$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/98375F77F0F93F2A707052E2273D5F5F579A325C.cer File: 98375F77F0F93F2A707052E2273D5F5F579A325C.cer (raw, json) Hash identifier: 0Kn0UxcR11qKrhTABc7lEIlMRKLcRDcO7oLIdi6KXBo= Subject key identifier: 98:37:5F:77:F0:F9:3F:2A:70:70:52:E2:27:3D:5F:5F:57:9A:32:5C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 77BDA93317A6722DD671BD055F6A97A290BED595 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:14:11 +0000 Certificate not after: Tue 04 Mar 2025 18:19:11 +0000 Subordinate resources: AS: 272064 IP: 181.232.160.0/22 IP: 2803:e310::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:bd:a9:33:17:a6:72:2d:d6:71:bd:05:5f:6a:97:a2:90:be:d5:95 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:14:11 2024 GMT Not After : Mar 4 18:19:11 2025 GMT Subject: CN=98375F77F0F93F2A707052E2273D5F5F579A325C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:98:8d:7b:0d:3a:da:6f:61:40:95:1a:45:25: 47:f0:2e:ba:c1:0a:95:95:de:9c:5b:4f:b5:cc:1f: a9:be:ac:e5:6c:4e:8b:7f:23:01:af:7a:39:4a:d5: b2:5e:6e:be:6b:03:d8:ca:01:e3:b9:ec:4d:09:d3: 2b:52:4f:7b:6b:c8:02:34:b4:d2:74:c0:42:b3:84: 88:19:dc:ec:55:92:5b:90:08:27:95:da:e0:45:f4: 5f:65:b3:70:d1:16:42:2c:04:5e:da:8f:57:2f:7c: 4d:ab:e9:2a:31:8f:1d:0d:1a:84:23:ef:0e:15:f5: 71:14:34:41:31:e6:c9:a9:e3:47:2d:de:09:66:04: d8:b6:2d:bc:80:14:71:36:9f:2e:22:47:8b:cc:da: 3c:71:cd:65:5d:da:f5:19:dd:8b:c3:7b:a7:c8:7c: f7:1d:a6:5e:db:06:34:82:06:fe:d3:56:87:38:ed: 87:75:83:6c:4f:33:fb:82:bb:0e:66:1b:aa:fb:0d: 96:e8:bf:4e:03:6d:c4:b1:1e:ce:9d:4b:c7:1f:a3: 6c:86:bc:6f:af:87:a0:c1:d7:28:64:1b:be:8b:cc: 68:b2:29:17:3b:97:1b:69:86:56:13:da:a6:46:47: 2e:b5:cd:0d:3d:5e:6f:66:0e:f0:e4:89:57:d0:55: 15:35 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 98:37:5F:77:F0:F9:3F:2A:70:70:52:E2:27:3D:5F:5F:57:9A:32:5C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9F0DB3ACCC55AB276038B37DA2F836F4772891B164D27A13D7E11000960B33FD/0/98375F77F0F93F2A707052E2273D5F5F579A325C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.232.160.0/22 IPv6: 2803:e310::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272064 Signature Algorithm: sha256WithRSAEncryption 5a:88:20:2d:80:4c:7c:17:b1:fb:ff:05:3e:67:ae:5d:61:33: 72:8d:92:7c:34:51:75:78:7e:6a:68:07:c1:16:b3:e1:24:de: 27:d3:23:e5:08:e7:35:08:9f:2e:01:b5:34:c5:d9:cb:48:f4: 4b:14:a3:96:a5:d7:31:78:02:cf:20:b0:c9:bd:79:57:9f:03: 74:eb:68:d6:c0:47:9f:a7:4e:81:74:f3:d9:fa:6e:91:3a:ca: f9:8a:dd:1e:3e:39:39:6f:9a:74:60:60:bf:b8:c0:5f:27:15: 89:da:45:b9:63:2a:bd:6d:32:e1:f9:cf:2c:f3:d6:fa:fe:1c: a5:56:cc:27:20:c3:04:34:ee:2f:11:1f:9f:86:3c:17:ac:fa: 2b:6d:15:d6:62:b0:cf:e3:a4:8f:cd:30:2e:04:34:2f:b6:b8: a9:c8:86:ba:b8:dc:fe:bb:60:ab:d8:57:8a:6d:a6:93:cd:e1: e2:44:87:ea:f1:46:5d:61:ac:38:04:ae:5d:35:a1:3c:6c:91: 33:9a:d0:98:f8:73:b3:51:6d:a0:70:09:a0:5d:0a:49:b7:4c: 29:66:ad:d3:95:73:32:fa:c9:80:db:17:c3:ee:f9:71:0d:f9: a2:1e:b4:2b:34:24:1e:22:04:19:44:a9:a8:c3:cf:e1:d0:7b: bd:78:4a:67 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUd72pMxemci3Wcb0FX2qXopC+1ZUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE0MTFaFw0yNTAzMDQxODE5MTFaMDMxMTAvBgNV BAMTKDk4Mzc1Rjc3RjBGOTNGMkE3MDcwNTJFMjI3M0Q1RjVGNTc5QTMyNUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPmI17DTrab2FAlRpFJUfwLrrB CpWV3pxbT7XMH6m+rOVsTot/IwGvejlK1bJebr5rA9jKAeO57E0J0ytST3tryAI0 tNJ0wEKzhIgZ3OxVkluQCCeV2uBF9F9ls3DRFkIsBF7aj1cvfE2r6Soxjx0NGoQj 7w4V9XEUNEEx5smp40ct3glmBNi2LbyAFHE2ny4iR4vM2jxxzWVd2vUZ3YvDe6fI fPcdpl7bBjSCBv7TVoc47Yd1g2xPM/uCuw5mG6r7DZbov04DbcSxHs6dS8cfo2yG vG+vh6DB1yhkG76LzGiyKRc7lxtphlYT2qZGRy61zQ09Xm9mDvDkiVfQVRU1AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSYN1938Pk/KnBw UuInPV9fV5oyXDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUYwREIzQUNDQzU1QUIyNzYwMzhCMzdE QTJGODM2RjQ3NzI4OTFCMTY0RDI3QTEzRDdFMTEwMDA5NjBCMzNGRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85RjBEQjNBQ0NDNTVBQjI3NjAzOEIzN0RBMkY4MzZGNDc3Mjg5MUIxNjRE MjdBMTNEN0UxMTAwMDk2MEIzM0ZELzAvOTgzNzVGNzdGMEY5M0YyQTcwNzA1MkUy MjczRDVGNUY1NzlBMzI1Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCteigMA0EAgAC MAcDBQAoA+MQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmwDANBgkqhkiG9w0B AQsFAAOCAQEAWoggLYBMfBex+/8FPmeuXWEzco2SfDRRdXh+amgHwRaz4STeJ9Mj 5QjnNQifLgG1NMXZy0j0SxSjlqXXMXgCzyCwyb15V58DdOto1sBHn6dOgXTz2fpu kTrK+YrdHj45OW+adGBgv7jAXycVidpFuWMqvW0y4fnPLPPW+v4cpVbMJyDDBDTu LxEfn4Y8F6z6K20V1mKwz+Okj80wLgQ0L7a4qciGurjc/rtgq9hXim2mk83h4kSH 6vFGXWGsOASuXTWhPGyRM5rQmPhzs1FtoHAJoF0KSbdMKWat05VzMvrJgNsXw+75 cQ35oh60KzQkHiIEGUSpqMPP4dB7vXhKZw== -----END CERTIFICATE-----Generated at Fri May 31 20:32:56 2024 by rpki-client on console-ams.rpki-client.org