$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/611631FA06DD95669B436A4CC18C5DFEE713D593.cer File: 611631FA06DD95669B436A4CC18C5DFEE713D593.cer (raw, json) Hash identifier: bUsnWiBRNk0lN1VbDqqwb+P7cS9jLxNqVVEEIiUKsvc= Subject key identifier: 61:16:31:FA:06:DD:95:66:9B:43:6A:4C:C1:8C:5D:FE:E7:13:D5:93 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2D8D6C5ACF365A10CBF1CFD0FBC592F4C3D2A657 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/12905128C63551ACD151BD76F7C8A706D0D318919DA8EC8F7E47ED3AADD96655/0/611631FA06DD95669B436A4CC18C5DFEE713D593.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/12905128C63551ACD151BD76F7C8A706D0D318919DA8EC8F7E47ED3AADD96655/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:40:29 +0000 Certificate not after: Tue 04 Mar 2025 17:45:29 +0000 Subordinate resources: AS: 52345 IP: 200.16.94.0/24 IP: 2801:19:8000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 23 May 2024 17:37:52 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2d:8d:6c:5a:cf:36:5a:10:cb:f1:cf:d0:fb:c5:92:f4:c3:d2:a6:57 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:40:29 2024 GMT Not After : Mar 4 17:45:29 2025 GMT Subject: CN=611631FA06DD95669B436A4CC18C5DFEE713D593 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:72:3a:d9:82:a4:ea:dd:6d:4d:9e:54:ac:4a: a2:f5:37:fb:9a:2b:c7:b3:a5:6b:16:b8:23:f4:95: 09:54:69:ec:62:d6:31:1e:d8:1f:48:01:bf:bf:ea: 05:b5:4c:16:bf:bb:8e:fa:67:d8:17:c1:55:5e:54: 78:32:4b:17:d5:ad:e4:ff:f6:a9:ae:3b:40:cf:5d: 3d:dc:f1:a5:da:4d:4e:eb:df:b1:ee:6e:e1:59:98: d5:96:32:1f:f3:df:85:e9:e2:10:ec:de:ca:8b:99: 53:a8:a8:53:00:73:8e:1a:6e:02:a1:c0:f5:a1:fd: 7d:d2:39:68:5c:4c:7d:d8:b8:dd:fc:e5:c3:dd:cc: 41:c8:c3:71:f3:ca:76:16:71:cf:92:64:8d:f8:02: aa:da:2f:fe:4c:24:8c:77:18:b7:2f:d6:0e:d4:39: 18:5d:e5:35:60:35:41:3d:f2:54:13:c3:59:83:f2: 3e:96:db:bf:da:db:a4:d9:06:65:15:fd:a3:d3:bd: d2:51:cc:16:8c:d5:8b:f2:eb:78:29:9e:5f:da:56: 24:17:ea:20:6c:1a:70:7f:ef:ff:82:fe:9c:a2:29: 55:8b:34:2d:44:1a:1e:26:19:48:33:4a:bf:2a:3c: 0f:e6:f1:80:44:77:b3:98:a3:7a:18:39:08:fa:5a: ee:7b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 61:16:31:FA:06:DD:95:66:9B:43:6A:4C:C1:8C:5D:FE:E7:13:D5:93 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/12905128C63551ACD151BD76F7C8A706D0D318919DA8EC8F7E47ED3AADD96655/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/12905128C63551ACD151BD76F7C8A706D0D318919DA8EC8F7E47ED3AADD96655/0/611631FA06DD95669B436A4CC18C5DFEE713D593.