$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C0CE7DDA676A306A376374B13782ABD923687F5D.cer File: C0CE7DDA676A306A376374B13782ABD923687F5D.cer (raw, json) Hash identifier: dqBV5vZWlY0NR6Asig3EzLNi0Qrfl/NRLbI4WESHxXs= Subject key identifier: C0:CE:7D:DA:67:6A:30:6A:37:63:74:B1:37:82:AB:D9:23:68:7F:5D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4D643264F19D6BE1B8E3A38EED949E5A2A1D42CC Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:37:08 +0000 Certificate not after: Tue 04 Mar 2025 17:42:08 +0000 Subordinate resources: AS: 28036 IP: 152.231.32.0/20 IP: 190.143.240.0/20 IP: 2803:180::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 28 May 2024 02:11:29 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:64:32:64:f1:9d:6b:e1:b8:e3:a3:8e:ed:94:9e:5a:2a:1d:42:cc Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:37:08 2024 GMT Not After : Mar 4 17:42:08 2025 GMT Subject: CN=C0CE7DDA676A306A376374B13782ABD923687F5D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a5:c8:c2:67:8d:b2:19:41:cf:8a:d2:8b:c9:dd: 9f:2a:3d:b3:25:45:8d:d6:a9:74:69:be:ef:38:ce: a4:51:0b:47:e4:f4:21:e5:7a:dc:0f:90:43:d4:87: 5a:9b:2c:65:57:06:1c:b8:ac:d7:71:29:23:1b:6f: c0:d4:5f:76:84:32:71:5c:8f:14:d2:e1:7b:ce:7f: a0:d8:61:c8:2e:7e:85:c5:17:34:de:b1:cf:d9:f5: 09:c9:09:6e:a0:d4:8b:80:92:aa:cb:57:6d:a0:82: e5:ad:7f:99:32:ec:0e:ea:5b:10:e4:89:34:f4:e0: 47:76:eb:c3:5e:0c:05:05:83:10:c5:9a:a4:51:61: 6f:8d:05:13:52:ca:fd:dc:3e:f2:7d:ae:b1:5e:8e: 9f:f6:f0:6e:88:d0:87:55:6d:cd:bf:9f:95:aa:7c: f0:b1:fb:7c:d7:ee:43:2d:17:3f:52:22:fa:47:e2: 8d:5c:ec:ff:db:fa:40:1a:b6:61:6a:22:6c:23:f9: 31:08:b7:67:bb:ca:6b:e0:cc:a5:e5:e2:dc:fa:f8: 3e:7e:67:da:6f:07:0b:6e:2e:8d:61:d7:85:2c:25: 9b:59:e3:59:55:8a:13:3c:c7:f4:66:21:03:7d:c8: e7:4e:a4:8a:d9:8f:ae:0f:d2:29:3e:53:4c:ff:19: d5:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:CE:7D:DA:67:6A:30:6A:37:63:74:B1:37:82:AB:D9:23:68:7F:5D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A88696740092563695A1589D301612FA9DE2FCDC21BF295A45423A94F9F0B2F2/0/C0CE7DDA676A306A376374B13782ABD923687F5D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 152.231.32.0/20 190.143.240.0/20 IPv6: 2803:180::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28036 Signature Algorithm: sha256WithRSAEncryption ca:cf:8e:33:e5:f8:6e:f9:06:43:c8:58:14:11:8a:c3:e5:7e: 6a:e5:39:06:7b:e7:e3:1c:4d:bb:17:3a:ef:d8:d2:6d:f1:ee: 