$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer File: BD459ECC75B18B5274DF19D2C3A50A019B34696E.cer (raw, json) Hash identifier: SuOiNFY9T3KuUtW4cdLGuFW9quZR9fp5bUXzHvzpsUQ= Subject key identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 18D8BA27B56873C26B6AAF09A0B940F785F45EE7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:06:13 +0000 Certificate not after: Tue 04 Mar 2025 18:11:13 +0000 Subordinate resources: AS: 272143 IP: 138.36.16.0/22 IP: 181.225.136.0/22 IP: 2803:8080::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 22 Jun 2024 03:06:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 18:d8:ba:27:b5:68:73:c2:6b:6a:af:09:a0:b9:40:f7:85:f4:5e:e7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:06:13 2024 GMT Not After : Mar 4 18:11:13 2025 GMT Subject: CN=BD459ECC75B18B5274DF19D2C3A50A019B34696E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:f5:d9:92:98:56:68:4d:59:2e:ea:8d:a4:b4:44: 95:f1:ab:20:f7:da:b5:77:ea:5e:a0:af:21:3f:78: 1a:35:7a:63:65:be:cb:10:4f:be:67:40:49:9e:55: 9e:b4:50:59:e9:46:c4:2b:cb:99:2c:f6:38:7c:bc: 6d:1e:d1:9e:ae:44:b7:6c:02:ab:0a:4e:21:75:5b: 01:ff:fb:2f:91:82:01:aa:4b:1c:d8:72:44:a1:4b: e7:51:ed:4e:d3:f0:11:1d:48:9a:ba:6f:15:ba:55: 10:d1:e5:31:23:8f:22:a2:05:0c:cf:e5:55:ac:7e: 57:50:ac:e3:88:c8:93:24:0d:6f:08:d1:29:cb:84: d5:3d:49:de:d8:74:f0:f9:cb:f7:ba:4d:01:d5:3c: 1b:ee:54:30:ac:22:4e:f0:57:42:5e:72:92:f8:88: c4:ff:45:8c:ff:7d:2b:02:c9:1a:bc:d2:c7:02:73: 60:02:ef:9e:7c:54:72:3c:99:3b:9a:6d:15:40:81: ff:68:d7:40:85:ca:0e:ff:e4:6c:37:f4:f3:46:64: a9:a5:6e:81:30:e2:f1:c6:c4:de:08:b4:12:9a:e3: 50:94:a4:e7:73:09:72:6d:21:c5:22:a9:15:37:de: 37:7c:25:de:32:e3:fe:e9:e7:2b:6d:81:c0:40:ae: 9a:cd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BD:45:9E:CC:75:B1:8B:52:74:DF:19:D2:C3:A5:0A:01:9B:34:69:6E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CFF07613B767B29D935687D46B7A37F33B71AEC2FD4AB9779C434A9F7C10D4EF/0/BD459ECC75B18B5274DF19D2C3A50A019B34696E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.16.0/22 181.225.136.0/22 IPv6: 2803:8080::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272143 Signature Algorithm: sha256WithRSAEncryption 9c:6e:f6:7b:a1:ac:a8:1b:e0:60:9b:bb:ca:3c:0c:a8:71:05: 44:c0:91:0c:8a:a7:b0:81:33:e3:bc:af:1d:7b:90:d2:c0:ab: 85:38:99:28:72:09:4a:55:af:88:b5:d1:d9:a4:28:44:e8:a6: 6d:a4:1d:99:b2:99:20:0c:7c:b2:fc:12:3e:72:6b:bc:16:31: 21:ca:02:7f:49:ab:ea:a1:c4:20:55:84:37:8c:e5:00:9f:24: 11:73:26:35:75:5c:fa:6b:13:2b:7a:49:34:62:f7:be:0e:52: a7:94:79:6b:4c:7a:59:13:12:5b:25:fc:50:db:ab:5b:90:99: 7e:0a:fd:de:ec:eb:cf:a1:dd:86:df:59:fd:ea:a1:e9:20:94: 39:17:a4:f3:12:78:fb:a5:1a:44:d6:1a:9a:69:3e:71:0b:f3: 12:33:13:4e:ee:78:d1:ed:52:80:38:fd:04:43:e4:d4:07:6e: 66:95:e0:58:50:56:82:ed:b3:65:b9:cb:d2:9e:62:c7:d1:a7: 0f:b1:9a:ed:74:ab:53:4c:52:8b:07:b7:06:8c:57:f3:3a:c2: cc:b0:f0:21:78:ff:88:e5:dd:85:c7:72:7e:40:3b:05:02:a8: 94:c4:8e:59:0e:ba:83:74:66:53:ee:85:8f:67:63:ba:62:5d: 63:4f:f0:20 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUGNi6J7Voc8Jraq8JoLlA94X0XucwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA2MTNaFw0yNTAzMDQxODExMTNaMDMxMTAvBgNV BAMTKEJENDU5RUNDNzVCMThCNTI3NERGMTlEMkMzQTUwQTAxOUIzNDY5NkUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQD12ZKYVmhNWS7qjaS0RJXxqyD3 2rV36l6gryE/eBo1emNlvssQT75nQEmeVZ60UFnpRsQry5ks9jh8vG0e0Z6uRLds AqsKTiF1WwH/+y+RggGqSxzYckShS+dR7U7T8BEdSJq6bxW6VRDR5TEjjyKiBQzP 5VWsfldQrOOIyJMkDW8I0SnLhNU9Sd7YdPD5y/e6TQHVPBvuVDCsIk7wV0JecpL4 iMT/RYz/fSsCyRq80scCc2AC7558VHI8mTuabRVAgf9o10CFyg7/5Gw39PNGZKml boEw4vHGxN4ItBKa41CUpOdzCXJtIcUiqRU33jd8Jd4y4/7p5yttgcBArprNAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS9RZ7MdbGLUnTf GdLDpQoBmzRpbjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0ZGMDc2MTNCNzY3QjI5RDkzNTY4N0Q0 NkI3QTM3RjMzQjcxQUVDMkZENEFCOTc3OUM0MzRBOUY3QzEwRDRFRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DRkYwNzYxM0I3NjdCMjlEOTM1Njg3RDQ2QjdBMzdGMzNCNzFBRUMyRkQ0 QUI5Nzc5QzQzNEE5RjdDMTBENEVGLzAvQkQ0NTlFQ0M3NUIxOEI1Mjc0REYxOUQy QzNBNTBBMDE5QjM0Njk2RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCiiQQAwQCteGI MA0EAgACMAcDBQAoA4CAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQnDzANBgkq hkiG9w0BAQsFAAOCAQEAnG72e6GsqBvgYJu7yjwMqHEFRMCRDIqnsIEz47yvHXuQ 0sCrhTiZKHIJSlWviLXR2aQoROimbaQdmbKZIAx8svwSPnJrvBYxIcoCf0mr6qHE IFWEN4zlAJ8kEXMmNXVc+msTK3pJNGL3vg5Sp5R5a0x6WRMSWyX8UNurW5CZfgr9 3uzrz6Hdht9Z/eqh6SCUORek8xJ4+6UaRNYammk+cQvzEjMTTu540e1SgDj9BEPk 1AduZpXgWFBWgu2zZbnL0p5ix9GnD7Ga7XSrU0xSiwe3BoxX8zrCzLDwIXj/iOXd hcdyfkA7BQKolMSOWQ66g3RmU+6Fj2djumJdY0/wIA== -----END CERTIFICATE-----Generated at Tue Jun 18 16:13:46 2024 by rpki-client on console-fra.rpki-client.org