$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer File: A597442BE252949C19F9D69F7BF6A9CDDB54134B.cer (raw, json) Hash identifier: vDu9FO/NniMRCI57WhJELTQ4xBLxJFot0aa/FH7rmog= Subject key identifier: A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 330E15045650B541AD4D3FD09072A04B24914819 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:09:13 +0000 Certificate not after: Tue 04 Mar 2025 18:14:13 +0000 Subordinate resources: AS: 269954 IP: 190.83.78.0/23 IP: 2801:11a::/40 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 30 May 2024 00:57:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:0e:15:04:56:50:b5:41:ad:4d:3f:d0:90:72:a0:4b:24:91:48:19 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:09:13 2024 GMT Not After : Mar 4 18:14:13 2025 GMT Subject: CN=A597442BE252949C19F9D69F7BF6A9CDDB54134B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d6:df:1d:0c:7e:bd:10:d6:ec:bb:20:82:4b:e5: 4e:37:39:49:0b:60:20:bb:9f:e6:31:b3:0b:ca:b7: 70:ec:5e:e2:87:e4:e2:03:fe:a6:54:40:e1:58:e4: 47:6e:bf:5c:0a:65:c5:61:fa:f3:e7:2d:54:1a:ff: f8:77:ec:e9:03:ac:4a:a8:02:78:b4:6b:a3:fc:c5: 6f:31:12:0d:bf:d0:45:6a:2e:d8:1a:8e:8a:13:a1: 55:0c:b9:be:23:8f:43:d2:71:44:5b:c5:5b:d2:31: f0:cb:c3:c4:cc:a7:de:74:32:e7:59:7b:04:18:4a: c2:96:9d:73:c9:b5:4b:3f:c8:a0:d0:0c:6e:aa:5c: 9f:cf:80:43:ef:84:ff:52:90:8c:fc:28:3e:5c:e6: c7:d1:d5:02:52:13:4c:8d:9d:be:c9:ad:d8:d5:6e: bb:60:44:26:18:46:53:b7:6f:6a:82:2b:33:dc:dc: 35:af:49:ae:43:c1:31:a4:99:cd:9b:dd:ac:a3:db: e5:b4:4b:1d:11:a9:af:d8:64:47:f8:db:c2:2a:ec: fa:7b:0a:62:d0:4b:ff:c4:78:f2:bc:19:2f:91:96: 59:79:a7:18:c0:3e:43:e8:97:79:c2:31:b0:44:cc: 91:78:d9:c9:e4:70:d5:ca:d1:5e:64:9d:2d:96:7a: 3d:e3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A5:97:44:2B:E2:52:94:9C:19:F9:D6:9F:7B:F6:A9:CD:DB:54:13:4B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/220391039701C79346B76FB10EAB6F4717EA71ED125CCFE9B95744CF0340C919/0/A597442BE252949C19F9D69F7BF6A9CDDB54134B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.83.78.0/23 IPv6: 2801:11a::/40 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269954 Signature Algorithm: sha256WithRSAEncryption c7:52:bf:d3:cc:0b:f1:4e:93:f1:de:87:eb:15:71:1d:62:aa: a3:99:cc:f2:2c:53:4b:b0:2c:79:be:b1:53:b5:33:f7:76:e5: 2b:f1:a1:d9:78:b8:f2:52:c1:b7:bc:38:61:a1:42:5b:70:cf: b5:ae:38:30:93:35:8b:df:81:b0:90:38:8b:df:95:68:57:dc: 97:66:2c:d8:ab:12:27:5d:9b:a4:66:f8:d2:ca:c7:3f:cf:76: d9:97:2a:ee:39:fb:a3:d4:f2:3d:35:8a:b8:32:7f:04:25:44: 00:1a:bb:a1:77:cd:55:9a:20:7f:c6:69:e7:26:7d:65:91:74: a2:0b:60:a6:b2:f2:df:54:ee:4c:5c:43:35:49:f8:41:7c:8c: d3:23:e6:a9:19:2b:40:ef:a3:b9:51:a0:a8:83:f5:2c:e9:00: 9d:de:30:b9:18:04:b4:92:18:61:7c:ba:ea:86:c1:47:73:71: b4:8c:11:25:61:52:90:65:af:7c:11:f3:63:c1:16:78:e0:48: 60:cc:fa:bf:6c:66:d6:2b:75:31:7a:cc:d2:b5:b8:c2:72:b8: 0f:55:64:11:dc:87:0c:03:81:87:d2:70:5d:69:41:f9:2c:50: 14:35:15:f0:5a:bc:69:e7:f4:e5:87:1a:85:98:0f:1b:f0:b4: 15:cd:35:2f -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUMw4VBFZQtUGtTT/QkHKgSySRSBkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA5MTNaFw0yNTAzMDQxODE0MTNaMDMxMTAvBgNV BAMTKEE1OTc0NDJCRTI1Mjk0OUMxOUY5RDY5RjdCRjZBOUNEREI1NDEzNEIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDW3x0Mfr0Q1uy7IIJL5U43OUkL YCC7n+YxswvKt3DsXuKH5OID/qZUQOFY5Eduv1wKZcVh+vPnLVQa//h37OkDrEqo Ani0a6P8xW8xEg2/0EVqLtgajooToVUMub4jj0PScURbxVvSMfDLw8TMp950MudZ ewQYSsKWnXPJtUs/yKDQDG6qXJ/PgEPvhP9SkIz8KD5c5sfR1QJSE0yNnb7JrdjV brtgRCYYRlO3b2qCKzPc3DWvSa5DwTGkmc2b3ayj2+W0Sx0Rqa/YZEf428Iq7Pp7 CmLQS//EePK8GS+Rlll5pxjAPkPol3nCMbBEzJF42cnkcNXK0V5knS2Wej3jAgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSll0Qr4lKUnBn5 1p979qnN21QTSzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjIwMzkxMDM5NzAxQzc5MzQ2Qjc2RkIx MEVBQjZGNDcxN0VBNzFFRDEyNUNDRkU5Qjk1NzQ0Q0YwMzQwQzkxOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMjAzOTEwMzk3MDFDNzkzNDZCNzZGQjEwRUFCNkY0NzE3RUE3MUVEMTI1 Q0NGRTlCOTU3NDRDRjAzNDBDOTE5LzAvQTU5NzQ0MkJFMjUyOTQ5QzE5RjlENjlG N0JGNkE5Q0REQjU0MTM0Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC8GCCsGAQUFBwEHAQH/BCAwHjAMBAIAATAGAwQBvlNOMA4EAgAC MAgDBgAoAQEaADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEHoIwDQYJKoZIhvcN AQELBQADggEBAMdSv9PMC/FOk/Heh+sVcR1iqqOZzPIsU0uwLHm+sVO1M/d25Svx odl4uPJSwbe8OGGhQltwz7WuODCTNYvfgbCQOIvflWhX3JdmLNirEiddm6Rm+NLK xz/PdtmXKu45+6PU8j01irgyfwQlRAAau6F3zVWaIH/GaecmfWWRdKILYKay8t9U 7kxcQzVJ+EF8jNMj5qkZK0Dvo7lRoKiD9SzpAJ3eMLkYBLSSGGF8uuqGwUdzcbSM ESVhUpBlr3wR82PBFnjgSGDM+r9sZtYrdTF6zNK1uMJyuA9VZBHchwwDgYfScF1p QfksUBQ1FfBavGnn9OWHGoWYDxvwtBXNNS8= -----END CERTIFICATE-----Generated at Sun May 26 10:57:23 2024 by rpki-client on console-ams.rpki-client.org