$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer File: B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.cer (raw, json) Hash identifier: pltORhrZyvEXz7mFs2f+tMywpDs7UlL2Od7o2qpMclA= Subject key identifier: B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 745B94D26FB819167C7E44D38FA05740EDEC266F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:53:26 +0000 Certificate not after: Tue 04 Mar 2025 17:58:26 +0000 Subordinate resources: AS: 269838 IP: 45.186.140.0/23 IP: 2803:1f60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Oct 2024 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 74:5b:94:d2:6f:b8:19:16:7c:7e:44:d3:8f:a0:57:40:ed:ec:26:6f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:53:26 2024 GMT Not After : Mar 4 17:58:26 2025 GMT Subject: CN=B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:da:dc:b9:41:f8:0c:b6:0c:83:b6:db:ea:ca:07: e6:d3:e4:a1:14:4a:58:ee:1c:c3:30:0c:f9:c2:11: 5c:19:83:5f:18:b9:ce:67:4a:02:1f:90:49:f7:f5: 4a:76:fc:f6:64:b8:54:e0:03:38:25:e7:50:32:93: 19:56:41:df:1e:34:7e:8a:e6:f2:a1:db:52:c8:fa: 14:24:5f:43:5f:2e:70:45:72:25:54:7c:65:8e:c0: 13:ac:2c:b6:09:26:a6:fd:34:f9:eb:0c:52:e2:bc: 75:2c:2a:71:d2:e0:0d:80:1e:a2:66:b5:78:f4:84: e0:b1:25:df:ac:07:d0:98:1e:88:2d:e4:d8:34:e4: c2:fb:ea:eb:40:3a:43:9c:6b:08:83:1c:89:25:af: 17:40:ef:d1:67:57:c8:7c:4e:96:9b:75:c2:4d:34: bc:e8:ed:7a:3e:6f:09:ce:a3:cf:7f:bb:e9:6e:76: cf:17:bf:71:a9:d6:77:53:ea:9a:6f:e3:02:ad:74: 8f:c1:5f:ff:ed:23:08:d2:71:7b:52:2f:33:cb:47: 0c:e3:80:6a:da:99:f1:b1:28:24:ee:44:dd:70:cb: 2c:c5:c7:15:88:69:fa:6d:54:d1:f3:b2:14:29:72: 1d:1f:cc:f8:7e:4e:bc:d0:34:57:9a:ea:b3:1b:73: ad:ab Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B9:CD:40:3C:F3:D7:2D:1F:1D:36:3D:E2:A1:43:DC:A2:D6:D0:CC:F4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FCAD8EF080A5A0713CB1062E716ED3F1ED18CE9C963EAA7227C6CA9FBF49C1C5/0/B9CD403CF3D72D1F1D363DE2A143DCA2D6D0CCF4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.186.140.0/23 IPv6: 2803:1f60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269838 Signature Algorithm: sha256WithRSAEncryption c3:ee:03:d4:2c:62:a4:e9:5c:ae:fc:80:dc:11:f7:4c:0c:1c: d6:b8:44:2b:6a:5e:c3:0e:c5:b7:31:5b:c5:f4:7f:80:b9:44: 32:ad:c5:db:17:78:f3:ff:5a:18:5f:91:28:e4:c4:b4:d4:8e: cd:13:70:c9:3e:40:3f:9c:c5:51:31:cc:61:1c:9e:7a:c5:f1: fd:9d:19:9f:f9:8f:b7:d1:be:4d:36:a0:8d:b0:20:de:f4:3f: 55:e0:26:01:b9:a2:2d:51:07:53:e2:19:39:68:61:d6:16:b0: 1f:a7:67:b8:bc:b7:91:d4:cf:e8:40:ee:c7:c4:9e:5c:cb:83: db:6e:29:cb:20:ef:64:a1:d1:c1:64:08:eb:9b:e1:0e:c3:a3: 15:47:2c:bb:e5:63:c4:cc:5d:ff:bf:32:9d:93:2e:90:89:ca: 49:83:cc:d0:31:5f:a1:87:e2:90:f8:74:51:2e:fb:d4:b4:8a: c2:2b:3d:68:22:04:99:3d:db:67:65:16:37:31:d4:44:d7:1c: bf:66:9b:c2:e4:f5:ae:99:77:56:bd:cf:91:c1:fa:40:92:e3: b2:c3:93:14:82:a2:9b:e3:e5:a4:b6:d2:88:79:58:84:5c:a2: d2:11:5f:31:30:af:fb:51:07:48:00:d1:96:80:c6:fb:e8:5a: 3c:1c:e4:08 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUdFuU0m+4GRZ8fkTTj6BXQO3sJm8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUzMjZaFw0yNTAzMDQxNzU4MjZaMDMxMTAvBgNV BAMTKEI5Q0Q0MDNDRjNENzJEMUYxRDM2M0RFMkExNDNEQ0EyRDZEMENDRjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDa3LlB+Ay2DIO22+rKB+bT5KEU SljuHMMwDPnCEVwZg18Yuc5nSgIfkEn39Up2/PZkuFTgAzgl51AykxlWQd8eNH6K 5vKh21LI+hQkX0NfLnBFciVUfGWOwBOsLLYJJqb9NPnrDFLivHUsKnHS4A2AHqJm tXj0hOCxJd+sB9CYHogt5Ng05ML76utAOkOcawiDHIklrxdA79FnV8h8TpabdcJN NLzo7Xo+bwnOo89/u+luds8Xv3Gp1ndT6ppv4wKtdI/BX//tIwjScXtSLzPLRwzj gGramfGxKCTuRN1wyyzFxxWIafptVNHzshQpch0fzPh+TrzQNFea6rMbc62rAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS5zUA889ctHx02 PeKhQ9yi1tDM9DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkNBRDhFRjA4MEE1QTA3MTNDQjEwNjJF NzE2RUQzRjFFRDE4Q0U5Qzk2M0VBQTcyMjdDNkNBOUZCRjQ5QzFDNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQ0FEOEVGMDgwQTVBMDcxM0NCMTA2MkU3MTZFRDNGMUVEMThDRTlDOTYz RUFBNzIyN0M2Q0E5RkJGNDlDMUM1LzAvQjlDRDQwM0NGM0Q3MkQxRjFEMzYzREUy QTE0M0RDQTJENkQwQ0NGNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLbqMMA0EAgAC MAcDBQAoAx9gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeDjANBgkqhkiG9w0B AQsFAAOCAQEAw+4D1CxipOlcrvyA3BH3TAwc1rhEK2peww7FtzFbxfR/gLlEMq3F 2xd48/9aGF+RKOTEtNSOzRNwyT5AP5zFUTHMYRyeesXx/Z0Zn/mPt9G+TTagjbAg 3vQ/VeAmAbmiLVEHU+IZOWhh1hawH6dnuLy3kdTP6EDux8SeXMuD224pyyDvZKHR wWQI65vhDsOjFUcsu+VjxMxd/78ynZMukInKSYPM0DFfoYfikPh0US771LSKwis9 aCIEmT3bZ2UWNzHURNccv2abwuT1rpl3Vr3PkcH6QJLjssOTFIKim+PlpLbSiHlY hFyi0hFfMTCv+1EHSADRloDG++haPBzkCA== -----END CERTIFICATE-----Generated at Fri Sep 27 23:26:23 2024 by rpki-client on console-fra.rpki-client.org