$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer File: D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.cer (raw, json) Hash identifier: I6sIlZTqsZ+CqpR3nTYr9EldGx/GA1pixvRSnR25PFA= Subject key identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1A576A1D1619B93BAFD088E50F1503979DD11A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:13:38 +0000 Certificate not after: Tue 04 Mar 2025 18:18:38 +0000 Subordinate resources: AS: 52241 AS: 52366 IP: 190.99.96.0/20 IP: 2803:b200::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 May 2024 10:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:57:6a:1d:16:19:b9:3b:af:d0:88:e5:0f:15:03:97:9d:d1:1a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:13:38 2024 GMT Not After : Mar 4 18:18:38 2025 GMT Subject: CN=D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e8:62:16:4b:93:7b:23:a1:3c:11:e3:26:1c:d5: 57:c1:e9:b7:15:ee:dd:f2:9d:4e:ae:56:13:6e:ca: f7:52:8f:34:1a:a6:b1:d0:a8:9e:26:84:33:00:56: 75:d2:ef:57:ac:6d:35:e4:0c:1f:25:a6:6d:92:6d: ee:52:fc:84:0d:4a:13:8a:13:85:c6:c5:2c:1f:1a: 23:f0:34:68:9e:c3:9e:61:81:0f:16:76:30:45:f6: 5b:e7:87:ac:c4:74:91:f0:75:e3:de:2d:0c:69:54: a0:d1:6f:d0:8a:8a:54:8c:2f:26:9d:e8:b2:89:57: 44:f0:bc:ab:1b:89:b7:10:24:09:48:a2:33:4e:62: d0:61:36:69:85:dc:e1:7f:2a:d1:eb:30:22:72:da: 5c:9e:35:52:7b:41:45:d3:45:47:65:49:3f:52:38: 54:55:44:57:e0:6e:e1:ea:59:6e:a0:59:6b:90:08: fc:a9:4e:4a:75:6b:6b:b0:65:ae:15:fb:4a:37:7c: 30:3f:b0:0f:d0:8a:36:23:35:f5:9f:14:b6:95:dc: db:d4:9a:ea:60:ca:0a:66:2a:a2:3b:32:1f:00:2e: 10:85:47:dd:c8:d7:f1:51:37:0b:ef:96:ad:bc:24: 87:a6:ee:70:e6:7f:16:b3:b2:cf:ba:3d:a4:40:30: 83:f9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D7:A4:86:F4:E8:E3:2E:BB:7C:A3:2A:25:A9:EF:E1:07:EF:5F:B2:5B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3650D59C14D282419C1FFC6D534AD0B46006980772355A21D5871025F82C9883/0/D7A486F4E8E32EBB7CA32A25A9EFE107EF5FB25B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.99.96.0/20 IPv6: 2803:b200::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52241 52366 Signature Algorithm: sha256WithRSAEncryption d5:18:a8:42:ec:8f:01:34:73:d5:d7:8c:5d:d4:c4:64:f1:1e: 59:34:06:c7:d0:78:12:bc:7f:ac:ac:8a:f4:04:d7:d3:29:38: 56:e8:7f:e2:ec:6d:a7:cb:a6:19:b0:f2:4f:6e:4f:e8:8f:aa: 0f:42:ae:9c:60:14:69:e4:97:5c:4c:3a:31:b0:5c:7c:47:3f: