$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A0184F16CA92E9A0F0859AD5AF789D01612118FC.cer File: A0184F16CA92E9A0F0859AD5AF789D01612118FC.cer (raw, json) Hash identifier: ZFVvhZSCo2vaI+EQDI3rdtKiHcPAu8sGKxyMFhPJ+f8= Subject key identifier: A0:18:4F:16:CA:92:E9:A0:F0:85:9A:D5:AF:78:9D:01:61:21:18:FC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0DD41F3E59A6328F0AABA0184C34BAEFFF38B5BF Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/9CA99628EE5C4174B1099B00B21F8084FCF0CDCD90E94A56874C4D2AAD515CB1/0/A0184F16CA92E9A0F0859AD5AF789D01612118FC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/9CA99628EE5C4174B1099B00B21F8084FCF0CDCD90E94A56874C4D2AAD515CB1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:59:10 +0000 Certificate not after: Tue 04 Mar 2025 18:04:10 +0000 Subordinate resources: AS: 267917 IP: 45.177.55.0/24 IP: 45.179.196.0/23 IP: 2803:ae60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:d4:1f:3e:59:a6:32:8f:0a:ab:a0:18:4c:34:ba:ef:ff:38:b5:bf Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:59:10 2024 GMT Not After : Mar 4 18:04:10 2025 GMT Subject: CN=A0184F16CA92E9A0F0859AD5AF789D01612118FC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:e9:34:8f:ae:2a:e0:41:34:07:78:ad:e0:39: dd:bd:f8:3c:81:01:a2:2e:35:ec:d3:6b:a4:56:8b: 1e:6c:36:4a:4b:5a:0e:8e:18:f8:a0:2d:b1:28:4b: 60:d6:76:56:ba:b5:8a:92:72:c7:06:13:e1:65:98: c5:bf:d5:69:87:5d:4e:33:34:1b:11:85:03:e2:b1: dc:51:f9:4b:99:fa:3d:a8:3d:70:a4:94:63:2d:60: 21:16:79:5d:ad:33:fc:66:01:20:e9:dc:c2:ae:ae: e1:c4:00:40:f6:a6:bd:1b:ee:38:d1:ee:af:6e:84: ea:c0:6a:86:36:7b:a3:50:d8:e9:2b:6a:7e:39:8e: ad:22:46:bb:3a:68:27:49:4b:66:9a:7f:f5:6f:41: cb:f0:e5:35:02:29:fa:5d:b2:75:eb:a9:6e:53:1b: 98:8e:60:66:e2:cf:52:96:03:2d:6d:82:d7:48:7c: e1:28:ef:4e:11:71:9d:ba:61:12:60:37:56:26:f9: 95:e8:4e:3b:25:67:b1:57:40:50:53:99:48:db:dc: a9:df:15:15:5f:5f:3d:ff:da:a2:3d:ce:bf:52:2c: 11:22:e3:5b:e1:39:ea:ed:9d:5b:d8:da:9f:a1:22: b8:04:18:64:b6:a6:31:87:a1:79:01:a7:2d:ba:a3: 3a:d3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A0:18:4F:16:CA:92:E9:A0:F0:85:9A:D5:AF:78:9D:01:61:21:18:FC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9CA99628EE5C4174B1099B00B21F8084FCF0CDCD90E94A56874C4D2AAD515CB1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9CA99628EE5C4174B1099B00B21F8084FCF0CDCD90E94A56874C4D2AAD515CB1/0/A0184F16CA92E9A0F0859AD5AF789D01612118FC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.177.55.0/24 45.179.196.0/23 IPv6: 2803:ae60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267917 