$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer File: 923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.cer (raw, json) Hash identifier: c5EZxhM1gV0lYsHhj56fWRFMD5qX6a96owYvFQk3EMA= Subject key identifier: 92:35:04:C7:D1:9C:7A:7C:E0:F0:53:B7:B1:BD:A2:8A:0F:9E:1F:54 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4D117534FF9B96F0508CE4CFBF9DE58FFE46E632 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:02:00 +0000 Certificate not after: Tue 04 Mar 2025 18:07:00 +0000 Subordinate resources: AS: 272057 IP: 187.63.156.0/22 IP: 2803:7d10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:11:75:34:ff:9b:96:f0:50:8c:e4:cf:bf:9d:e5:8f:fe:46:e6:32 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:02:00 2024 GMT Not After : Mar 4 18:07:00 2025 GMT Subject: CN=923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c2:d7:06:6e:3d:13:57:f8:f3:f0:3c:ba:20:13: 78:14:14:e7:d9:9b:8c:57:ed:b8:96:ac:ea:1d:5d: fb:c9:72:4f:28:f3:aa:78:08:5f:75:5e:92:4c:29: 7a:84:ea:c3:6d:15:e0:fc:4d:71:a1:fe:1c:52:09: 89:89:19:51:dc:9d:67:99:ef:11:8f:48:55:ed:0b: 4e:75:60:51:92:bb:79:b9:b3:56:85:fc:89:25:de: dd:21:4d:dc:1d:86:6e:a3:ad:26:ad:ec:93:99:08: 71:c7:c4:44:3f:ed:31:7b:cd:7d:e3:1d:32:4e:a7: 0e:28:17:8e:ec:09:7f:72:fb:f9:40:e5:3e:a0:08: 8e:63:07:8b:52:5a:51:94:36:00:7d:4b:4a:6c:94: 88:ca:9b:37:4b:77:a9:24:be:94:ed:3a:56:f6:cc: d7:36:96:87:42:28:db:71:9b:14:9c:a4:0a:22:ef: e0:48:c6:5d:80:14:73:66:91:43:ad:42:57:4d:9e: 5e:55:fa:ab:e0:76:a0:dd:f4:82:85:49:37:2f:30: 5a:93:ec:e2:a7:9d:da:a4:b0:a6:2d:be:2b:3c:96: 56:35:1e:89:36:be:e1:d6:5d:65:58:0a:e6:b0:ea: 75:bd:9c:2a:f7:e4:20:94:fb:b5:c6:b4:4b:2f:ef: ba:a7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 92:35:04:C7:D1:9C:7A:7C:E0:F0:53:B7:B1:BD:A2:8A:0F:9E:1F:54 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D3DB546456EE585FDB3D3AB0B45FBBB6D5166A5A7973E0F23E12DDF81BBB477D/0/923504C7D19C7A7CE0F053B7B1BDA28A0F9E1F54.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 187.63.156.0/22 IPv6: 2803:7d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272057 Signature Algorithm: sha256WithRSAEncryption 4e:af:0a:bf:a4:ce:c4:2c:83:fb:83:2e:da:41:55:3f:de:15: 4c:4d:84:ca:56:7a:2f:a6:5f:5d:ec:e3:da:ec:b6:f7:1b:72: 29:a1:e7:3e:bd:91:43:f1:a6:6b:36:1e:c2:e5:14:d7:28:e8: 61:c9:6e:01:f0:c4:97:5f:57:9c:5b:43:7d:85:1e:ab:01:3a: 06:e7:6d:94:b1:2a:71:2e:56:7f:df:59:fd:ed:fa:c1:59:b3: d2:94:82:8c:f7:d4:a5:4d:2d:be:78:df:70:81:5d:de:85:19: 59:56:8a:9c:27:e4:51:cd:8d:81:a2:da:4f:4e:9d:ad:eb:20: 30:ec:91:e3:4e:86:cd:34:42:04:8f:e8:ae:a5:e2:e1:a2:bf: 39:ee:53:91:19:d3:2d:ba:2f:41:bf:89:8f:a0:df:0d:7c:41: 10:e2:41:14:f4:18:47:21:b6:c1:75:f4:0d:3a:6a:f4:95:35: c4:99:d7:1a:e1:35:ac:1d:17:62:9f:ed:88:5c:d0:6e:ab:43: 09:61:2b:6d:c7:2f:6c:4d:c0:50:09:91:83:bd:de:3f:21:69: 8c:ab:db:b1:8c:5a:d6:11:03:a9:b8:2e:bb:0c:6c:11:e5:4c: d9:65:37:0b:ba:11:46:01:b8:7c:02:72:05:5a:c1:11:ad:99: f0:eb:6b:81 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTRF1NP+blvBQjOTPv53lj/5G5jIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODAyMDBaFw0yNTAzMDQxODA3MDBaMDMxMTAvBgNV BAMTKDkyMzUwNEM3RDE5QzdBN0NFMEYwNTNCN0IxQkRBMjhBMEY5RTFGNTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDC1wZuPRNX+PPwPLogE3gUFOfZ m4xX7biWrOodXfvJck8o86p4CF91XpJMKXqE6sNtFeD8TXGh/hxSCYmJGVHcnWeZ 7xGPSFXtC051YFGSu3m5s1aF/Ikl3t0hTdwdhm6jrSat7JOZCHHHxEQ/7TF7zX3j HTJOpw4oF47sCX9y+/lA5T6gCI5jB4tSWlGUNgB9S0pslIjKmzdLd6kkvpTtOlb2 zNc2lodCKNtxmxScpAoi7+BIxl2AFHNmkUOtQldNnl5V+qvgdqDd9IKFSTcvMFqT 7OKnndqksKYtvis8llY1Hok2vuHWXWVYCuaw6nW9nCr35CCU+7XGtEsv77qnAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSSNQTH0Zx6fODw U7exvaKKD54fVDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDNEQjU0NjQ1NkVFNTg1RkRCM0QzQUIw QjQ1RkJCQjZENTE2NkE1QTc5NzNFMEYyM0UxMkRERjgxQkJCNDc3RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EM0RCNTQ2NDU2RUU1ODVGREIzRDNBQjBCNDVGQkJCNkQ1MTY2QTVBNzk3 M0UwRjIzRTEyRERGODFCQkI0NzdELzAvOTIzNTA0QzdEMTlDN0E3Q0UwRjA1M0I3 QjFCREEyOEEwRjlFMUY1NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCuz+cMA0EAgAC MAcDBQAoA30QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmuTANBgkqhkiG9w0B AQsFAAOCAQEATq8Kv6TOxCyD+4Mu2kFVP94VTE2EylZ6L6ZfXezj2uy29xtyKaHn Pr2RQ/GmazYewuUU1yjoYcluAfDEl19XnFtDfYUeqwE6BudtlLEqcS5Wf99Z/e36 wVmz0pSCjPfUpU0tvnjfcIFd3oUZWVaKnCfkUc2NgaLaT06dresgMOyR406GzTRC BI/orqXi4aK/Oe5TkRnTLbovQb+Jj6DfDXxBEOJBFPQYRyG2wXX0DTpq9JU1xJnX GuE1rB0XYp/tiFzQbqtDCWErbccvbE3AUAmRg73ePyFpjKvbsYxa1hEDqbguuwxs EeVM2WU3C7oRRgG4fAJyBVrBEa2Z8OtrgQ== -----END CERTIFICATE-----Generated at Fri May 31 20:32:56 2024 by rpki-client on console-ams.rpki-client.org