c1:8d:4b:84:55:ff:66:cd:4a:3e:eb:d6:75:8d:bb:e7:58:04: bc:66:c0:bb:dc:17:95:44:eb:1c:78:af:ac:68:b2:aa:6a:a7: 3e:84:46:08:eb:92:b1:89:b0:d4:36:c2:4f:d2:a2:ff:80:06: cf:90:2a:43:c8:08:95:3e:e5:96:7a:c1:17:44:1f:7c:9d:01: ea:72:60:bd:f9:f8:61:06:43:47:05:9e:56:df:4b:04:dd:60: 08:e7:77:f6:81:73:8e:80:c2:a2:95:81:b0:0d:30:e6:ef:05: 7a:08:7a:8c:95:4d:48:ee:bd:b6:1c:f6:69:25:62:ae:15:fd: 42:2f:16:e3:89:e8:f3:f7:93:c5:4b:8f:62:8e:ff:31:46:8a: 9a:3f:ef:76:88:9c:67:48:d4:98:64:aa:20:db:be:e4:5c:8e: 29:de:0e:0e:b5:91:74:7b:34:6d:66:51:4b:3c:54:2e:81:19: 23:73:9e:af -----BEGIN CERTIFICATE----- MIIGqTCCBZGgAwIBAgITGldqHRYZuTuv0IjlDxUDl53RGjANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI0MDMwNTE4MTMzOFoXDTI1MDMwNDE4MTgzOFowMzExMC8GA1UE AxMoRDdBNDg2RjRFOEUzMkVCQjdDQTMyQTI1QTlFRkUxMDdFRjVGQjI1QjCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOhiFkuTeyOhPBHjJhzVV8HptxXu 3fKdTq5WE27K91KPNBqmsdConiaEMwBWddLvV6xtNeQMHyWmbZJt7lL8hA1KE4oT hcbFLB8aI/A0aJ7DnmGBDxZ2MEX2W+eHrMR0kfB1494tDGlUoNFv0IqKVIwvJp3o solXRPC8qxuJtxAkCUiiM05i0GE2aYXc4X8q0eswInLaXJ41UntBRdNFR2VJP1I4 VFVEV+Bu4epZbqBZa5AI/KlOSnVra7BlrhX7Sjd8MD+wD9CKNiM19Z8UtpXc29Sa 6mDKCmYqojsyHwAuEIVH3cjX8VE3C++Wrbwkh6bucOZ/FrOyz7o9pEAwg/kCAwEA AaOCA7QwggOwMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFNekhvTo4y67fKMq Janv4QfvX7JbMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy8zNjUwRDU5QzE0RDI4MjQxOUMxRkZDNkQ1 MzRBRDBCNDYwMDY5ODA3NzIzNTVBMjFENTg3MTAyNUY4MkM5ODgzLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzM2NTBENTlDMTREMjgyNDE5QzFGRkM2RDUzNEFEMEI0NjAwNjk4MDc3MjM1 NUEyMUQ1ODcxMDI1RjgyQzk4ODMvMC9EN0E0ODZGNEU4RTMyRUJCN0NBMzJBMjVB OUVGRTEwN0VGNUZCMjVCLm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwLgYIKwYBBQUHAQcBAf8EHzAdMAwEAgABMAYDBAS+Y2AwDQQCAAIw BwMFACgDsgAwHwYIKwYBBQUHAQgBAf8EEDAOoAwwCgIDAMwRAgMAzI4wDQYJKoZI hvcNAQELBQADggEBANUYqELsjwE0c9XXjF3UxGTxHlk0BsfQeBK8f6ysivQE19Mp OFbof+LsbafLphmw8k9uT+iPqg9CrpxgFGnkl1xMOjGwXHxHP8GNS4RV/2bNSj7r 1nWNu+dYBLxmwLvcF5VE6xx4r6xosqpqpz6ERgjrkrGJsNQ2wk/Sov+ABs+QKkPI CJU+5ZZ6wRdEH3ydAepyYL35+GEGQ0cFnlbfSwTdYAjnd/aBc46AwqKVgbANMObv BXoIeoyVTUjuvbYc9mklYq4V/UIvFuOJ6PP3k8VLj2KO/zFGipo/73aInGdI1Jhk qiDbvuRcjineDg61kXR7NG1mUUs8VC6BGSNznq8= -----END CERTIFICATE-----Generated at Sat May 18 16:57:18 2024 by rpki-client on console-fra.rpki-client.org