$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.cer File: 80A53E67144E880301B97ABC088CC16DBB2D67EA.cer (raw, json) Hash identifier: yhlX9xdNWvmEkQWeptXAXciG0k6Vsc7pOzFc/KmqENU= Subject key identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2F6D1AF3373BF22A69FEA0DF06D16E4C34AB41C2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 12 Jul 2024 06:15:01 +0000 Certificate not after: Fri 11 Jul 2025 06:20:01 +0000 Subordinate resources: AS: 52258 IP: 200.81.56.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:6d:1a:f3:37:3b:f2:2a:69:fe:a0:df:06:d1:6e:4c:34:ab:41:c2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jul 12 06:15:01 2024 GMT Not After : Jul 11 06:20:01 2025 GMT Subject: CN=80A53E67144E880301B97ABC088CC16DBB2D67EA Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:90:12:a2:b3:06:ff:44:0d:33:ed:01:c5:98:75: 38:ab:69:4c:11:b8:89:77:b8:25:32:50:88:8a:64: 61:8e:ed:8d:a1:ac:9d:dc:2b:83:03:5d:1d:d0:52: ee:11:27:de:5f:44:25:ab:a6:87:01:0f:f0:6b:ea: 2d:51:30:d3:75:58:95:f9:26:1c:c2:12:c4:4e:4c: 0d:24:ca:fa:f9:91:b5:53:df:eb:11:c5:11:a2:f5: b0:9c:23:5f:c4:cb:ff:27:bc:79:f5:ee:dc:ff:14: a8:fe:67:f0:f0:32:37:61:a8:38:09:1f:14:55:f3: 1b:76:e1:20:87:cf:e9:f5:d1:fb:67:fb:e8:df:d7: f7:ba:ab:ee:34:14:83:56:15:e1:37:c8:03:7f:9f: 4d:43:2f:16:d4:0a:e2:a7:53:00:ec:7d:e5:5f:59: b3:b8:ee:ac:76:2a:f0:da:3a:2d:06:0b:a2:d5:2a: f9:ed:25:be:54:0d:c1:77:28:42:f2:87:60:35:1b: 78:b9:23:03:35:1e:36:49:70:70:30:92:b3:03:7d: 72:24:03:f6:44:0d:66:8e:2f:08:3a:7f:93:cf:b5: 46:55:7d:9c:71:ea:70:84:81:14:02:79:af:91:ac: bb:83:08:9f:53:22:03:ed:33:5f:d4:0a:05:ae:38: 55:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 80:A5:3E:67:14:4E:88:03:01:B9:7A:BC:08:8C:C1:6D:BB:2D:67:EA X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8BD2E0C3339F62B995EEFA138A99829CC4B576ADFB8C4BBA4BF8C3F7AC605023/0/80A53E67144E880301B97ABC088CC16DBB2D67EA.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.81.56.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52258 Signature Algorithm: sha256WithRSAEncryption 52:85:8a:2d:ca:e6:59:2c:72:2a:49:c9:80:e8:0d:25:a9:c0: 9c:a3:70:e1:b0:2f:1c:94:95:64:27:e5:69:1a:d6:60:da:ea: 27:cd:94:78:90:d1:35:9a:8c:8d:c6:12:14:6c:b7:37:39:d2: ea:a6:99:6b:f6:7c:76:b7:0c:7f:ee:56:25:9f:18:25:3f:b9: 2b:af:0a:3a:2d:5d:3c:71:b9:19:28:0c:a6:74:80:3c:3a:80: c3:3c:6a:1e:3a:58:c9:30:92:a0:38:66:f5:25:76:b2:ad:2e: e2:1e:45:2b:65:d3:f3:e0:51:e8:34:6d:bc:fc:98:f2:c0:a2: d5:54:05:05:e5:c9:02:17:d1:4c:18:b6:7e:70:d8:a7:96:40: 3d:50:1e:9e:47:e1:86:a6:a8:a1:8d:00:01:a1:fc:b6:c6:9f: 7e:fd:4d:63:31:d9:38:a7:4f:83:73:18:ff:9b:85:3a:f8:c2: 8c:4d:cc:3c:3b:36:6b:12:fa:f9:72:ef:bb:a7:2c:91:89:0b: ee:df:c4:a4:57:77:b9:0d:fb:4e:e4:c8:d2:f3:db:f5:f9:4b: bc:78:4c:3a:27:84:84:d3:fc:10:11:0f:3f:f0:13:22:32:fc: d2:07:43:cd:a7:a6:f9:15:65:ef:70:e5:70:43:23:05:84:5a: 25:ba:b8:23 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgIUL20a8zc78ipp/qDfBtFuTDSrQcIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA3MTIwNjE1MDFaFw0yNTA3MTEwNjIwMDFaMDMxMTAvBgNV BAMTKDgwQTUzRTY3MTQ0RTg4MDMwMUI5N0FCQzA4OENDMTZEQkIyRDY3RUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCQEqKzBv9EDTPtAcWYdTiraUwR uIl3uCUyUIiKZGGO7Y2hrJ3cK4MDXR3QUu4RJ95fRCWrpocBD/Br6i1RMNN1WJX5 JhzCEsROTA0kyvr5kbVT3+sRxRGi9bCcI1/Ey/8nvHn17tz/FKj+Z/DwMjdhqDgJ HxRV8xt24SCHz+n10ftn++jf1/e6q+40FINWFeE3yAN/n01DLxbUCuKnUwDsfeVf WbO47qx2KvDaOi0GC6LVKvntJb5UDcF3KELyh2A1G3i5IwM1HjZJcHAwkrMDfXIk A/ZEDWaOLwg6f5PPtUZVfZxx6nCEgRQCea+RrLuDCJ9TIgPtM1/UCgWuOFUpAgMB AAGjggOgMIIDnDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSApT5nFE6IAwG5 erwIjMFtuy1n6jAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOEJEMkUwQzMzMzlGNjJCOTk1RUVGQTEz OEE5OTgyOUNDNEI1NzZBREZCOEM0QkJBNEJGOEMzRjdBQzYwNTAyMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84QkQyRTBDMzMzOUY2MkI5OTVFRUZBMTM4QTk5ODI5Q0M0QjU3NkFERkI4 QzRCQkE0QkY4QzNGN0FDNjA1MDIzLzAvODBBNTNFNjcxNDRFODgwMzAxQjk3QUJD MDg4Q0MxNkRCQjJENjdFQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMB8GCCsGAQUFBwEHAQH/BBAwDjAMBAIAATAGAwQDyFE4MBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwDMIjANBgkqhkiG9w0BAQsFAAOCAQEAUoWKLcrm WSxyKknJgOgNJanAnKNw4bAvHJSVZCflaRrWYNrqJ82UeJDRNZqMjcYSFGy3NznS 6qaZa/Z8drcMf+5WJZ8YJT+5K68KOi1dPHG5GSgMpnSAPDqAwzxqHjpYyTCSoDhm 9SV2sq0u4h5FK2XT8+BR6DRtvPyY8sCi1VQFBeXJAhfRTBi2fnDYp5ZAPVAenkfh hqaooY0AAaH8tsaffv1NYzHZOKdPg3MY/5uFOvjCjE3MPDs2axL6+XLvu6cskYkL 7t/EpFd3uQ37TuTI0vPb9flLvHhMOieEhNP8EBEPP/ATIjL80gdDzaem+RVl73Dl cEMjBYRaJbq4Iw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:15:03 2025 by rpki-client