$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer File: C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.cer (raw, json) Hash identifier: ho9nNb6e7zQof78W51M5HNtCTcxqNKKh0b3rmFdRpoU= Subject key identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 58ACE56F58CAE8DE7956C71F3E30F97556B42644 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:35:59 +0000 Certificate not after: Tue 04 Mar 2025 17:40:59 +0000 Subordinate resources: AS: 270033 IP: 177.200.236.0/23 IP: 2801:15:2800::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:ac:e5:6f:58:ca:e8:de:79:56:c7:1f:3e:30:f9:75:56:b4:26:44 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:35:59 2024 GMT Not After : Mar 4 17:40:59 2025 GMT Subject: CN=C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:26:cf:e4:83:16:4c:d1:61:2b:6e:73:ef:ed: 36:76:35:63:f1:83:2d:62:89:99:bb:d4:02:07:da: 63:05:05:59:aa:20:99:b2:a4:10:4a:fd:f6:69:7a: e9:60:23:6e:16:e0:dc:9a:08:7a:51:e5:e1:18:c1: ab:37:e7:f7:c7:c7:2c:d6:a8:50:30:2c:1f:40:61: c7:fb:8c:d9:82:b9:3a:3f:2e:62:e0:78:62:83:34: 3c:ee:87:c1:40:36:8c:24:3f:2a:10:8b:bb:40:c3: 7a:a8:c0:5c:c0:65:29:b0:25:2f:47:36:eb:b6:eb: 07:c2:93:a1:7c:29:20:29:47:2c:28:11:03:c1:5b: 9e:94:e5:a3:7f:e5:74:e1:8b:a0:04:0b:ad:76:e4: 51:2e:3c:7d:14:ed:8f:6c:9a:88:86:33:d2:12:e1: dd:cd:dd:9d:b5:8b:55:4b:0d:3e:ac:12:24:13:d3: 35:85:54:c3:2f:61:d3:91:61:74:f9:19:5b:ea:10: d4:37:8b:f3:60:88:2d:ae:a4:87:51:37:bf:94:5a: c8:74:13:02:14:54:70:d6:ac:44:6e:19:0d:b2:dd: 7f:e2:7d:8d:40:f7:75:eb:3f:3d:2f:bf:d3:c2:0d: c7:96:dc:54:00:f8:e7:a3:62:a6:74:67:78:5c:8b: fd:bb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C5:CE:76:D2:87:52:F8:32:AE:1A:AB:4A:B6:EB:8C:38:3B:FB:21:34 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A47045AB6F67075398C3756E05481A9B16F1C7D24A101DF6C85E9EEAC185B1AA/0/C5CE76D28752F832AE1AAB4AB6EB8C383BFB2134.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.200.236.0/23 IPv6: 2801:15:2800::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270033 Signature Algorithm: sha256WithRSAEncryption b7:8c:c4:0a:56:0e:14:3a:11:fd:a1:12:ab:7c:ad:df:05:06: 17:62:35:8c:42:3e:30:20:a9:2f:c9:78:49:d8:63:17:95:1e: 19:07:2a:66:8a:87:6f:3b:34:05:80:b1:02:27:db:32:30:07: 5e:37:03:93:94:4c:f6:5e:33:cb:2d:96:cc:8c:07:e9:de:f4: ac:a1:8b:b4:0c:a8:11:60:c0:55:9d:cd:41:c6:42:72:7b:49: 94:c8:9a:14:87:40:3b:89:4f:be:56:2a:3e:e8:75:5e:55:dd: 2f:72:60:40:e3:99:40:94:0b:32:7a:31:5b:8a:f1:39:56:ed: b8:eb:eb:05:0c:da:0f:ac:ec:9a:e4:46:ee:7e:0d:2a:0c:c6: a1:01:64:49:37:ee:23:45:7d:6c:04:d6:fd:86:07:7d:f1:e4: 04:cb:2d:19:bc:47:97:21:85:c3:6c:e1:38:0a:c4:71:19:76: d1:f9:41:1a:69:af:73:1e:a6:f5:86:f6:60:95:97:e5:f4:08: 14:a7:9c:46:5b:a4:d5:3f:e4:73:38:0a:05:74:01:e4:bc:d5: 15:28:21:95:fa:13:2a:00:4c:38:89:58:ea:b6:3f:fb:2b:98: bd:a0:c8:c1:f0:b2:1d:25:1f:6c:0b:19:46:ee:60:d7:0d:85: 00:2f:bd:9d -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUWKzlb1jK6N55VscfPjD5dVa0JkQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM1NTlaFw0yNTAzMDQxNzQwNTlaMDMxMTAvBgNV BAMTKEM1Q0U3NkQyODc1MkY4MzJBRTFBQUI0QUI2RUI4QzM4M0JGQjIxMzQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpJs/kgxZM0WErbnPv7TZ2NWPx gy1iiZm71AIH2mMFBVmqIJmypBBK/fZpeulgI24W4NyaCHpR5eEYwas35/fHxyzW qFAwLB9AYcf7jNmCuTo/LmLgeGKDNDzuh8FANowkPyoQi7tAw3qowFzAZSmwJS9H Nuu26wfCk6F8KSApRywoEQPBW56U5aN/5XThi6AEC6125FEuPH0U7Y9smoiGM9IS 4d3N3Z21i1VLDT6sEiQT0zWFVMMvYdORYXT5GVvqENQ3i/NgiC2upIdRN7+UWsh0 EwIUVHDWrERuGQ2y3X/ifY1A93XrPz0vv9PCDceW3FQA+OejYqZ0Z3hci/27AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTFznbSh1L4Mq4a q0q264w4O/shNDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTQ3MDQ1QUI2RjY3MDc1Mzk4QzM3NTZF MDU0ODFBOUIxNkYxQzdEMjRBMTAxREY2Qzg1RTlFRUFDMTg1QjFBQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BNDcwNDVBQjZGNjcwNzUzOThDMzc1NkUwNTQ4MUE5QjE2RjFDN0QyNEEx MDFERjZDODVFOUVFQUMxODVCMUFBLzAvQzVDRTc2RDI4NzUyRjgzMkFFMUFBQjRB QjZFQjhDMzgzQkZCMjEzNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBscjsMA8EAgAC MAkDBwAoAQAVKAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB7RMA0GCSqGSIb3 DQEBCwUAA4IBAQC3jMQKVg4UOhH9oRKrfK3fBQYXYjWMQj4wIKkvyXhJ2GMXlR4Z BypmiodvOzQFgLECJ9syMAdeNwOTlEz2XjPLLZbMjAfp3vSsoYu0DKgRYMBVnc1B xkJye0mUyJoUh0A7iU++Vio+6HVeVd0vcmBA45lAlAsyejFbivE5Vu246+sFDNoP rOya5Ebufg0qDMahAWRJN+4jRX1sBNb9hgd98eQEyy0ZvEeXIYXDbOE4CsRxGXbR +UEaaa9zHqb1hvZglZfl9AgUp5xGW6TVP+RzOAoFdAHkvNUVKCGV+hMqAEw4iVjq tj/7K5i9oMjB8LIdJR9sCxlG7mDXDYUAL72d -----END CERTIFICATE-----Generated at Thu May 16 22:33:58 2024 by rpki-client on console-ams.rpki-client.org