$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer File: B9C920C3F82E080EFF6CD0269962DD3BECD5697A.cer (raw, json) Hash identifier: igyXwfrCeSqRy+Ndfntf96O5017OUANncfdfXkDeyt8= Subject key identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0C43428E6E29407B19FBE5203A321DE63C111E5A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 17 Sep 2024 16:50:01 +0000 Certificate not after: Tue 16 Sep 2025 16:55:01 +0000 Subordinate resources: AS: 263765 IP: 138.117.4.0/22 IP: 170.84.132.0/22 IP: 2803:9840::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Oct 2024 22:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0c:43:42:8e:6e:29:40:7b:19:fb:e5:20:3a:32:1d:e6:3c:11:1e:5a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 17 16:50:01 2024 GMT Not After : Sep 16 16:55:01 2025 GMT Subject: CN=B9C920C3F82E080EFF6CD0269962DD3BECD5697A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ae:32:f6:46:35:38:2d:4f:8a:80:b9:c7:70:73: e4:ce:34:07:0b:9c:ab:4c:5d:62:07:37:a6:83:31: ca:96:cd:aa:54:8c:2b:c4:0f:6d:48:3e:89:75:e1: 4c:32:2c:7f:e7:ff:a3:79:c7:0e:f1:70:84:c7:02: fb:c2:75:82:b9:f8:de:93:23:7c:ca:c8:13:0d:15: 30:ec:4b:92:78:a9:75:f7:36:8c:76:b1:e9:a2:72: 99:08:09:d6:b5:e4:83:01:c3:a7:a7:e0:3c:54:2c: 46:32:3f:80:ba:7c:6a:9f:bd:5b:c0:7e:9b:e5:56: 7b:19:24:df:8d:4e:41:4d:3b:72:9d:f3:88:46:89: 7e:7d:77:b6:7a:1e:8c:ee:bb:42:50:86:80:7f:22: 1d:6a:4a:34:41:6d:57:bc:98:6d:be:33:0c:ef:96: a3:e4:02:6e:d8:6f:a4:4d:22:5a:24:e5:42:04:18: 7b:d7:7a:52:41:3f:d7:ff:f5:f2:c2:bd:1d:b7:fc: a9:69:c7:e2:81:ef:4e:34:10:a5:91:0a:08:73:fc: cf:1d:b7:75:16:38:63:23:c8:81:d5:78:fc:bf:63: 73:85:55:50:3d:f3:c4:3b:8d:4d:2c:06:99:51:61: 0a:ea:de:08:59:f8:30:66:f4:98:78:3c:0a:e1:68: 4c:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:C9:20:C3:F8:2E:08:0E:FF:6C:D0:26:99:62:DD:3B:EC:D5:69:7A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FEC91FEFDCB3832609DCA5F4CC602339EBC5C4AE476E831D08FA62D13B0E2E0C/0/B9C920C3F82E080EFF6CD0269962DD3BECD5697A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.117.4.0/22 170.84.132.0/22 IPv6: 2803:9840::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263765 Signature Algorithm: sha256WithRSAEncryption 65:02:f9:86:ce:b3:6a:1e:ca:97:1d:cb:d5:a7:73:12:56:27: a1:28:ac:f1:65:e8:f6:49:cc:0a:b7:10:04:a7:8e:6c:3a:a7: fe:b1:f9:e5:a0:61:ef:23:52:6d:83:5d:f3:6b:0b:17:06:e7: a3:cc:d5:c6:c3:99:37:6d:c7:c3:76:5f:16:5d:e3:e8:fd:6e: 25:14:a4:a0:c1:93:de:84:25:fb:22:8b:de:93:3c:94:5d:23: 1d:18:cf:6b:16:01:ae:aa:bb:1a:b5:0b:73:4e:f5:e8:84:ed: 13:4f:0e:93:15:15:a1:62:06:d0:1a:01:8a:c2:c8:d2:c8:26: ce:20:fb:70:c3:69:49:d4:d0:d2:9c:d5:69:28:d2:70:af:63: 29:f2:ae:e7:ab:12:b4:d8:e2:90:19:bb:7e:81:28:19:2d:66: 3e:e8:8b:ad:e9:24:68:b4:1a:73:bb:be:38:25:ec:b1:49:ca: ca:81:d6:85:bd:4b:95:47:e8:57:9f:33:a3:b2:8a:5f:54:e8: 0e:3a:4f:dd:06:fe:a3:5d:ad:2b:8d:7b:80:29:13:3c:7b:0c: 33:d0:e0:ca:6b:f3:df:a3:ff:2d:c9:00:c3:d5:34:66:e4:9a: c7:a3:7f:5b:ff:25:5c:8f:6b:c1:00:fb:46:67:02:90:78:9f: 70:33:5e:cc -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUDENCjm4pQHsZ++UgOjId5jwRHlowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA5MTcxNjUwMDFaFw0yNTA5MTYxNjU1MDFaMDMxMTAvBgNV BAMTKEI5QzkyMEMzRjgyRTA4MEVGRjZDRDAyNjk5NjJERDNCRUNENTY5N0EwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCuMvZGNTgtT4qAucdwc+TONAcL nKtMXWIHN6aDMcqWzapUjCvED21IPol14UwyLH/n/6N5xw7xcITHAvvCdYK5+N6T I3zKyBMNFTDsS5J4qXX3Nox2semicpkICda15IMBw6en4DxULEYyP4C6fGqfvVvA fpvlVnsZJN+NTkFNO3Kd84hGiX59d7Z6Hozuu0JQhoB/Ih1qSjRBbVe8mG2+Mwzv lqPkAm7Yb6RNIlok5UIEGHvXelJBP9f/9fLCvR23/Klpx+KB7040EKWRCghz/M8d t3UWOGMjyIHVePy/Y3OFVVA988Q7jU0sBplRYQrq3ghZ+DBm9Jh4PArhaEz5AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5ySDD+C4IDv9s 0CaZYt077NVpejAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkVDOTFGRUZEQ0IzODMyNjA5RENBNUY0 Q0M2MDIzMzlFQkM1QzRBRTQ3NkU4MzFEMDhGQTYyRDEzQjBFMkUwQy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GRUM5MUZFRkRDQjM4MzI2MDlEQ0E1RjRDQzYwMjMzOUVCQzVDNEFFNDc2 RTgzMUQwOEZBNjJEMTNCMEUyRTBDLzAvQjlDOTIwQzNGODJFMDgwRUZGNkNEMDI2 OTk2MkREM0JFQ0Q1Njk3QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCinUEAwQCqlSE MA0EAgACMAcDBQAoA5hAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGVTANBgkq hkiG9w0BAQsFAAOCAQEAZQL5hs6zah7Klx3L1adzElYnoSis8WXo9knMCrcQBKeO bDqn/rH55aBh7yNSbYNd82sLFwbno8zVxsOZN23Hw3ZfFl3j6P1uJRSkoMGT3oQl +yKL3pM8lF0jHRjPaxYBrqq7GrULc0716ITtE08OkxUVoWIG0BoBisLI0sgmziD7 cMNpSdTQ0pzVaSjScK9jKfKu56sStNjikBm7foEoGS1mPuiLrekkaLQac7u+OCXs sUnKyoHWhb1LlUfoV58zo7KKX1ToDjpP3Qb+o12tK417gCkTPHsMM9Dgymvz36P/ LckAw9U0ZuSax6N/W/8lXI9rwQD7RmcCkHifcDNezA== -----END CERTIFICATE-----Generated at Mon Oct 21 16:44:40 2024 by rpki-client on console-fra.rpki-client.org