$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer File: 6C7F5FF558448E94BE5C9035CCB3AACE6543C218.cer (raw, json) Hash identifier: nxlbulec4UtKKeVFwew18Smpqf52g7ueUAqFvVjh728= Subject key identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 257949A98FCE764FAD318CC34A0E41AB9FC24CBB Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:42:39 +0000 Certificate not after: Tue 04 Mar 2025 17:47:39 +0000 Subordinate resources: AS: 262187 IP: 131.100.180.0/22 IP: 190.211.80.0 -- 190.211.91.255 IP: 2800:a30::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 25:79:49:a9:8f:ce:76:4f:ad:31:8c:c3:4a:0e:41:ab:9f:c2:4c:bb Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:42:39 2024 GMT Not After : Mar 4 17:47:39 2025 GMT Subject: CN=6C7F5FF558448E94BE5C9035CCB3AACE6543C218 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d4:a0:cc:b7:11:07:4a:83:bb:fb:bf:7f:93:59: b8:41:74:49:cc:da:fd:7a:e3:40:4b:57:dc:2a:d0: df:75:83:b2:33:a2:5e:76:aa:19:e1:c8:f3:b7:4a: c3:70:ba:03:8c:7a:49:ba:b4:d8:3c:d2:7c:70:2d: 41:dd:9a:d7:8f:ee:d2:d8:27:3a:e2:88:a0:46:ce: 23:66:f8:21:55:a8:cc:79:5c:76:06:b3:29:2b:9c: 56:5a:69:05:2f:36:d7:1f:6e:a1:78:7b:74:11:02: cb:e5:94:e7:82:6b:7c:ed:eb:06:ce:25:8a:28:7a: 6e:91:24:35:b3:6e:8e:22:6e:72:e8:13:63:51:ec: b2:b5:10:ba:84:8d:09:e3:27:9f:61:07:4f:47:84: 95:1a:45:65:10:e3:13:c7:db:67:50:a4:d5:1a:d5: e9:d5:ef:29:48:69:e5:e6:fd:10:8f:86:9a:6f:5f: 0d:01:09:b3:0b:d5:08:40:d1:87:18:e6:6b:e0:6a: bf:d4:aa:e9:7d:81:48:f5:30:d0:1b:27:a3:b0:b4: bc:5f:86:07:7c:45:19:1f:ec:93:91:ae:b4:96:15: 3f:aa:aa:1e:5c:6f:06:f2:0b:3d:4f:2b:f2:79:8d: 27:c9:ba:d2:58:eb:60:24:13:2c:5d:96:7a:d7:a4: cb:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6C:7F:5F:F5:58:44:8E:94:BE:5C:90:35:CC:B3:AA:CE:65:43:C2:18 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3850C845AA8B21ABF52CFEE2238FD8AA0F02FDE56896A532259F1D20A4AD01A2/0/6C7F5FF558448E94BE5C9035CCB3AACE6543C218.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 131.100.180.0/22 190.211.80.0-190.211.91.255 IPv6: 2800:a30::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262187 Signature Algorithm: sha256WithRSAEncryption 71:f5:87:ee:7d:3e:3e:8a:86:70:15:b6:9f:30:42:da:19:7d: 43:62:ab:fd:89:25:ba:c5:87:1d:23:d5:15:8b:73:bf:d9:de: c2:d1:4d:8d:37:58:dd:dd:7c:78:31:a4:6c:97:be:81:49:66: f0:b0:67:29:5a:da:f6:b2:bb:1e:d4:bd:a9:3f:db:e1:d3:e7: 