$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.cer File: 91D78B9CDEF27F283AF72785886EF69B689AF95C.cer (raw, json) Hash identifier: Hh0GzHkAqZAFsNUqGovHcE7Dp/fc9lYB7beCkfjdhg8= Subject key identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 474B6416833A3768A249E83C1DF6405077FD3BF3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:18:15 +0000 Certificate not after: Tue 04 Mar 2025 18:23:15 +0000 Subordinate resources: AS: 269910 IP: 45.191.84.0/22 IP: 2803:ece0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 47:4b:64:16:83:3a:37:68:a2:49:e8:3c:1d:f6:40:50:77:fd:3b:f3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:18:15 2024 GMT Not After : Mar 4 18:23:15 2025 GMT Subject: CN=91D78B9CDEF27F283AF72785886EF69B689AF95C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:bb:f0:fe:e2:cb:bd:06:7d:44:ee:39:4e:a8: 85:97:8c:34:4a:3d:a3:ba:23:5c:6c:8d:2a:1f:3b: 0c:08:87:82:ac:92:6d:0c:37:75:b4:87:db:3f:d8: b0:12:9c:d1:9b:8d:d8:e9:46:27:ef:25:8c:fd:ab: a6:3f:26:00:c0:b5:90:67:9e:3a:b9:11:d3:91:54: 26:cc:b4:23:b4:6b:39:d4:c1:af:a6:b3:5f:bd:32: c4:ab:0b:25:5f:3c:a3:e0:6e:03:9e:85:dd:b7:ba: e9:31:61:db:8a:6b:0a:1b:a0:a4:dd:2a:f3:cc:52: a9:c6:80:ea:1b:6f:6d:ea:43:38:0d:dd:94:c0:57: cd:cc:6c:77:28:b4:6e:9f:76:53:20:81:cc:e7:6f: d6:95:38:7f:d0:53:c3:0f:98:8e:92:a3:64:89:43: 8e:10:df:e8:a0:8d:d7:45:ed:ce:16:0d:59:d8:df: e1:7c:c3:14:39:09:7d:d3:cb:a1:7e:35:22:bf:e5: 2c:bf:21:9f:1a:09:5f:3e:ae:b2:24:34:b7:bb:0c: 8f:e7:b0:39:ab:9c:e8:94:f9:77:af:87:3c:1e:60: dd:21:82:d2:74:41:6c:25:b3:4c:8d:6f:ec:54:92: d0:0d:c9:e1:f6:06:3f:37:85:3d:ad:fb:83:e7:d7: e1:b5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 91:D7:8B:9C:DE:F2:7F:28:3A:F7:27:85:88:6E:F6:9B:68:9A:F9:5C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/471AD7E4E2DB9E9EEE263163C14DD1A3A1A57620C482BC268EB89DF9501808FD/0/91D78B9CDEF27F283AF72785886EF69B689AF95C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.84.0/22 IPv6: 2803:ece0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269910 Signature Algorithm: sha256WithRSAEncryption bc:af:7b:85:bb:fd:1d:d3:15:f7:55:e4:9e:57:eb:26:e0:a9: f4:20:17:27:4d:f2:69:f1:87:96:3d:7b:93:a6:9e:52:15:77: da:7c:38:1d:04:70:e8:f9:0f:fb:d2:67:ab:1c:33:57:c8:e4: 79:85:4e:a9:ec:95:cd:fe:df:d5:cb:fc:01:ff:9d:ea:98:e7: ea:49:a1:d3:0b:39:ba:53:14:7f:b7:de:32:f2:8b:da:99:31: 7d:62:41:bb:d0:28:ed:de:0e:9e:7a:cc:02:6f:1b:b3:a4:1d: 69:e8:7d:53:35:20:c6:34:33:06:fd:b6:e2:d3:86:33:dc:36: 54:fa:f1:1d:8a:fe:90:68:a3:6a:93:1d:0f:cc:fc:ad:ac:70: 09:01:89:01:c8:12:df:8f:53:79:14:08:69:d9:44:af:16:fd: a7:7e:0d:1c:95:3a:45:0c:ff:0c:c2:4a:f1:fb:f7:f2:3e:02: bb:e3:ca:1c:c3:8b:df:ae:d8:af:31:74:85:92:53:90:6a:ac: 3e:4e:6c:19:c4:aa:23:40:42:90:16:66:19:9a:da:1e:d9:76: 6c:59:3c:b2:68:f4:70:4a:7f:d0:db:85:6b:4c:71:2e:e5:0c: 12:db:17:39:a6:9b:da:e0:46:6b:fc:c1:f7:bd:b2:1c:58:de: 81:83:72:2c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUR0tkFoM6N2iiSeg8HfZAUHf9O/MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE4MTVaFw0yNTAzMDQxODIzMTVaMDMxMTAvBgNV BAMTKDkxRDc4QjlDREVGMjdGMjgzQUY3Mjc4NTg4NkVGNjlCNjg5QUY5NUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4u/D+4su9Bn1E7jlOqIWXjDRK PaO6I1xsjSofOwwIh4Kskm0MN3W0h9s/2LASnNGbjdjpRifvJYz9q6Y/JgDAtZBn njq5EdORVCbMtCO0aznUwa+ms1+9MsSrCyVfPKPgbgOehd23uukxYduKawoboKTd KvPMUqnGgOobb23qQzgN3ZTAV83MbHcotG6fdlMggcznb9aVOH/QU8MPmI6So2SJ Q44Q3+igjddF7c4WDVnY3+F8wxQ5CX3Ty6F+NSK/5Sy/IZ8aCV8+rrIkNLe7DI/n sDmrnOiU+XevhzweYN0hgtJ0QWwls0yNb+xUktANyeH2Bj83hT2t+4Pn1+G1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSR14uc3vJ/KDr3 J4WIbvabaJr5XDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDcxQUQ3RTRFMkRCOUU5RUVFMjYzMTYz QzE0REQxQTNBMUE1NzYyMEM0ODJCQzI2OEVCODlERjk1MDE4MDhGRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80NzFBRDdFNEUyREI5RTlFRUUyNjMxNjNDMTRERDFBM0ExQTU3NjIwQzQ4 MkJDMjY4RUI4OURGOTUwMTgwOEZELzAvOTFENzhCOUNERUYyN0YyODNBRjcyNzg1 ODg2RUY2OUI2ODlBRjk1Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb9UMA0EAgAC MAcDBQAoA+zgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeVjANBgkqhkiG9w0B AQsFAAOCAQEAvK97hbv9HdMV91XknlfrJuCp9CAXJ03yafGHlj17k6aeUhV32nw4 HQRw6PkP+9JnqxwzV8jkeYVOqeyVzf7f1cv8Af+d6pjn6kmh0ws5ulMUf7feMvKL 2pkxfWJBu9Ao7d4OnnrMAm8bs6Qdaeh9UzUgxjQzBv224tOGM9w2VPrxHYr+kGij apMdD8z8raxwCQGJAcgS349TeRQIadlErxb9p34NHJU6RQz/DMJK8fv38j4Cu+PK HMOL367YrzF0hZJTkGqsPk5sGcSqI0BCkBZmGZraHtl2bFk8smj0cEp/0NuFa0xx LuUMEtsXOaab2uBGa/zB972yHFjegYNyLA== -----END CERTIFICATE-----Generated at Wed May 15 17:47:05 2024 by rpki-client on console-fra.rpki-client.org