$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer File: 9E957DE90D33B8FE187AF8743E44EAE92B9B7504.cer (raw, json) Hash identifier: bW1jf8nj4tGtN/pq34gd1WXuc3uoRNl2wG5QzNIwaS8= Subject key identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6646330876AF2FDB0133514100B36BDE286B2A48 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:09:39 +0000 Certificate not after: Tue 04 Mar 2025 18:14:39 +0000 Subordinate resources: AS: 264685 IP: 168.227.96.0/22 IP: 2803:340::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 66:46:33:08:76:af:2f:db:01:33:51:41:00:b3:6b:de:28:6b:2a:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:09:39 2024 GMT Not After : Mar 4 18:14:39 2025 GMT Subject: CN=9E957DE90D33B8FE187AF8743E44EAE92B9B7504 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:62:2c:32:b7:e7:6b:62:f0:0d:82:d6:c7:cd: 78:2d:81:76:2d:0d:ff:9e:87:f3:19:5b:30:9c:ee: 9c:08:5d:7c:71:f5:5c:26:a0:d3:cb:84:d7:35:63: 2f:dc:f1:7c:ce:99:5f:a7:d3:39:f5:8e:61:a5:4d: 7b:c9:73:e1:98:e6:6d:63:a8:3b:7d:da:00:a3:58: fd:16:6d:02:da:4b:62:69:a1:e6:5d:6d:f8:47:64: e1:b8:8f:de:16:6d:cd:a6:48:ff:eb:9b:76:43:db: c9:fe:80:27:c9:0a:b8:88:2d:e1:71:9a:92:61:fd: 4b:72:40:f4:02:d3:25:6a:4a:d9:d1:a8:8f:c6:0a: 9d:4d:e7:6e:a5:fd:7f:db:a5:c5:90:1a:e9:5e:a0: 39:1e:d0:68:bb:32:d8:9d:dc:e0:2a:19:ab:fc:66: 60:6f:60:92:c6:8c:3d:f1:a6:14:2d:db:97:8a:0d: ee:ef:b2:70:db:27:e5:02:e8:7a:97:7d:ee:13:42: de:e5:22:36:7a:d4:5e:57:f5:9a:e3:d3:d5:01:ef: f2:b8:61:12:cd:6f:49:b8:05:5e:51:3f:86:5a:0b: e9:79:ca:a3:06:e8:af:de:e9:a8:72:71:58:b8:4c: 62:65:49:52:87:94:95:fb:be:03:69:3d:18:5c:36: dc:63 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 9E:95:7D:E9:0D:33:B8:FE:18:7A:F8:74:3E:44:EA:E9:2B:9B:75:04 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E16419A54123693B682D6F3AE48E7B45FF823FF69ACCEA7E34DA171879D87FA3/0/9E957DE90D33B8FE187AF8743E44EAE92B9B7504.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 168.227.96.0/22 IPv6: 2803:340::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264685 Signature Algorithm: sha256WithRSAEncryption 36:2f:8f:fc:14:51:32:c9:c8:ea:8d:5e:b0:67:3c:a9:f9:44: 49:ea:8a:83:ec:6d:bd:a1:88:56:a9:ae:c7:a0:11:02:68:af: ce:12:39:ae:e5:2e:a3:0a:d7:5e:9f:5c:8b:6b:20:97:73:5e: 0a:83:1c:68:05:c5:44:72:d1:13:e5:8e:6c:6d:f8:48:7d:fe: 3c:46:e9:e6:6b:47:d4:f5:2a:44:d9:4d:0d:ac:27:a7:a0:4e: 5c:87:53:51:c2:c5:ae:b3:ce:17:d3:ae:ce:ac:93:5f:d5:de: ba:5b:59:0e:fe:b4:82:12:10:8a:ac:59:93:02:a6:89:ec:ec: c1:2d:d0:b2:f7:3f:12:a1:d1:80:a8:7f:21:1e:0d:d3:62:46: 9a:1c:00:25:7d:7c:7e:c4:fa:57:84:0b:0c:77:dd:a9:1c:d1: 35:53:8b:3f:a7:25:f1:71:0c:c9:0a:c4:fc:b7:ca:d1:ad:92: 4a:1f:79:c4:67:25:2d:da:9e:41:1f:08:c7:6e:80:17:39:95: fb:7f:36:ea:88:91:59:8f:1a:71:96:bc:b4:28:45:ab:a2:69: 1f:e3:51:3d:1f:3f:af:32:b2:18:9c:57:d9:59:a5:af:fa:44: 2d:57:58:9f:53:ed:80:47:12:60:ef:f2:dd:45:d3:60:4b:7b: ca:19:12:b2 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUZkYzCHavL9sBM1FBALNr3ihrKkgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA5MzlaFw0yNTAzMDQxODE0MzlaMDMxMTAvBgNV BAMTKDlFOTU3REU5MEQzM0I4RkUxODdBRjg3NDNFNDRFQUU5MkI5Qjc1MDQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTYiwyt+drYvANgtbHzXgtgXYt Df+eh/MZWzCc7pwIXXxx9VwmoNPLhNc1Yy/c8XzOmV+n0zn1jmGlTXvJc+GY5m1j qDt92gCjWP0WbQLaS2JpoeZdbfhHZOG4j94Wbc2mSP/rm3ZD28n+gCfJCriILeFx mpJh/UtyQPQC0yVqStnRqI/GCp1N526l/X/bpcWQGuleoDke0Gi7Mtid3OAqGav8 ZmBvYJLGjD3xphQt25eKDe7vsnDbJ+UC6HqXfe4TQt7lIjZ61F5X9Zrj09UB7/K4 YRLNb0m4BV5RP4ZaC+l5yqMG6K/e6ahycVi4TGJlSVKHlJX7vgNpPRhcNtxjAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSelX3pDTO4/hh6 +HQ+ROrpK5t1BDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTE2NDE5QTU0MTIzNjkzQjY4MkQ2RjNB RTQ4RTdCNDVGRjgyM0ZGNjlBQ0NFQTdFMzREQTE3MTg3OUQ4N0ZBMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMTY0MTlBNTQxMjM2OTNCNjgyRDZGM0FFNDhFN0I0NUZGODIzRkY2OUFD Q0VBN0UzNERBMTcxODc5RDg3RkEzLzAvOUU5NTdERTkwRDMzQjhGRTE4N0FGODc0 M0U0NEVBRTkyQjlCNzUwNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCqONgMA0EAgAC MAcDBQAoAwNAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQJ7TANBgkqhkiG9w0B AQsFAAOCAQEANi+P/BRRMsnI6o1esGc8qflESeqKg+xtvaGIVqmux6ARAmivzhI5 ruUuowrXXp9ci2sgl3NeCoMcaAXFRHLRE+WObG34SH3+PEbp5mtH1PUqRNlNDawn p6BOXIdTUcLFrrPOF9OuzqyTX9XeultZDv60ghIQiqxZkwKmiezswS3Qsvc/EqHR gKh/IR4N02JGmhwAJX18fsT6V4QLDHfdqRzRNVOLP6cl8XEMyQrE/LfK0a2SSh95 xGclLdqeQR8Ix26AFzmV+3826oiRWY8acZa8tChFq6JpH+NRPR8/rzKyGJxX2Vml r/pELVdYn1PtgEcSYO/y3UXTYEt7yhkSsg== -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:44 2024 by rpki-client on console-ams.rpki-client.org