:22:c7:22:ca:8b:2c:d2:58:a0:4e: 00:a7:96:21:f2:47:44:7b:c3:7f:60:b5:02:36:c5: 88:c2:24:b9:2f:b3:16:7f:73:1b:8f:67:e8:9f:77: 6b:09:92:b5:8c:a1:f6:8f:1e:7d:de:f8:d4:0a:98: 96:39:82:d0:32:2b:c7:51:1a:5c:08:61:e5:7d:0d: a5:17:3f:0f:77:54:09:d0:74:64:7d:0c:9b:93:1f: a6:b5:5c:dd:fe:3e:0b:85:8f:64:45:59:4d:a1:dc: 05:9f:bf:3a:0c:ee:4c:0f:dd:12:e2:87:b3:5c:bb: 9c:e2:f8:fd:32:b4:82:9b:d7:ec:61:73:64:f7:d4: 07:6b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 5E:EF:74:EC:54:9B:BA:3A:98:58:69:48:A6:52:EF:1E:67:72:9F:08 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/23E0ADF9AE86293D41DA88AE1D38141EA98368B999EF68E3198EF9E54EF1C62F/0/5EEF74EC549BBA3A98586948A652EF1E67729F08.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.231.48.0/20 201.220.144.0/20 IPv6: 2803:a900::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52420 Signature Algorithm: sha256WithRSAEncryption b8:05:7f:86:db:34:d2:2c:3c:76:18:88:d4:fb:1e:6f:cb:57: 1c:28:1a:3a:e9:e6:99:2f:8d:5f:28:49:54:5b:90:ba:f5:65: 29:d5:33:34:a0:30:43:f1:da:3d:c9:d2:b4:bc:64:a7:b9:5b: 37:47:42:a3:cb:a8:2f:3b:3e:4a:83:c2:50:3a:56:9d:1e:e7: d8:69:ea:7f:52:07:62:6f:a6:33:2d:f4:2b:9e:cd:b1:a5:0e: 07:a9:ed:2e:f2:d7:f2:f1:73:d7:a4:90:84:91:77:58:d0:1a: 71:43:fb:8c:6f:96:54:48:d2:34:54:92:fa:9f:41:c4:d0:14: d2:af:9d:4c:9c:3b:6c:a1:21:55:96:b9:ac:0a:10:43:8b:62: f1:f1:88:70:61:c8:4d:d5:e2:6f:53:40:b7:15:47:b4:06:10: b1:af:72:e2:8d:e2:a1:8d:f0:f5:09:58:b2:70:2a:f8:c2:3c: 05:a1:35:c6:4c:7e:78:2e:ef:df:02:6e:3d:12:88:b5:f0:65: 2d:e5:e6:d8:9f:65:7f:87:95:d2:3e:e2:1f:82:b6:15:33:16: 6f:11:8d:1c:7a:73:2c:4b:a7:19:75:24:dc:fa:ad:35:ff:aa: 1b:b7:ce:e2:8f:90:ca:43:92:b4:8c:25:4d:e7:e4:07:b2:21: 0f:cf:5b:18 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUVtljfRvAxREjcf2vopkjq0DwX7kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUyNDNaFw0yNTAzMDQxNzU3NDNaMDMxMTAvBgNV BAMTKDVFRUY3NEVDNTQ5QkJBM0E5ODU4Njk0OEE2NTJFRjFFNjc3MjlGMDgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDS9hcjx2IvhB4B5yroyMgejg9b T5MXG01MeyVtley8AB2Lnm85fTaciHzLaSlLKnG/btQmKLgHmeHmVoom55p/LEw5 6tXToAAdx73Yy1OQNtYk7WZN44zfTSMZvC8VexfA9NvVnFYb0kVvGVuvvRp/A+sK LkBoTaTjT1KUIsciyoss0ligTgCnliHyR0R7w39gtQI2xYjCJLkvsxZ/cxuPZ+if d2sJkrWMofaPHn3e+NQKmJY5gtAyK8dRGlwIYeV9DaUXPw93VAnQdGR9DJuTH6a1 XN3+PguFj2RFWU2h3AWfvzoM7kwP3RLih7Ncu5zi+P0ytIKb1+xhc2T31AdrAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRe73TsVJu6OphY aUimUu8eZ3KfCDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjNFMEFERjlBRTg2MjkzRDQxREE4OEFF MUQzODE0MUVBOTgzNjhCOTk5RUY2OEUzMTk4RUY5RTU0RUYxQzYyRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yM0UwQURGOUFFODYyOTNENDFEQTg4QUUxRDM4MTQxRUE5ODM2OEI5OTlF RjY4RTMxOThFRjlFNTRFRjFDNjJGLzAvNUVFRjc0RUM1NDlCQkEzQTk4NTg2OTQ4 QTY1MkVGMUU2NzcyOUYwOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEmOcwAwQEydyQ MA0EAgACMAcDBQAoA6kAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMxDANBgkq hkiG9w0BAQsFAAOCAQEAuAV/hts00iw8dhiI1Pseb8tXHCgaOunmmS+NXyhJVFuQ uvVlKdUzNKAwQ/HaPcnStLxkp7lbN0dCo8uoLzs+SoPCUDpWnR7n2Gnqf1IHYm+m My30K57NsaUOB6ntLvLX8vFz16SQhJF3WNAacUP7jG+WVEjSNFSS+p9BxNAU0q+d TJw7bKEhVZa5rAoQQ4ti8fGIcGHITdXib1NAtxVHtAYQsa9y4o3ioY3w9QlYsnAq +MI8BaE1xkx+eC7v3wJuPRKItfBlLeXm2J9lf4eV0j7iH4K2FTMWbxGNHHpzLEun GXUk3PqtNf+qG7fO4o+QykOStIwlTefkB7IhD89bGA== -----END CERTIFICATE-----Generated at Thu May 16 21:44:41 2024 by rpki-client on console-fra.rpki-client.org