$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer File: 8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.cer (raw, json) Hash identifier: VM41zOeQ0udTcY/C6TuqFR+fDO1J0a7zdW6XknmHGrQ= Subject key identifier: 87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 41155504309A01A7D6D120513C5EFFC4F6E76B3F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:00:14 +0000 Certificate not after: Tue 04 Mar 2025 18:05:14 +0000 Subordinate resources: AS: 267738 IP: 45.167.168.0/22 IP: 2803:6da0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 41:15:55:04:30:9a:01:a7:d6:d1:20:51:3c:5e:ff:c4:f6:e7:6b:3f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:00:14 2024 GMT Not After : Mar 4 18:05:14 2025 GMT Subject: CN=8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:e9:9f:00:59:62:21:9b:a4:05:0f:12:e8:ef: 05:ca:2c:66:7a:e9:ad:a1:3d:66:55:da:9f:cb:f5: 0c:45:de:df:8d:5d:1f:e6:c2:3f:77:93:95:f8:d8: 70:1c:fe:1d:bf:76:99:d1:cb:f6:ba:20:96:c3:b1: 2a:1c:12:3c:a6:0f:b8:28:f4:cf:b0:e1:82:8d:7c: ea:16:79:f6:aa:c8:e6:24:a2:0b:1e:4f:f2:ee:47: c7:80:1c:62:de:39:ba:43:1b:9e:af:0c:07:1b:f4: ee:fc:3e:20:bd:cd:db:74:4f:c7:0a:0a:ba:a9:8f: b5:a0:ea:62:83:8b:58:d7:de:90:ae:71:87:8e:7b: 83:f3:7a:2d:52:0e:21:df:5c:8f:8b:96:9f:17:70: af:a7:a0:3a:7f:59:22:0f:12:0e:9b:9a:6e:35:c2: 82:ba:b0:06:30:27:20:65:ea:a2:99:d8:1f:51:ff: a0:03:2f:6f:2c:56:77:80:44:90:34:68:30:f1:36: b6:70:3f:2a:b7:76:5e:30:55:c6:24:b9:1b:28:ab: f4:3d:06:da:77:02:da:90:19:d0:6e:3c:f5:d0:be: 7b:d3:bd:d5:05:70:32:a6:a0:3f:3a:5c:4b:ea:bc: ba:dd:2f:91:89:06:7e:7a:c1:84:66:42:46:79:8e: 61:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 87:31:93:4F:50:EF:F6:B6:DB:AA:4D:FB:4F:70:98:49:DE:02:FF:B1 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ED81E3C41EC842A2DCCA01F3F27C3D303FE9AB92540B9A025C9015D06A59906/0/8731934F50EFF6B6DBAA4DFB4F709849DE02FFB1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.167.168.0/22 IPv6: 2803:6da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267738 Signature Algorithm: sha256WithRSAEncryption ac:a5:25:85:9c:60:47:fb:da:80:53:da:c2:69:fb:15:43:f1: 51:37:2d:78:29:24:52:cc:0d:a4:36:7e:c0:08:67:07:19:e0: 3c:28:8a:73:47:d8:8b:5f:4d:f3:13:33:df:64:5f:f2:ad:f0: 0e:94:91:92:b3:8e:0a:99:e5:8e:20:a0:21:0c:51:cb:84:63: b6:cf:08:f4:0c:b2:62:00:f5:87:46:c4:e6:09:2b:b8:c5:b5: 47:11:61:ed:aa:87:f6:de:89:1b:09:3a:87:c8:7f:58:f8:0d: c8:be:91:6c:35:f1:58:aa:2a:df:a0:95:96:e3:da:5e:75:60: 0c:0d:68:83:26:06:9c:fd:84:f7:90:07:fa:ea:bc:3b:c2:fd: b0:b6:95:6a:42:7a:ca:70:3f:85:14:11:1b:a7:94:e5:42:4b: 23:75:3b:02:84:cc:c7:a1:da:56:16:0e:b2:e5:c1:59:1f:16: 15:aa:7a:d1:d7:b2:96:28:2a:14:df:88:56:1a:70:5a:87:6a: 4d:3e:61:f4:b4:97:8b:5d:de:93:97:ce:4c:78:5b:39:02:6d: 44:c9:98:7b:c6:32:9b:ee:df:3b:f7:85:b2:cf:fa:3a:2b:c9: d5:05:fc:5a:bd:fa:d5:c3:56:71:ff:f9:58:b5:79:d2:82:33: 27:f7:44:1d -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUQRVVBDCaAafW0SBRPF7/xPbnaz8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODAwMTRaFw0yNTAzMDQxODA1MTRaMDMxMTAvBgNV BAMTKDg3MzE5MzRGNTBFRkY2QjZEQkFBNERGQjRGNzA5ODQ5REUwMkZGQjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDT6Z8AWWIhm6QFDxLo7wXKLGZ6 6a2hPWZV2p/L9QxF3t+NXR/mwj93k5X42HAc/h2/dpnRy/a6IJbDsSocEjymD7go 9M+w4YKNfOoWefaqyOYkogseT/LuR8eAHGLeObpDG56vDAcb9O78PiC9zdt0T8cK Crqpj7Wg6mKDi1jX3pCucYeOe4Pzei1SDiHfXI+Llp8XcK+noDp/WSIPEg6bmm41 woK6sAYwJyBl6qKZ2B9R/6ADL28sVneARJA0aDDxNrZwPyq3dl4wVcYkuRsoq/Q9 Btp3AtqQGdBuPPXQvnvTvdUFcDKmoD86XEvqvLrdL5GJBn56wYRmQkZ5jmHlAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSHMZNPUO/2ttuq TftPcJhJ3gL/sTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNUVEODFFM0M0MUVDODQyQTJEQ0NBMDFG M0YyN0MzRDMwM0ZFOUFCOTI1NDBCOUEwMjVDOTAxNUQwNkE1OTkwNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81RUQ4MUUzQzQxRUM4NDJBMkRDQ0EwMUYzRjI3QzNEMzAzRkU5QUI5MjU0 MEI5QTAyNUM5MDE1RDA2QTU5OTA2LzAvODczMTkzNEY1MEVGRjZCNkRCQUE0REZC NEY3MDk4NDlERTAyRkZCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaeoMA0EAgAC MAcDBQAoA22gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV2jANBgkqhkiG9w0B AQsFAAOCAQEArKUlhZxgR/vagFPawmn7FUPxUTcteCkkUswNpDZ+wAhnBxngPCiK c0fYi19N8xMz32Rf8q3wDpSRkrOOCpnljiCgIQxRy4Rjts8I9AyyYgD1h0bE5gkr uMW1RxFh7aqH9t6JGwk6h8h/WPgNyL6RbDXxWKoq36CVluPaXnVgDA1ogyYGnP2E 95AH+uq8O8L9sLaVakJ6ynA/hRQRG6eU5UJLI3U7AoTMx6HaVhYOsuXBWR8WFap6 0deyligqFN+IVhpwWodqTT5h9LSXi13ek5fOTHhbOQJtRMmYe8Yym+7fO/eFss/6 OivJ1QX8Wr361cNWcf/5WLV50oIzJ/dEHQ== -----END CERTIFICATE-----Generated at Fri May 31 20:32:55 2024 by rpki-client on console-ams.rpki-client.org