$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.cer File: 6FA9D8355B4041A0E854F533B0B64560F79C9808.cer (raw, json) Hash identifier: AmCZkGjDy8mEH6Q4+o03MF61RZWMRtHoLTgGb+MtsaA= Subject key identifier: 6F:A9:D8:35:5B:40:41:A0:E8:54:F5:33:B0:B6:45:60:F7:9C:98:08 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5085DAADF43B20EFD679D4FC485FCE6E2D9E42 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:18:03 +0000 Certificate not after: Tue 04 Mar 2025 18:23:03 +0000 Subordinate resources: AS: 272051 IP: 181.233.154.0/23 IP: 2803:1d10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:85:da:ad:f4:3b:20:ef:d6:79:d4:fc:48:5f:ce:6e:2d:9e:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:18:03 2024 GMT Not After : Mar 4 18:23:03 2025 GMT Subject: CN=6FA9D8355B4041A0E854F533B0B64560F79C9808 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a0:b7:86:b0:39:ff:db:53:39:0e:4a:78:d6:b6: b1:9d:a4:70:48:dc:5a:50:ef:03:d5:8e:02:e9:25: a2:1b:93:49:31:ce:df:a3:78:16:fd:11:a7:85:b6: 6e:05:7e:c8:0e:e4:05:d2:57:e4:96:0e:2a:b1:14: 17:9d:4f:cc:d9:57:c8:bc:d0:34:c9:f0:fa:af:f2: 30:63:4f:52:35:0e:a7:6b:9e:32:be:a2:55:21:91: a0:12:7a:fb:db:58:27:7a:0e:54:59:ce:41:41:62: ac:9e:69:12:25:c0:1a:4d:c0:f1:08:64:d8:db:77: 09:61:b3:33:00:18:61:fd:3b:af:fd:20:16:36:b7: a3:2b:98:cf:ec:95:21:e8:6a:f6:f2:d4:28:f1:6c: 7c:ed:22:73:36:c0:f1:6c:cb:13:d9:f3:b9:b3:22: 6a:f2:7e:a1:11:90:fc:0a:26:82:d4:90:05:ab:77: db:64:bb:f1:54:b3:91:05:19:63:64:79:c9:db:97: 53:b3:36:b8:fe:f3:fd:c8:02:97:01:2a:6f:d2:66: b1:84:73:82:3d:a7:cd:7f:f8:61:ee:2e:b5:78:c6: 30:3f:73:34:92:f5:16:a1:93:88:f2:00:03:26:98: 7e:ef:1f:cf:50:4f:fb:a1:88:de:a3:3a:a9:03:24: ff:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6F:A9:D8:35:5B:40:41:A0:E8:54:F5:33:B0:B6:45:60:F7:9C:98:08 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A9001C1AF8BA512DE0C413F6A9FB7CA6D38B6DC591008C58A679ECFE29386C77/0/6FA9D8355B4041A0E854F533B0B64560F79C9808.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.233.154.0/23 IPv6: 2803:1d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272051 Signature Algorithm: sha256WithRSAEncryption 23:4c:ea:a6:a3:0f:4d:2a:da:7f:1f:da:32:df:ed:7f:5c:37: 29:69:82:ad:6d:52:c4:7f:ed:97:42:2a:c2:be:68:e6:8c:87: 33:cc:d7:94:90:6b:9b:34:6a:8c:cc:70:89:8d:ad:72:70:a2: