$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer File: A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.cer (raw, json) Hash identifier: 1nehP2+oO1TskuYRsoEVSyFaIlWK6WDFh9vMqOJVpLc= Subject key identifier: A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3C948EB38D9375B1D5A88B7F560C524AAF839FC6 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:06:33 +0000 Certificate not after: Tue 04 Mar 2025 18:11:33 +0000 Subordinate resources: AS: 52352 IP: 179.51.224.0/20 IP: 190.15.80.0/20 IP: 2803:e480::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 24 Nov 2024 23:17:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:94:8e:b3:8d:93:75:b1:d5:a8:8b:7f:56:0c:52:4a:af:83:9f:c6 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:06:33 2024 GMT Not After : Mar 4 18:11:33 2025 GMT Subject: CN=A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:89:1e:19:55:14:21:e2:5d:c3:20:8f:7c:d4:6a: 21:02:14:c3:57:54:1b:ff:38:a7:65:1c:d6:24:99: 05:ad:7f:08:07:d9:eb:2f:0a:a8:69:17:dc:98:0b: ff:73:b4:24:2b:be:6f:34:39:c3:77:9c:75:7c:69: 77:73:ef:e1:d7:d7:a9:a8:3e:e8:13:f0:7a:50:46: e0:56:70:9b:b0:b6:6f:fa:ba:e5:f9:fd:6b:54:bc: 74:d2:c2:28:64:3e:9f:1d:0d:fb:e5:de:42:25:cf: 6b:ff:02:63:a1:87:43:5f:7c:9e:79:db:d7:9b:a4: fe:fe:a0:5e:e8:76:c7:07:08:d9:dd:31:7e:b4:81: 36:9c:a8:61:c1:5a:62:c8:e5:16:91:62:46:55:58: 6b:79:73:0b:d1:b7:f8:b8:df:9e:20:27:f5:34:5b: d7:4d:af:e9:51:ff:00:31:45:dd:79:6d:29:f2:80: 36:73:e1:91:bc:8b:a2:db:0c:06:b7:c6:17:cd:d3: 5c:06:6d:5c:6e:de:ae:59:31:57:8e:b7:63:e6:27: 35:e5:81:46:89:d7:9d:4c:53:61:df:14:4f:2b:a5: 5d:2b:fa:83:80:a9:71:00:04:ee:b1:35:46:53:4d: 7b:a8:b7:c6:d4:17:9c:20:56:70:72:3e:bd:f1:12: 6d:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A6:1B:23:F8:6A:21:FE:9C:CB:4C:E1:E9:BC:92:C2:B2:10:FE:7F:C8 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C9A64611A248C351E224B4309AD36E950C94FBDEAF1044FB52D1AC9322E53924/0/A61B23F86A21FE9CCB4CE1E9BC92C2B210FE7FC8.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.51.224.0/20 190.15.80.0/20 IPv6: 2803:e480::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52352 Signature Algorithm: sha256WithRSAEncryption 7c:77:c0:27:7c:49:2f:a5:22:59:77:a1:69:0e:00:f3:93:f6: ea:a5:e7:8d:0e:12:b5:ba:d2:14:9c:71:52:3c:1f:cd:36:98: 3e:9e:b7:5e:77:8b:47:49:ef:fd:fd:c5:da:c1:29:50:2d:39: f7:e6:9a:fb:1a:52:fd:ad:1b:7d:1d:2a:5a:2f:2b:e7:49:1d: 7b:dc:a4:79:5d:86:66:f5:f1:15:cd:e8:cd:02:24:56:82:d1: 0b:ea:45:91:d6:f4:0a:de:67:33:40:6b:9e:ff:7a:c9:7a:b4: 37:93:36:ab:4b:80:c8:a6:80:65:3f:c2:ea:5f:29:a2:7e:af: ae:43:fa:68:03:df:33:62:52:bc:0c:6d:da:b9:0f:1a:40:4e: d7:d1:a6:f2:95:95:18:ac:7b:b6:bc:6d:ea:bb:7f:eb:03:c7: 73:d7:2f:95:ab:20:ff:e7:50:0d:50:e4:95:e7:cb:e7:bb:c6: 2a:0e:e7:3f:df:f0:97:54:d6:b2:af:a7:c2:00:73:53:e0:4e: d0:03:56:67:5d:af:f3:5c:a7:b5:58:f3:dc:9f:a9:4a:11:aa: d5:f6:c3:18:ac:65:11:13:15:c9:17:ac:48:a8:7f:82:13:76: 7b:d4:08:a2:74:9d:d6:7d:db:75:d3:7f:fe:77:20:5d:42:ed: 72:77:51:d2 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUPJSOs42TdbHVqIt/VgxSSq+Dn8YwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA2MzNaFw0yNTAzMDQxODExMzNaMDMxMTAvBgNV BAMTKEE2MUIyM0Y4NkEyMUZFOUNDQjRDRTFFOUJDOTJDMkIyMTBGRTdGQzgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCJHhlVFCHiXcMgj3zUaiECFMNX VBv/OKdlHNYkmQWtfwgH2esvCqhpF9yYC/9ztCQrvm80OcN3nHV8aXdz7+HX16mo PugT8HpQRuBWcJuwtm/6uuX5/WtUvHTSwihkPp8dDfvl3kIlz2v/AmOhh0NffJ55 29ebpP7+oF7odscHCNndMX60gTacqGHBWmLI5RaRYkZVWGt5cwvRt/i4354gJ/U0 W9dNr+lR/wAxRd15bSnygDZz4ZG8i6LbDAa3xhfN01wGbVxu3q5ZMVeOt2PmJzXl gUaJ151MU2HfFE8rpV0r+oOAqXEABO6xNUZTTXuot8bUF5wgVnByPr3xEm1bAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSmGyP4aiH+nMtM 4em8ksKyEP5/yDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzlBNjQ2MTFBMjQ4QzM1MUUyMjRCNDMw OUFEMzZFOTUwQzk0RkJERUFGMTA0NEZCNTJEMUFDOTMyMkU1MzkyNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DOUE2NDYxMUEyNDhDMzUxRTIyNEI0MzA5QUQzNkU5NTBDOTRGQkRFQUYx MDQ0RkI1MkQxQUM5MzIyRTUzOTI0LzAvQTYxQjIzRjg2QTIxRkU5Q0NCNENFMUU5 QkM5MkMyQjIxMEZFN0ZDOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEszPgAwQEvg9Q MA0EAgACMAcDBQAoA+SAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMgDANBgkq hkiG9w0BAQsFAAOCAQEAfHfAJ3xJL6UiWXehaQ4A85P26qXnjQ4StbrSFJxxUjwf zTaYPp63XneLR0nv/f3F2sEpUC059+aa+xpS/a0bfR0qWi8r50kde9ykeV2GZvXx Fc3ozQIkVoLRC+pFkdb0Ct5nM0Brnv96yXq0N5M2q0uAyKaAZT/C6l8pon6vrkP6 aAPfM2JSvAxt2rkPGkBO19Gm8pWVGKx7trxt6rt/6wPHc9cvlasg/+dQDVDklefL 57vGKg7nP9/wl1TWsq+nwgBzU+BO0ANWZ12v81yntVjz3J+pShGq1fbDGKxlERMV yResSKh/ghN2e9QIonSd1n3bddN//ncgXULtcndR0g== -----END CERTIFICATE-----Generated at Thu Nov 21 21:38:11 2024 by rpki-client on console-ams.rpki-client.org