$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer File: C39BCEACF9BA6680E0AD24A39B266940F1AD975A.cer (raw, json) Hash identifier: wNxjcNqgALL9zSUCWGwYa383lOTvDLQwCNfHCkSCRbc= Subject key identifier: C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 73C2BE1B5AF27B5D9C9333916B32E80C11924BB4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:17:18 +0000 Certificate not after: Tue 04 Mar 2025 18:22:18 +0000 Subordinate resources: AS: 269906 IP: 45.191.80.0/22 IP: 2803:cce0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 01 Oct 2024 02:18:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 73:c2:be:1b:5a:f2:7b:5d:9c:93:33:91:6b:32:e8:0c:11:92:4b:b4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:17:18 2024 GMT Not After : Mar 4 18:22:18 2025 GMT Subject: CN=C39BCEACF9BA6680E0AD24A39B266940F1AD975A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:87:f8:80:91:10:34:39:aa:66:e3:c2:3a:19:ea: 40:21:ab:48:af:01:9d:04:cf:54:5f:25:2b:02:8a: 29:62:28:92:be:a4:8c:17:9e:96:17:95:57:d1:54: 91:87:86:05:eb:cc:a8:c6:1a:81:5a:ec:23:ee:9a: 51:90:28:2f:fb:e6:f1:45:b0:49:82:dd:f9:67:a4: 9b:d7:02:84:99:9e:48:2c:f2:c6:c0:19:a7:ac:a4: aa:02:7d:a1:8c:f0:eb:b3:16:c2:93:b4:6b:03:ec: 53:ae:0c:a7:b2:03:99:c5:8f:ef:6f:c9:66:e7:ec: 11:b9:6c:ed:60:9c:c0:d5:68:94:0a:73:75:0a:17: b9:da:7a:17:5d:bf:b4:70:aa:10:a6:68:57:d8:fa: 50:99:45:0c:2f:bb:29:0b:fb:13:dd:a6:5d:f1:88: 94:09:4d:4f:7f:9f:53:07:da:58:e8:c8:6a:48:3b: 6f:ee:74:87:c8:72:b9:70:91:5b:58:79:e5:61:a0: 85:ed:1d:08:b5:6b:55:f5:8e:e4:fd:73:1e:ef:cb: e0:af:78:4f:16:10:88:2b:fb:e1:1b:1f:a7:09:35: 47:27:81:f9:e4:99:e1:84:8d:14:3b:6d:ef:eb:74: d8:22:54:0c:99:5f:b7:a0:29:0f:6b:14:c8:c9:f5: 2d:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C3:9B:CE:AC:F9:BA:66:80:E0:AD:24:A3:9B:26:69:40:F1:AD:97:5A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BF073AB5784DDF3ED04D2A4C755258EC16118A08FDA2ED6E8F66315D28A446BD/0/C39BCEACF9BA6680E0AD24A39B266940F1AD975A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.191.80.0/22 IPv6: 2803:cce0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269906 Signature Algorithm: sha256WithRSAEncryption d9:ca:fa:39:ee:d8:99:75:91:3a:73:20:47:58:50:6c:f3:32: 38:8a:fa:b7:b3:13:7d:a5:7d:0f:62:ab:b3:fa:1e:9c:33:cb: d8:4e:aa:05:22:cb:67:a1:10:06:b0:ea:80:7e:f7:53:a5:7d: af:70:9a:df:b5:58:06:22:e3:1a:68:ec:f6:f3:c9:1c:e0:ea: f7:b2:c6:09:13:e4:92:5b:01:3e:9e:0b:60:2b:5c:49:ac:1c: 08:b3:5e:b2:6d:32:96:24:4c:e7:c2:46:80:d0:06:68:05:12: 8f:d8:e9:95:ed:a8:e2:03:ca:08:13:bb:98:9f:12:77:5d:85: 68:6a:83:6e:3c:bb:25:9e:40:18:c5:bc:b4:c2:0f:4d:9d:a5: ce:a7:26:1d:b4:22:6e:ce:7d:85:99:9b:a5:e6:09:6d:57:b5: 21:e5:32:86:3f:83:5f:0f:04:91:5e:a5:7f:f2:78:67:42:26: e8:a3:43:97:76:ef:55:91:c9:4a:3b:71:38:41:a0:83:59:bd: 66:67:31:4b:bb:b4:3e:56:04:67:37:23:49:a5:bd:c5:37:8e: 9d:02:4e:06:e5:e4:5e:47:4f:fe:e4:af:41:2c:2b:25:01:bf: e3:5a:2f:42:d3:1f:66:76:74:3e:f1:77:f5:0a:64:d6:26:a1: 5c:2e:a8:0f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUc8K+G1rye12ckzORazLoDBGSS7QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE3MThaFw0yNTAzMDQxODIyMThaMDMxMTAvBgNV BAMTKEMzOUJDRUFDRjlCQTY2ODBFMEFEMjRBMzlCMjY2OTQwRjFBRDk3NUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCH+ICREDQ5qmbjwjoZ6kAhq0iv AZ0Ez1RfJSsCiiliKJK+pIwXnpYXlVfRVJGHhgXrzKjGGoFa7CPumlGQKC/75vFF sEmC3flnpJvXAoSZnkgs8sbAGaespKoCfaGM8OuzFsKTtGsD7FOuDKeyA5nFj+9v yWbn7BG5bO1gnMDVaJQKc3UKF7naehddv7RwqhCmaFfY+lCZRQwvuykL+xPdpl3x iJQJTU9/n1MH2ljoyGpIO2/udIfIcrlwkVtYeeVhoIXtHQi1a1X1juT9cx7vy+Cv eE8WEIgr++EbH6cJNUcngfnkmeGEjRQ7be/rdNgiVAyZX7egKQ9rFMjJ9S39AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTDm86s+bpmgOCt JKObJmlA8a2XWjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkYwNzNBQjU3ODREREYzRUQwNEQyQTRD NzU1MjU4RUMxNjExOEEwOEZEQTJFRDZFOEY2NjMxNUQyOEE0NDZCRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CRjA3M0FCNTc4NERERjNFRDA0RDJBNEM3NTUyNThFQzE2MTE4QTA4RkRB MkVENkU4RjY2MzE1RDI4QTQ0NkJELzAvQzM5QkNFQUNGOUJBNjY4MEUwQUQyNEEz OUIyNjY5NDBGMUFEOTc1QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb9QMA0EAgAC MAcDBQAoA8zgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQeUjANBgkqhkiG9w0B AQsFAAOCAQEA2cr6Oe7YmXWROnMgR1hQbPMyOIr6t7MTfaV9D2Krs/oenDPL2E6q BSLLZ6EQBrDqgH73U6V9r3Ca37VYBiLjGmjs9vPJHODq97LGCRPkklsBPp4LYCtc SawcCLNesm0yliRM58JGgNAGaAUSj9jple2o4gPKCBO7mJ8Sd12FaGqDbjy7JZ5A GMW8tMIPTZ2lzqcmHbQibs59hZmbpeYJbVe1IeUyhj+DXw8EkV6lf/J4Z0Im6KND l3bvVZHJSjtxOEGgg1m9ZmcxS7u0PlYEZzcjSaW9xTeOnQJOBuXkXkdP/uSvQSwr JQG/41ovQtMfZnZ0PvF39Qpk1iahXC6oDw== -----END CERTIFICATE-----Generated at Fri Sep 27 23:38:27 2024 by rpki-client on console-ams.rpki-client.org