ff:32:66:13:99:78:93:3c:e8:0d:59:34:00:0a:ca:75:ed:90: 0e:8d:9a:34:9d:6f:9a:d8:9c:69:ae:1f:6a:f4:84:6c:ac:12: 8e:77:2e:c6:9c:94:2a:a0:0e:d0:9d:84:d4:05:bf:4e:64:e4: 13:71:4b:e9:04:6d:88:a9:e6:df:86:ed:d3:04:67:fa:00:9e: 19:c9:ac:8b:fb:18:ee:28:6c:34:da:89:38:1d:4b:94:17:14: 1e:ae:28:ef:3d:ea:d0:6d:70:fa:02:2f:4f:42:1f:71:2a:4a: 77:cc:af:d2:7c:ce:be:d6:bd:9d:37:28:47:15:80:8a:3d:54: 29:e6:a5:88:a4:09:20:6e:2d:ec:16:d6:10:ac:16:72:47:ce: 76:2a:63:8c:3d:70:67:6a:9b:38:9f:49:aa:c0:b7:d0:b0:aa: 6e:ea:47:f0:1b:76:1b:db:69:05:91:08:1e:70:72:53:29:f4: ba:40:ff:28:05:ae:3e:d2:f1:43:47:b5:88:c3:90:f4:22:82: e3:09:3c:5f -----BEGIN CERTIFICATE----- MIIGpDCCBYygAwIBAgITUIXarfQ7IO/WedT8SF/Obi2eQjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI0MDMwNTE4MTgwM1oXDTI1MDMwNDE4MjMwM1owMzExMC8GA1UE AxMoNkZBOUQ4MzU1QjQwNDFBMEU4NTRGNTMzQjBCNjQ1NjBGNzlDOTgwODCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKC3hrA5/9tTOQ5KeNa2sZ2kcEjc WlDvA9WOAuklohuTSTHO36N4Fv0Rp4W2bgV+yA7kBdJX5JYOKrEUF51PzNlXyLzQ NMnw+q/yMGNPUjUOp2ueMr6iVSGRoBJ6+9tYJ3oOVFnOQUFirJ5pEiXAGk3A8Qhk 2Nt3CWGzMwAYYf07r/0gFja3oyuYz+yVIehq9vLUKPFsfO0iczbA8WzLE9nzubMi avJ+oRGQ/AomgtSQBat322S78VSzkQUZY2R5yduXU7M2uP7z/cgClwEqb9JmsYRz gj2nzX/4Ye4utXjGMD9zNJL1FqGTiPIAAyaYfu8fz1BP+6GI3qM6qQMk/90CAwEA AaOCA68wggOrMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFG+p2DVbQEGg6FT1 M7C2RWD3nJgIMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy9BOTAwMUMxQUY4QkE1MTJERTBDNDEzRjZB OUZCN0NBNkQzOEI2REM1OTEwMDhDNThBNjc5RUNGRTI5Mzg2Qzc3LzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljL0E5MDAxQzFBRjhCQTUxMkRFMEM0MTNGNkE5RkI3Q0E2RDM4QjZEQzU5MTAw OEM1OEE2NzlFQ0ZFMjkzODZDNzcvMC82RkE5RDgzNTVCNDA0MUEwRTg1NEY1MzNC MEI2NDU2MEY3OUM5ODA4Lm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAG16ZowDQQCAAIw BwMFACgDHRAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBCazMA0GCSqGSIb3DQEB CwUAA4IBAQAjTOqmow9NKtp/H9oy3+1/XDcpaYKtbVLEf+2XQirCvmjmjIczzNeU kGubNGqMzHCJja1ycKL/MmYTmXiTPOgNWTQACsp17ZAOjZo0nW+a2Jxprh9q9IRs rBKOdy7GnJQqoA7QnYTUBb9OZOQTcUvpBG2Iqebfhu3TBGf6AJ4ZyayL+xjuKGw0 2ok4HUuUFxQerijvPerQbXD6Ai9PQh9xKkp3zK/SfM6+1r2dNyhHFYCKPVQp5qWI pAkgbi3sFtYQrBZyR852KmOMPXBnaps4n0mqwLfQsKpu6kfwG3Yb22kFkQgecHJT KfS6QP8oBa4+0vFDR7WIw5D0IoLjCTxf -----END CERTIFICATE-----Generated at Fri Oct 25 13:07:25 2024 by rpki-client on console-fra.rpki-client.org