$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer File: 8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.cer (raw, json) Hash identifier: KsyX33odDdM8lplhKssRo/gbuRDeDO+5f6HrsQV6Jbc= Subject key identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2C4D53C49D9CAD1793DDDEB55C54850F833E72 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:11:46 +0000 Certificate not after: Tue 04 Mar 2025 18:16:46 +0000 Subordinate resources: AS: 273138 IP: 2803:f450::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:4d:53:c4:9d:9c:ad:17:93:dd:de:b5:5c:54:85:0f:83:3e:72 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:11:46 2024 GMT Not After : Mar 4 18:16:46 2025 GMT Subject: CN=8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:1c:48:57:f6:46:f9:3b:d6:a7:15:df:8a:5c: f3:8e:bb:45:19:ae:99:18:9d:b9:94:c1:e4:cb:ea: ad:b9:f7:70:30:4b:a6:07:3b:ff:24:ef:6b:47:57: ba:29:b1:8c:3c:40:84:eb:5c:2c:85:8d:2b:b9:8a: c2:67:b8:05:65:24:e7:1e:70:5a:78:2f:20:af:18: 20:5e:ea:63:e8:ef:c8:9b:00:96:f3:70:7a:40:2b: 75:da:1b:d8:fd:60:31:20:32:e6:81:23:a3:33:1a: 48:31:df:cc:61:88:b4:54:3c:70:bf:16:a0:14:83: 34:30:fc:9f:71:6e:77:da:cb:ab:5d:b0:8f:99:6c: 17:6f:3b:b9:a9:e1:dc:3b:be:3b:e9:25:41:a6:39: 7b:5e:84:0b:c1:56:ff:b9:72:6c:dc:6c:00:4f:0c: 8a:2f:63:69:ba:4a:8c:56:c7:6c:88:7b:2b:9a:14: 5f:0b:9d:c5:4f:69:22:b2:60:b4:b4:25:d1:5b:60: e8:77:8d:02:c2:85:59:87:01:74:d6:13:03:d0:45: 01:3f:35:c4:25:51:83:8f:a7:5d:a7:ae:86:b3:52: 77:d2:7e:b9:be:d7:47:ba:33:41:06:4d:a8:fb:01: b9:57:73:b2:a5:f8:27:f0:37:7f:5f:53:f8:0a:3e: 7e:ad Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:07:FC:2E:71:1E:E9:10:2C:30:75:B9:D8:94:FA:6F:EA:2F:AE:41 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/803FAC90E02D22FFFA03384519DA5D8F243A13A2DBC39697616D11157F1B8D11/0/8A07FC2E711EE9102C3075B9D894FA6FEA2FAE41.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:f450::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273138 Signature Algorithm: sha256WithRSAEncryption 76:da:5f:d6:0f:e0:d7:ac:48:3a:bc:80:e8:7a:f6:a9:dd:4c: ed:fe:fc:27:4d:5e:89:57:7f:7d:03:e6:d9:06:5f:30:78:64: 13:50:ce:56:cc:43:6b:47:c5:a0:aa:38:77:41:f4:6c:96:06: 81:fa:29:d9:80:96:cc:24:d1:b0:2f:28:97:2d:d1:57:1c:7e: b4:22:c3:0e:16:fc:d8:79:31:97:02:05:17:0e:2f:a5:a1:f3: 7b:c7:e7:56:c8:e3:00:56:08:2b:a7:ca:1e:78:10:9c:7e:58: d8:58:40:76:d9:bc:6b:e9:df:77:16:8d:7d:90:ae:b4:73:7c: a7:c2:1f:ea:e5:67:34:20:ab:a3:7f:b6:00:b9:9f:93:1f:ad: 9c:74:5b:5e:5b:02:fe:02:31:fb:07:0e:7c:13:2d:d3:4b:23: 8a:19:22:33:35:ef:f4:44:53:61:c6:fa:37:69:5e:5c:be:51: ad:58:dc:30:41:e8:67:7c:2a:b0:ad:69:b8:2a:fd:72:7d:bd: 48:2d:ea:82:ee:8a:69:ba:a4:5f:dd:70:bc:f5:dd:ba:72:2f: 70:e5:bb:a3:27:b0:b1:c7:54:47:9a:05:1a:47:11:56:76:c7: 05:e3:25:5d:3c:7f:23:df:97:be:24:7c:69:7c:91:53:a7:a9: 55:27:bb:0d -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgITLE1TxJ2crReT3d61XFSFD4M+cjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI0MDMwNTE4MTE0NloXDTI1MDMwNDE4MTY0NlowMzExMC8GA1UE AxMoOEEwN0ZDMkU3MTFFRTkxMDJDMzA3NUI5RDg5NEZBNkZFQTJGQUU0MTCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKccSFf2Rvk71qcV34pc8467RRmu mRiduZTB5Mvqrbn3cDBLpgc7/yTva0dXuimxjDxAhOtcLIWNK7mKwme4BWUk5x5w WngvIK8YIF7qY+jvyJsAlvNwekArddob2P1gMSAy5oEjozMaSDHfzGGItFQ8cL8W oBSDNDD8n3Fud9rLq12wj5lsF287uanh3Du+O+klQaY5e16EC8FW/7lybNxsAE8M ii9jabpKjFbHbIh7K5oUXwudxU9pIrJgtLQl0Vtg6HeNAsKFWYcBdNYTA9BFAT81 xCVRg4+nXaeuhrNSd9J+ub7XR7ozQQZNqPsBuVdzsqX4J/A3f19T+Ao+fq0CAwEA AaOCA6EwggOdMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFIoH/C5xHukQLDB1 udiU+m/qL65BMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy84MDNGQUM5MEUwMkQyMkZGRkEwMzM4NDUx OURBNUQ4RjI0M0ExM0EyREJDMzk2OTc2MTZEMTExNTdGMUI4RDExLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzgwM0ZBQzkwRTAyRDIyRkZGQTAzMzg0NTE5REE1RDhGMjQzQTEzQTJEQkMz OTY5NzYxNkQxMTE1N0YxQjhEMTEvMC84QTA3RkMyRTcxMUVFOTEwMkMzMDc1QjlE ODk0RkE2RkVBMkZBRTQxLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA/RQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQq8jANBgkqhkiG9w0BAQsFAAOCAQEAdtpf1g/g 16xIOryA6Hr2qd1M7f78J01eiVd/fQPm2QZfMHhkE1DOVsxDa0fFoKo4d0H0bJYG gfop2YCWzCTRsC8oly3RVxx+tCLDDhb82HkxlwIFFw4vpaHze8fnVsjjAFYIK6fK HngQnH5Y2FhAdtm8a+nfdxaNfZCutHN8p8If6uVnNCCro3+2ALmfkx+tnHRbXlsC /gIx+wcOfBMt00sjihkiMzXv9ERTYcb6N2leXL5RrVjcMEHoZ3wqsK1puCr9cn29 SC3qgu6KabqkX91wvPXdunIvcOW7oyewscdUR5oFGkcRVnbHBeMlXTx/I9+XviR8 aXyRU6epVSe7DQ== -----END CERTIFICATE-----Generated at Fri Nov 22 03:51:10 2024 by rpki-client on console-fra.rpki-client.org