Signature Algorithm: sha256WithRSAEncryption de:01:ac:39:d7:89:c4:48:28:2d:00:a3:7a:4d:12:dc:67:65: 27:82:fc:37:69:28:42:84:a1:cf:42:3f:d6:b7:98:23:5d:34: af:de:df:c6:e7:59:15:ba:cf:68:00:7b:18:76:d0:fe:38:79: 63:37:1f:67:00:2d:41:06:6a:c8:41:e3:90:fd:6a:e2:08:59: 42:e6:f2:6e:8a:fb:b0:25:1c:9a:71:c6:7a:a3:1b:0e:5c:bc: 91:ec:59:f3:56:1b:b6:29:d4:3f:08:20:d6:56:63:31:94:d5: f2:47:87:07:87:fa:b3:21:1b:bc:a9:57:99:31:37:03:69:89: 2f:fb:da:0b:cc:87:74:c2:a8:36:ac:c0:ca:1e:12:4f:35:a1: 84:8f:97:0c:10:89:58:e4:0d:47:1b:b9:a8:ee:f1:05:8a:4f: 53:55:13:ba:76:a4:80:3e:b8:54:07:ff:95:9e:14:06:de:ab: 05:72:03:90:39:0b:24:fc:21:de:2e:56:f1:9b:b8:b1:cb:2b: 9b:84:7f:80:9f:e3:ec:6c:7d:22:63:f1:a3:dc:7e:db:bb:2d: 40:ef:ee:27:89:f1:63:03:c7:95:b3:ff:34:d7:30:20:47:41: dc:10:5d:5d:6f:9b:7b:49:23:9a:06:d8:d9:b0:64:94:a5:f5: fa:19:5a:41 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUDdQfPlmmMo8Kq6AYTDS67/84tb8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU5MTBaFw0yNTAzMDQxODA0MTBaMDMxMTAvBgNV BAMTKEEwMTg0RjE2Q0E5MkU5QTBGMDg1OUFENUFGNzg5RDAxNjEyMTE4RkMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDd6TSPrirgQTQHeK3gOd29+DyB AaIuNezTa6RWix5sNkpLWg6OGPigLbEoS2DWdla6tYqScscGE+FlmMW/1WmHXU4z NBsRhQPisdxR+UuZ+j2oPXCklGMtYCEWeV2tM/xmASDp3MKuruHEAED2pr0b7jjR 7q9uhOrAaoY2e6NQ2Okran45jq0iRrs6aCdJS2aaf/VvQcvw5TUCKfpdsnXrqW5T G5iOYGbiz1KWAy1tgtdIfOEo704RcZ26YRJgN1Ym+ZXoTjslZ7FXQFBTmUjb3Knf FRVfXz3/2qI9zr9SLBEi41vhOertnVvY2p+hIrgEGGS2pjGHoXkBpy26ozrTAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSgGE8WypLpoPCF mtWveJ0BYSEY/DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOUNBOTk2MjhFRTVDNDE3NEIxMDk5QjAw QjIxRjgwODRGQ0YwQ0RDRDkwRTk0QTU2ODc0QzREMkFBRDUxNUNCMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy85Q0E5OTYyOEVFNUM0MTc0QjEwOTlCMDBCMjFGODA4NEZDRjBDRENEOTBF OTRBNTY4NzRDNEQyQUFENTE1Q0IxLzAvQTAxODRGMTZDQTkyRTlBMEYwODU5QUQ1 QUY3ODlEMDE2MTIxMThGQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALbE3AwQBLbPE MA0EAgACMAcDBQAoA65gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWjTANBgkq hkiG9w0BAQsFAAOCAQEA3gGsOdeJxEgoLQCjek0S3GdlJ4L8N2koQoShz0I/1reY I100r97fxudZFbrPaAB7GHbQ/jh5YzcfZwAtQQZqyEHjkP1q4ghZQubybor7sCUc mnHGeqMbDly8kexZ81YbtinUPwgg1lZjMZTV8keHB4f6syEbvKlXmTE3A2mJL/va C8yHdMKoNqzAyh4STzWhhI+XDBCJWOQNRxu5qO7xBYpPU1UTunakgD64VAf/lZ4U Bt6rBXIDkDkLJPwh3i5W8Zu4scsrm4R/gJ/j7Gx9ImPxo9x+27stQO/uJ4nxYwPH lbP/NNcwIEdB3BBdXW+be0kjmgbY2bBklKX1+hlaQQ== -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:44 2024 by rpki-client on console-ams.rpki-client.org