$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer File: B2CC06647FEB4440D4723322EA183C8FFEBA89E4.cer (raw, json) Hash identifier: LKMZIahvM5JWHOc1JGJnQNihmz5+MHAc7zxjNJw07Dk= Subject key identifier: B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 33142FB988DFE7051C6115D4EB0857676CC3297D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:44:05 +0000 Certificate not after: Tue 04 Mar 2025 17:49:05 +0000 Subordinate resources: AS: 264738 IP: 138.118.212.0/22 IP: 170.233.116.0/22 IP: 2803:5440::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Nov 2024 22:33:04 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 33:14:2f:b9:88:df:e7:05:1c:61:15:d4:eb:08:57:67:6c:c3:29:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:44:05 2024 GMT Not After : Mar 4 17:49:05 2025 GMT Subject: CN=B2CC06647FEB4440D4723322EA183C8FFEBA89E4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:de:91:8b:22:78:08:df:41:58:9d:7a:dd:24: 36:d4:07:c6:c9:af:7c:d3:85:92:e3:6a:ee:53:37: 54:fb:97:8f:c8:33:78:12:0a:c0:a8:b8:5d:dc:87: 4e:6b:84:97:aa:72:9f:ba:96:1f:37:42:30:91:89: ed:16:cc:cd:09:32:19:b0:c5:0a:c4:d0:ee:d0:dc: 54:56:30:0c:37:66:ee:40:18:3e:95:e6:83:4b:a1: 49:b1:8b:94:bf:51:02:07:62:f2:4d:81:e9:8e:00: 9b:2f:85:6c:0d:ec:ca:fa:2a:46:09:6e:28:7d:e0: bf:fc:63:ab:0e:a3:86:94:32:5d:52:92:74:84:20: 78:3e:98:c6:9a:b7:c1:9a:b3:28:33:1b:3e:0a:1b: 19:cf:a0:d2:6d:52:82:28:27:73:d2:81:1a:59:83: ce:76:c7:39:15:4f:d6:75:ad:93:21:a6:c9:49:8d: 4e:d0:5b:f3:75:4c:94:30:45:f7:ec:39:a2:fe:e3: 68:5f:36:30:4b:77:b9:42:dd:85:83:0c:d6:c1:2d: 4c:2e:70:76:7e:60:d2:d2:d0:e0:7d:21:58:71:99: 98:39:cb:2d:d8:6e:15:69:2c:f0:84:9f:2c:83:2a: 26:59:d9:1e:4b:5c:ba:9d:6e:26:ce:a6:a4:80:52: ce:29 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:CC:06:64:7F:EB:44:40:D4:72:33:22:EA:18:3C:8F:FE:BA:89:E4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AFA72A5B4FF392C18B8B85842B5543577E3B0E1F32CDCB12ACF413A7389F6F0D/0/B2CC06647FEB4440D4723322EA183C8FFEBA89E4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.212.0/22 170.233.116.0/22 IPv6: 2803:5440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264738 Signature Algorithm: sha256WithRSAEncryption 39:e4:e6:ee:9b:23:1d:95:5c:51:aa:f1:44:2d:48:77:4d:a9: a0:e7:4e:b1:a0:14:45:5d:e7:e6:95:ae:12:14:c6:b2:d5:78: b9:21:97:a4:be:79:72:43:97:20:b6:8b:13:0a:06:cd:4b:40: 72:bf:c6:1a:1b:bd:2c:fc:0b:db:3c:03:41:9a:b2:99:86:7d: b6:10:bc:82:11:88:b9:7a:92:57:00:0e:c5:eb:3e:54:02:f2: 64:d3:6b:87:ca:c9:66:21:05:ea:12:8b:09:4c:78:bc:16:23: 0b:5e:f3:31:2a:fe:8b:be:ea:0c:bc:a5:b5:df:ec:2c:d5:90: e7:0e:97:e8:8e:c9:c9:da:bf:67:73:19:82:66:24:e7:77:f2: c7:e0:06:40:1f:41:85:7c:65:89:0c:58:00:59:42:75:aa:f0: 89:84:db:ca:25:80:16:ce:f6:fa:e9:bd:82:94:da:86:c0:6d: 93:95:a1:7e:03:60:cc:9a:50:db:4c:71:f6:96:70:8b:4e:6f: 5b:db:5d:91:1e:a7:f5:f5:ce:b8:09:26:4f:a7:cf:4b:16:9c: 26:53:d3:9d:73:26:10:b0:3d:51:f1:a4:3b:cc:30:da:49:ba: d7:9d:62:54:90:d0:d1:39:5d:ce:a0:23:72:fc:f8:6c:fe:5f: c2:63:c7:6e -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUMxQvuYjf5wUcYRXU6whXZ2zDKX0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ0MDVaFw0yNTAzMDQxNzQ5MDVaMDMxMTAvBgNV BAMTKEIyQ0MwNjY0N0ZFQjQ0NDBENDcyMzMyMkVBMTgzQzhGRkVCQTg5RTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDs3pGLIngI30FYnXrdJDbUB8bJ r3zThZLjau5TN1T7l4/IM3gSCsCouF3ch05rhJeqcp+6lh83QjCRie0WzM0JMhmw xQrE0O7Q3FRWMAw3Zu5AGD6V5oNLoUmxi5S/UQIHYvJNgemOAJsvhWwN7Mr6KkYJ bih94L/8Y6sOo4aUMl1SknSEIHg+mMaat8GasygzGz4KGxnPoNJtUoIoJ3PSgRpZ g852xzkVT9Z1rZMhpslJjU7QW/N1TJQwRffsOaL+42hfNjBLd7lC3YWDDNbBLUwu cHZ+YNLS0OB9IVhxmZg5yy3YbhVpLPCEnyyDKiZZ2R5LXLqdbibOpqSAUs4pAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSyzAZkf+tEQNRy MyLqGDyP/rqJ5DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUZBNzJBNUI0RkYzOTJDMThCOEI4NTg0 MkI1NTQzNTc3RTNCMEUxRjMyQ0RDQjEyQUNGNDEzQTczODlGNkYwRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BRkE3MkE1QjRGRjM5MkMxOEI4Qjg1ODQyQjU1NDM1NzdFM0IwRTFGMzJD RENCMTJBQ0Y0MTNBNzM4OUY2RjBELzAvQjJDQzA2NjQ3RkVCNDQ0MEQ0NzIzMzIy RUExODNDOEZGRUJBODlFNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCinbUAwQCqul0 MA0EAgACMAcDBQAoA1RAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQKIjANBgkq hkiG9w0BAQsFAAOCAQEAOeTm7psjHZVcUarxRC1Id02poOdOsaAURV3n5pWuEhTG stV4uSGXpL55ckOXILaLEwoGzUtAcr/GGhu9LPwL2zwDQZqymYZ9thC8ghGIuXqS VwAOxes+VALyZNNrh8rJZiEF6hKLCUx4vBYjC17zMSr+i77qDLyltd/sLNWQ5w6X 6I7Jydq/Z3MZgmYk53fyx+AGQB9BhXxliQxYAFlCdarwiYTbyiWAFs72+um9gpTa hsBtk5WhfgNgzJpQ20xx9pZwi05vW9tdkR6n9fXOuAkmT6fPSxacJlPTnXMmELA9 UfGkO8ww2km6151iVJDQ0TldzqAjcvz4bP5fwmPHbg== -----END CERTIFICATE-----Generated at Fri Nov 22 05:48:30 2024 by rpki-client on console-fra.rpki-client.org