28:71:b3:6e:40:f3:10:ab:25:d5:b0:9a:ba:18:11:e1:22:c7: 7b:38:77:ed:18:88:1e:0b:ad:38:d7:b1:23:47:8f:25:0b:a8: 7f:5d:a1:c3:c7:f6:f0:ac:df:d8:1e:c2:81:93:74:71:7a:2f: 5e:e6:97:e7:64:c0:9b:45:d7:4a:58:cb:ac:57:0d:06:85:0f: c8:0a:52:2a:d2:6a:e4:4d:7d:ac:1f:1b:66:bb:a6:47:44:e9: f7:1c:48:28:c6:f2:2e:fe:6e:f8:b3:39:a6:13:f3:2b:2a:b7: 1e:93:68:25:06:4d:fe:67:34:ad:31:63:1e:2d:a8:a1:52:61: 22:bb:fe:9b:13:1e:22:aa:7f:9f:77:0c:01:07:25:33:8a:f2: 50:23:71:3a:6a:73:36:cd:fb:78:22:f5:4b:82:c0:db:83:02: df:2e:e6:57:74:50:5b:93:92:3e:0a:90:00:44:1c:af:d2:3a: a4:b8:08:ba:a3:c3:63:c1:6f:a9:b9:cc:fc:0d:f0:58:db:49: 02:6c:13:49:27:de:c5:2a:fd:38:ce:32:f2:10:e8:dd:11:4a: 4b:75:ca:14 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUTWQyZPGda+G446OO7ZSeWiodQswwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM3MDhaFw0yNTAzMDQxNzQyMDhaMDMxMTAvBgNV BAMTKEMwQ0U3RERBNjc2QTMwNkEzNzYzNzRCMTM3ODJBQkQ5MjM2ODdGNUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQClyMJnjbIZQc+K0ovJ3Z8qPbMl RY3WqXRpvu84zqRRC0fk9CHletwPkEPUh1qbLGVXBhy4rNdxKSMbb8DUX3aEMnFc jxTS4XvOf6DYYcgufoXFFzTesc/Z9QnJCW6g1IuAkqrLV22gguWtf5ky7A7qWxDk iTT04Ed268NeDAUFgxDFmqRRYW+NBRNSyv3cPvJ9rrFejp/28G6I0IdVbc2/n5Wq fPCx+3zX7kMtFz9SIvpH4o1c7P/b+kAatmFqImwj+TEIt2e7ymvgzKXl4tz6+D5+ Z9pvBwtuLo1h14UsJZtZ41lVihM8x/RmIQN9yOdOpIrZj64P0ik+U0z/GdV/AgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAzn3aZ2owajdj dLE3gqvZI2h/XTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTg4Njk2NzQwMDkyNTYzNjk1QTE1ODlE MzAxNjEyRkE5REUyRkNEQzIxQkYyOTVBNDU0MjNBOTRGOUYwQjJGMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BODg2OTY3NDAwOTI1NjM2OTVBMTU4OUQzMDE2MTJGQTlERTJGQ0RDMjFC RjI5NUE0NTQyM0E5NEY5RjBCMkYyLzAvQzBDRTdEREE2NzZBMzA2QTM3NjM3NEIx Mzc4MkFCRDkyMzY4N0Y1RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQEmOcgAwQEvo/w MA0EAgACMAcDBQAoAwGAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm2EMA0GCSqG SIb3DQEBCwUAA4IBAQDKz44z5fhu+QZDyFgUEYrD5X5q5TkGe+fjHE27Fzrv2NJt 8e4ocbNuQPMQqyXVsJq6GBHhIsd7OHftGIgeC60417EjR48lC6h/XaHDx/bwrN/Y HsKBk3Rxei9e5pfnZMCbRddKWMusVw0GhQ/IClIq0mrkTX2sHxtmu6ZHROn3HEgo xvIu/m74szmmE/MrKrcek2glBk3+ZzStMWMeLaihUmEiu/6bEx4iqn+fdwwBByUz ivJQI3E6anM2zft4IvVLgsDbgwLfLuZXdFBbk5I+CpAARByv0jqkuAi6o8NjwW+p ucz8DfBY20kCbBNJJ97FKv04zjLyEOjdEUpLdcoU -----END CERTIFICATE-----Generated at Thu May 23 02:34:04 2024 by rpki-client on console-fra.rpki-client.org