$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.cer File: A78765AD08967A6A9A5165858220DC333AEEBF8D.cer (raw, json) Hash identifier: uFFeqo2ubmcUVxlddmyPWrht6WOPnJ5bps9y4jBbpBo= Subject key identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 484E75055A1F4B0653F24301102C55381BECB9AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:15:57 +0000 Certificate not after: Tue 04 Mar 2025 18:20:57 +0000 Subordinate resources: AS: 262931 IP: 191.102.240.0/22 IP: 2803:5a80::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 30 Jun 2024 04:50:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 48:4e:75:05:5a:1f:4b:06:53:f2:43:01:10:2c:55:38:1b:ec:b9:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:15:57 2024 GMT Not After : Mar 4 18:20:57 2025 GMT Subject: CN=A78765AD08967A6A9A5165858220DC333AEEBF8D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b6:83:51:6a:a6:e5:4e:f0:03:0c:1d:dc:f7:60: 46:76:ed:e3:9e:d1:c2:64:ef:3d:1e:9c:8a:89:8c: 56:cb:36:5c:9d:ed:9e:80:a6:dc:bb:b7:b9:77:95: e1:16:b2:eb:fd:94:e3:62:2c:41:3a:8f:50:53:c0: 5b:c1:3a:7c:0e:1c:79:0e:c4:c6:6f:19:92:f5:11: 13:b5:ef:60:5e:29:3c:21:8c:87:c8:46:f1:df:1c: 80:41:7c:de:41:a3:1a:90:2e:ae:25:af:a5:0c:09: 12:9e:6d:d3:5a:a5:e6:c2:69:db:eb:49:e1:1e:2c: c6:1f:7e:96:f4:6f:70:1b:d8:04:9b:f5:ef:d1:72: 4c:3a:6f:29:75:11:f7:c4:7b:20:0f:65:8f:fa:9a: d1:7f:4a:b2:e3:26:90:31:99:f9:42:99:46:9a:42: 7d:60:64:94:80:c1:28:5b:c1:ca:59:d2:dc:03:fd: 06:bc:f6:82:40:8c:5b:ab:6d:7f:48:49:64:b1:e9: 9f:b8:71:98:5f:ae:86:9a:b8:b9:b8:6e:76:d9:95: c0:a7:cb:da:51:79:c8:57:3e:98:19:67:8f:9c:21: 7d:77:5a:61:02:0c:6d:91:96:18:5e:f1:28:0a:10: 17:2e:d4:8f:8f:ac:4a:3b:df:c9:84:b1:f2:af:e5: 2a:d1 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:87:65:AD:08:96:7A:6A:9A:51:65:85:82:20:DC:33:3A:EE:BF:8D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DE56898DC87FDB54ED5CF0F204F52F7481694B300B9AC6CB0E9687EF940CE7AE/0/A78765AD08967A6A9A5165858220DC333AEEBF8D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 191.102.240.0/22 IPv6: 2803:5a80::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 262931 Signature Algorithm: sha256WithRSAEncryption 56:9a:d7:63:e4:b2:18:57:67:d2:5b:80:7b:d6:c7:d2:be:1d: ec:6d:2b:ad:46:14:84:f4:c5:6a:a9:9f:3a:19:5a:e4:5d:50: 27:89:3f:7d:05:a1:99:c9:5f:94:f2:25:af:32:93:cd:ef:b1: ed:3e:a7:29:4a:5f:da:ea:53:79:dc:1e:ac:06:f1:ff:47:93: d3:9d:f1:03:6c:2c:bd:a3:be:42:0a:3c:15:63:9d:36:f7:80: 97:46:86:a2:0b:97:ac:09:f6:00:48:21:dc:7a:a8:5c:13:e8: 6a:58:47:62:c5:29:77:06:51:9e:bd:45:21:d1:9b:27:7d:93: d6:8c:b3:8b:cf:4a:76:9c:c8:ab:04:88:7e:49:a5:17:e5:03: 68:79:6c:eb:9b:be:ea:3d:3d:87:5f:4b:49:e4:e6:0f:02:a0: f4:7b:a6:bf:77:0f:3e:e8:e6:c2:9c:ce:01:a7:73:80:fb:6f: 24:1a:0e:08:f9:12:af:48:1d:40:dd:22:ea:f4:a5:65:0b:db: af:33:7d:ab:77:2d:7c:42:7b:c9:b4:a1:5e:e3:d8:23:6b:21: d2:cb:a2:f0:6a:0e:f3:c6:5e:67:1f:2c:59:33:ca:58:3c:bd: 1f:8c:1c:cb:6c:76:2f:55:b1:47:68:8b:eb:97:5c:28:9f:db: a5:93:1e:56 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUSE51BVofSwZT8kMBECxVOBvsuaowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE1NTdaFw0yNTAzMDQxODIwNTdaMDMxMTAvBgNV BAMTKEE3ODc2NUFEMDg5NjdBNkE5QTUxNjU4NTgyMjBEQzMzM0FFRUJGOEQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC2g1FqpuVO8AMMHdz3YEZ27eOe 0cJk7z0enIqJjFbLNlyd7Z6Apty7t7l3leEWsuv9lONiLEE6j1BTwFvBOnwOHHkO xMZvGZL1ERO172BeKTwhjIfIRvHfHIBBfN5BoxqQLq4lr6UMCRKebdNapebCadvr SeEeLMYffpb0b3Ab2ASb9e/Rckw6byl1EffEeyAPZY/6mtF/SrLjJpAxmflCmUaa Qn1gZJSAwShbwcpZ0twD/Qa89oJAjFurbX9ISWSx6Z+4cZhfroaauLm4bnbZlcCn y9pRechXPpgZZ4+cIX13WmECDG2Rlhhe8SgKEBcu1I+PrEo738mEsfKv5SrRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnh2WtCJZ6appR ZYWCINwzOu6/jTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREU1Njg5OERDODdGREI1NEVENUNGMEYy MDRGNTJGNzQ4MTY5NEIzMDBCOUFDNkNCMEU5Njg3RUY5NDBDRTdBRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERTU2ODk4REM4N0ZEQjU0RUQ1Q0YwRjIwNEY1MkY3NDgxNjk0QjMwMEI5 QUM2Q0IwRTk2ODdFRjk0MENFN0FFLzAvQTc4NzY1QUQwODk2N0E2QTlBNTE2NTg1 ODIyMERDMzMzQUVFQkY4RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCv2bwMA0EAgAC MAcDBQAoA1qAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQDEzANBgkqhkiG9w0B AQsFAAOCAQEAVprXY+SyGFdn0luAe9bH0r4d7G0rrUYUhPTFaqmfOhla5F1QJ4k/ fQWhmclflPIlrzKTze+x7T6nKUpf2upTedwerAbx/0eT053xA2wsvaO+Qgo8FWOd NveAl0aGoguXrAn2AEgh3HqoXBPoalhHYsUpdwZRnr1FIdGbJ32T1oyzi89KdpzI qwSIfkmlF+UDaHls65u+6j09h19LSeTmDwKg9Humv3cPPujmwpzOAadzgPtvJBoO CPkSr0gdQN0i6vSlZQvbrzN9q3ctfEJ7ybShXuPYI2sh0sui8GoO88ZeZx8sWTPK WDy9H4wcy2x2L1WxR2iL65dcKJ/bpZMeVg== -----END CERTIFICATE-----Generated at Tue Jun 25 15:58:41 2024 by rpki-client on console-fra.rpki-client.org