44:6a:30:39:d6:35:17:8c:b6:f9:d2:1d:dd:bd:21:c4:13:8b: 12:08:b3:ef:ea:db:60:43:3a:64:a5:0d:72:a5:3c:5b:33:74: 9c:12:19:9e:33:28:4e:26:0b:7c:49:01:63:8e:49:32:c3:7e: ed:33:66:b1:32:cd:48:8a:14:03:4c:86:d0:08:80:ec:bb:58: 75:54:c0:dd:e8:d4:2e:ef:07:75:d8:08:f8:db:de:72:60:b7: b0:54:8e:c7:9b:12:1c:98:d2:8a:c4:ba:45:90:39:8e:83:2c: d6:b0:d6:28:ec:36:aa:04:34:2f:1c:51:cc:bb:10:01:3c:ca: 1d:36:5d:02:2f:5f:cd:36:6a:51:bf:80:01:78:b7:2f:63:81: 42:44:e6:c2:a1:4f:31:30:df:18:64:2e:f9:12:02:39:3b:67: b4:0c:a0:09:45:da:95:5f:fe:84:fa:a6:cf:8a:e0:9b:c9:e5: 5a:a8:97:63 -----BEGIN CERTIFICATE----- MIIGszCCBZugAwIBAgIUJXlJqY/Odk+tMYzDSg5Bq5/CTLswDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQyMzlaFw0yNTAzMDQxNzQ3MzlaMDMxMTAvBgNV BAMTKDZDN0Y1RkY1NTg0NDhFOTRCRTVDOTAzNUNDQjNBQUNFNjU0M0MyMTgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDUoMy3EQdKg7v7v3+TWbhBdEnM 2v1640BLV9wq0N91g7Izol52qhnhyPO3SsNwugOMekm6tNg80nxwLUHdmteP7tLY JzriiKBGziNm+CFVqMx5XHYGsykrnFZaaQUvNtcfbqF4e3QRAsvllOeCa3zt6wbO JYooem6RJDWzbo4ibnLoE2NR7LK1ELqEjQnjJ59hB09HhJUaRWUQ4xPH22dQpNUa 1enV7ylIaeXm/RCPhppvXw0BCbML1QhA0YcY5mvgar/Uqul9gUj1MNAbJ6OwtLxf hgd8RRkf7JORrrSWFT+qqh5cbwbyCz1PK/J5jSfJutJY62AkEyxdlnrXpMsTAgMB AAGjggO9MIIDuTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRsf1/1WESOlL5c kDXMs6rOZUPCGDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzg1MEM4NDVBQThCMjFBQkY1MkNGRUUy MjM4RkQ4QUEwRjAyRkRFNTY4OTZBNTMyMjU5RjFEMjBBNEFEMDFBMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zODUwQzg0NUFBOEIyMUFCRjUyQ0ZFRTIyMzhGRDhBQTBGMDJGREU1Njg5 NkE1MzIyNTlGMUQyMEE0QUQwMUEyLzAvNkM3RjVGRjU1ODQ0OEU5NEJFNUM5MDM1 Q0NCM0FBQ0U2NTQzQzIxOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDwGCCsGAQUFBwEHAQH/BC0wKzAaBAIAATAUAwQCg2S0MAwDBAS+ 01ADBAK+01gwDQQCAAIwBwMFACgACjAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQID BAArMA0GCSqGSIb3DQEBCwUAA4IBAQBx9YfufT4+ioZwFbafMELaGX1DYqv9iSW6 xYcdI9UVi3O/2d7C0U2NN1jd3Xx4MaRsl76BSWbwsGcpWtr2srse1L2pP9vh0+dE ajA51jUXjLb50h3dvSHEE4sSCLPv6ttgQzpkpQ1ypTxbM3ScEhmeMyhOJgt8SQFj jkkyw37tM2axMs1IihQDTIbQCIDsu1h1VMDd6NQu7wd12Aj4295yYLewVI7HmxIc mNKKxLpFkDmOgyzWsNYo7DaqBDQvHFHMuxABPModNl0CL1/NNmpRv4ABeLcvY4FC RObCoU8xMN8YZC75EgI5O2e0DKAJRdqVX/6E+qbPiuCbyeVaqJdj -----END CERTIFICATE-----Generated at Fri May 31 20:32:54 2024 by rpki-client on console-ams.rpki-client.org