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.16.94.0/24 IPv6: 2801:19:8000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52345 Signature Algorithm: sha256WithRSAEncryption 22:16:16:9b:49:3a:d1:2d:0e:50:fb:2b:a0:e4:1c:b7:ad:ba: 6b:e8:4d:f4:9f:c1:5c:29:ed:18:15:fe:e0:10:20:25:a2:35: 61:b7:96:16:0c:6a:ee:45:21:02:90:ef:83:4c:0c:c0:5a:d9: 7e:24:3a:70:2e:ae:17:60:65:b4:29:54:d3:0d:2c:95:a6:85: c5:9e:55:96:e4:bf:52:4f:7f:42:73:7f:9a:72:99:1c:b4:c5: db:6d:7d:ab:73:2e:5b:77:5b:09:e8:b8:00:e7:08:76:79:43: 67:f0:02:dd:95:9d:5e:cc:46:1d:fa:8d:48:6d:6f:95:ce:41: 1b:d9:8c:39:5c:25:7a:69:5b:72:0a:a9:2b:a4:16:29:c7:e4: 1f:09:4e:c5:47:dc:65:9b:1f:88:73:d8:1f:86:af:55:a6:b2: 21:86:2d:e0:f2:39:c7:85:77:10:93:e1:a9:78:52:64:fd:c2: 2b:b4:05:0c:9f:68:d0:43:c2:13:5a:99:59:05:72:c3:da:40: da:ea:3a:39:94:40:6b:6a:f9:4c:da:ce:96:f5:a9:8a:36:eb: 7c:ff:7d:ea:01:89:e3:07:b9:e0:2e:26:23:7a:f5:b7:6d:ff: 55:d7:2d:ba:74:cc:8c:8a:1a:6c:4d:af:62:f9:37:5c:09:bd: ea:80:3c:bb -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIULY1sWs82WhDL8c/Q+8WS9MPSplcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQwMjlaFw0yNTAzMDQxNzQ1MjlaMDMxMTAvBgNV BAMTKDYxMTYzMUZBMDZERDk1NjY5QjQzNkE0Q0MxOEM1REZFRTcxM0Q1OTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC5cjrZgqTq3W1NnlSsSqL1N/ua K8ezpWsWuCP0lQlUaexi1jEe2B9IAb+/6gW1TBa/u476Z9gXwVVeVHgySxfVreT/ 9qmuO0DPXT3c8aXaTU7r37HubuFZmNWWMh/z34Xp4hDs3sqLmVOoqFMAc44abgKh wPWh/X3SOWhcTH3YuN385cPdzEHIw3HzynYWcc+SZI34AqraL/5MJIx3GLcv1g7U ORhd5TVgNUE98lQTw1mD8j6W27/a26TZBmUV/aPTvdJRzBaM1Yvy63gpnl/aViQX 6iBsGnB/7/+C/pyiKVWLNC1EGh4mGUgzSr8qPA/m8YBEd7OYo3oYOQj6Wu57AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRhFjH6Bt2VZptD akzBjF3+5xPVkzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTI5MDUxMjhDNjM1NTFBQ0QxNTFCRDc2 RjdDOEE3MDZEMEQzMTg5MTlEQThFQzhGN0U0N0VEM0FBREQ5NjY1NS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8xMjkwNTEyOEM2MzU1MUFDRDE1MUJENzZGN0M4QTcwNkQwRDMxODkxOURB OEVDOEY3RTQ3RUQzQUFERDk2NjU1LzAvNjExNjMxRkEwNkREOTU2NjlCNDM2QTRD QzE4QzVERkVFNzEzRDU5My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQAyBBeMA8EAgAC MAkDBwAoAQAZgAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDAMx5MA0GCSqGSIb3 DQEBCwUAA4IBAQAiFhabSTrRLQ5Q+yug5By3rbpr6E30n8FcKe0YFf7gECAlojVh t5YWDGruRSECkO+DTAzAWtl+JDpwLq4XYGW0KVTTDSyVpoXFnlWW5L9ST39Cc3+a cpkctMXbbX2rcy5bd1sJ6LgA5wh2eUNn8ALdlZ1ezEYd+o1IbW+VzkEb2Yw5XCV6 aVtyCqkrpBYpx+QfCU7FR9xlmx+Ic9gfhq9VprIhhi3g8jnHhXcQk+GpeFJk/cIr tAUMn2jQQ8ITWplZBXLD2kDa6jo5lEBravlM2s6W9amKNut8/33qAYnjB7ngLiYj evW3bf9V1y26dMyMihpsTa9i+TdcCb3qgDy7 -----END CERTIFICATE-----Generated at Mon May 20 01:38:28 2024 by rpki-client on console-ams.rpki-client.org