$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer File: A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.cer (raw, json) Hash identifier: ehe5wFlY0pTfAaj1QZZrgNXwgmsIqYEBFSq15lpEETA= Subject key identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 50F7E82E9819E0559F99AEE018FD8A34B1A2DEF5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:40:06 +0000 Certificate not after: Tue 04 Mar 2025 17:45:06 +0000 Subordinate resources: AS: 269874 IP: 45.189.184.0/22 IP: 2803:68e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 50:f7:e8:2e:98:19:e0:55:9f:99:ae:e0:18:fd:8a:34:b1:a2:de:f5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:40:06 2024 GMT Not After : Mar 4 17:45:06 2025 GMT Subject: CN=A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:99:cd:a2:39:4e:bb:3b:33:fb:c4:36:f8:e9:82: dc:4c:93:83:fe:19:e3:79:55:32:0d:dd:05:86:d6: 77:88:1b:3e:dc:10:e1:e7:8c:59:1a:50:85:38:3b: 25:8d:8c:3a:a7:be:15:5c:90:85:88:61:7e:af:5a: e0:a3:d9:70:a4:88:dd:1e:47:c6:76:46:3d:69:0f: 35:bb:51:9f:8e:2b:b3:01:7a:73:2a:dd:ca:ae:f6: 09:8e:1e:aa:f4:08:11:78:d6:26:b7:4a:ec:0e:51: 05:b3:21:49:b8:dc:dd:ca:ff:9a:f6:a1:76:2e:fb: 36:c0:b4:ed:1f:09:8a:f4:a5:b1:30:77:87:1e:d3: e2:e8:16:82:8a:06:a5:ab:77:9a:80:af:b2:ea:0b: e8:52:31:05:fc:ec:f5:04:d8:ef:13:cb:47:42:0c: 84:92:82:53:31:c4:49:4e:f7:9a:11:46:cc:da:f1: d2:c4:a4:cb:d9:e8:60:a7:d8:5b:9a:84:f8:17:e8: 11:fc:48:e4:18:33:af:8e:e4:16:23:91:a8:51:a7: b4:4c:0c:47:e5:2d:0a:01:0f:2f:21:17:1b:c8:9a: 3a:db:e6:4e:48:72:87:5d:e5:18:6e:00:66:1f:df: e4:a5:27:f0:18:e8:a6:c9:85:4d:f8:df:85:cf:7e: 2f:8b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:ED:82:3C:B6:F7:67:E5:A4:BC:72:03:F5:38:E9:7E:F6:F5:9F:3A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E3BCD570957353FBE338DF0B293CE538800C1E3BE86B71E08640DD7C617EC6E6/0/A7ED823CB6F767E5A4BC7203F538E97EF6F59F3A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.184.0/22 IPv6: 2803:68e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269874 Signature Algorithm: sha256WithRSAEncryption 4c:6a:c2:6c:77:8a:3f:a8:3e:9a:09:b8:8c:32:7c:0e:1f:fa: 88:72:c0:9c:37:17:7a:5a:df:32:e0:46:71:19:01:36:79:21: 53:a1:10:0c:69:a0:9e:95:fb:92:76:db:00:d0:2f:f5:c0:04: 57:58:df:c4:45:f3:8e:08:30:d9:a5:9c:74:28:53:a1:8c:9f: d9:26:82:f8:eb:3e:82:bb:c4:7c:55:2b:11:1f:e1:9a:0c:dd: 1e:20:27:6c:3f:cc:60:66:5d:07:03:85:59:78:d6:f4:d3:6c: 52:20:0c:b9:30:66:9a:6b:c1:da:00:70:b4:4e:72:27:a1:ed: f3:10:26:35:7b:6b:39:49:b4:73:2a:99:b8:52:22:5f:86:b5: 6e:e6:75:d0:77:8d:b5:84:cb:76:0d:80:b1:e7:43:81:17:cc: 21:7e:0a:ce:74:19:2a:84:23:69:ec:be:47:17:cc:c9:35:07: b7:d9:d8:fc:fb:b6:73:90:1e:42:ed:0f:28:ea:87:f8:42:80: e2:89:ed:0d:13:7d:b7:20:70:5e:c8:1f:1e:9a:6e:31:af:62: c4:0c:19:72:91:1b:f0:33:55:8f:28:7d:68:f1:13:7e:c4:97: fb:d1:4d:d7:c3:68:83:e0:86:d5:3c:11:4a:6b:63:fd:ea:22: f3:89:3f:9e -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUUPfoLpgZ4FWfma7gGP2KNLGi3vUwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQwMDZaFw0yNTAzMDQxNzQ1MDZaMDMxMTAvBgNV BAMTKEE3RUQ4MjNDQjZGNzY3RTVBNEJDNzIwM0Y1MzhFOTdFRjZGNTlGM0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCZzaI5Trs7M/vENvjpgtxMk4P+ GeN5VTIN3QWG1neIGz7cEOHnjFkaUIU4OyWNjDqnvhVckIWIYX6vWuCj2XCkiN0e R8Z2Rj1pDzW7UZ+OK7MBenMq3cqu9gmOHqr0CBF41ia3SuwOUQWzIUm43N3K/5r2 oXYu+zbAtO0fCYr0pbEwd4ce0+LoFoKKBqWrd5qAr7LqC+hSMQX87PUE2O8Ty0dC DISSglMxxElO95oRRsza8dLEpMvZ6GCn2FuahPgX6BH8SOQYM6+O5BYjkahRp7RM DEflLQoBDy8hFxvImjrb5k5Icodd5RhuAGYf3+SlJ/AY6KbJhU3434XPfi+LAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSn7YI8tvdn5aS8 cgP1OOl+9vWfOjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTNCQ0Q1NzA5NTczNTNGQkUzMzhERjBC MjkzQ0U1Mzg4MDBDMUUzQkU4NkI3MUUwODY0MEREN0M2MTdFQzZFNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FM0JDRDU3MDk1NzM1M0ZCRTMzOERGMEIyOTNDRTUzODgwMEMxRTNCRTg2 QjcxRTA4NjQwREQ3QzYxN0VDNkU2LzAvQTdFRDgyM0NCNkY3NjdFNUE0QkM3MjAz RjUzOEU5N0VGNkY1OUYzQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb24MA0EAgAC MAcDBQAoA2jgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeMjANBgkqhkiG9w0B AQsFAAOCAQEATGrCbHeKP6g+mgm4jDJ8Dh/6iHLAnDcXelrfMuBGcRkBNnkhU6EQ DGmgnpX7knbbANAv9cAEV1jfxEXzjggw2aWcdChToYyf2SaC+Os+grvEfFUrER/h mgzdHiAnbD/MYGZdBwOFWXjW9NNsUiAMuTBmmmvB2gBwtE5yJ6Ht8xAmNXtrOUm0 cyqZuFIiX4a1buZ10HeNtYTLdg2AsedDgRfMIX4KznQZKoQjaey+RxfMyTUHt9nY /Pu2c5AeQu0PKOqH+EKA4ontDRN9tyBwXsgfHppuMa9ixAwZcpEb8DNVjyh9aPET fsSX+9FN18Nog+CG1TwRSmtj/eoi84k/ng== -----END CERTIFICATE-----Generated at Thu Sep 5 15:36:51 2024 by rpki-client on console-fra.rpki-client.org