$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/E8415F203EB930F191C0398A880C11B310EE5884.cer File: E8415F203EB930F191C0398A880C11B310EE5884.cer (raw, json) Hash identifier: JZGsZLaYWhNe+xnsPCaW1udB27vQ37JAyMbs9YWWiyc= Subject key identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2CDD129F673AAA3C8E5CDE79F894AA3265D52B71 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:47:38 +0000 Certificate not after: Tue 04 Mar 2025 17:52:38 +0000 Subordinate resources: AS: 271814 IP: 164.163.184.0/23 IP: 170.246.56.0/22 IP: 2803:8810::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2c:dd:12:9f:67:3a:aa:3c:8e:5c:de:79:f8:94:aa:32:65:d5:2b:71 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:47:38 2024 GMT Not After : Mar 4 17:52:38 2025 GMT Subject: CN=E8415F203EB930F191C0398A880C11B310EE5884 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d3:ce:e2:e7:f3:d3:1c:28:19:eb:db:79:7c:b3: b6:f6:6f:66:74:b7:16:70:ab:9c:25:af:4d:57:8d: fc:47:e5:cf:da:ab:26:fe:59:24:b5:5a:b6:d2:9b: cc:d0:b8:06:ba:12:4c:46:45:6d:9c:fc:36:fb:a0: 28:d7:f5:38:38:bb:82:87:38:e9:06:4b:a0:e7:70: a5:f4:14:dd:ee:da:c7:d5:ed:81:d7:6e:54:02:58: e7:fd:97:b1:85:44:77:07:3a:77:c0:3d:48:b5:01: c0:28:24:13:c7:ac:e1:51:05:dd:21:90:d8:db:d5: fe:73:5a:f5:dc:c6:00:c1:d4:e6:84:4f:61:4b:99: 05:74:1f:7a:15:19:bc:1d:9f:c1:d6:fd:97:53:0c: c9:3d:46:6c:3d:33:96:5d:20:d5:2e:88:7c:b8:d5: 54:1e:4f:34:8e:46:19:7b:94:e6:e2:0b:e8:5d:cf: ec:68:97:6b:83:9d:dc:c1:80:0d:4c:42:9d:74:a4: 58:18:0e:97:86:76:a4:26:79:3c:19:7c:77:29:e7: 27:cc:f6:3d:1c:40:20:41:7b:25:1c:37:a6:b6:96: 9b:f0:02:d0:b4:b3:b9:fe:db:7f:43:78:2a:d2:24: cc:2d:f9:67:69:d9:af:84:38:c0:a7:29:95:bd:ea: bb:c5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: E8:41:5F:20:3E:B9:30:F1:91:C0:39:8A:88:0C:11:B3:10:EE:58:84 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3221D3654886B789AD128138DBEA2BF5CDFC9E89D3849DAC0AD56D5D29329070/0/E8415F203EB930F191C0398A880C11B310EE5884.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 164.163.184.0/23 170.246.56.0/22 IPv6: 2803:8810::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271814 Signature Algorithm: sha256WithRSAEncryption 39:af:52:66:5c:94:5a:bd:58:56:38:be:ce:b5:83:c9:b7:f2: 4b:5a:20:88:89:02:e8:2a:dc:54:72:2e:04:b2:84:32:a2:f4: 96:5f:01:80:61:4b:a0:9c:b0:bb:62:6e:33:1f:20:67:f5:04: b5:d0:fd:2d:e4:a8:1a:61:fc:1b:2f:35:c8:66:97:be:f2:79: bb:f8:95:9c:eb:6d:00:6e:ee:02:f1:bd:0b:a4:65:eb:63:be: d4:50:bb:0a:9e:14:f0:43:ce:be:ad:f0:d6:a6:38:ef:a2:9c: 4b:de:e5:03:54:6f:3c:7c:09:3d:7d:e5:5e:dd:b3:dd:92:4b: f4:e3:4e:23:24:62:03:74:78:28:ee:b5:c5:c9:88:e4:3c:37: 35:2c:10:e0:dd:f1:ad:93:9c:6a:dc:d1:fd:b4:a0:dd:ec:4e: d7:e7:31:e4:9b:53:75:15:7a:1b:69:71:09:de:e7:97:be:e9: f8:f8:a3:1f:d6:5e:8e:14:1b:3e:c4:e8:42:5c:7f:ac:25:23: d9:6c:2b:13:7b:73:20:31:28:8a:a4:95:99:5f:08:f7:1f:a8: ae:7a:df:c3:8a:bc:0e:da:3f:2c:e2:8b:ba:09:ca:cb:17:1c: 26:e8:96:3f:83:14:e4:d2:0a:12:1e:d6:44:4c:2b:fb:62:05: 6a:63:14:11 -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIULN0Sn2c6qjyOXN55+JSqMmXVK3EwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ3MzhaFw0yNTAzMDQxNzUyMzhaMDMxMTAvBgNV BAMTKEU4NDE1RjIwM0VCOTMwRjE5MUMwMzk4QTg4MEMxMUIzMTBFRTU4ODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDTzuLn89McKBnr23l8s7b2b2Z0 txZwq5wlr01XjfxH5c/aqyb+WSS1WrbSm8zQuAa6EkxGRW2c/Db7oCjX9Tg4u4KH OOkGS6DncKX0FN3u2sfV7YHXblQCWOf9l7GFRHcHOnfAPUi1AcAoJBPHrOFRBd0h kNjb1f5zWvXcxgDB1OaET2FLmQV0H3oVGbwdn8HW/ZdTDMk9Rmw9M5ZdINUuiHy4 1VQeTzSORhl7lObiC+hdz+xol2uDndzBgA1MQp10pFgYDpeGdqQmeTwZfHcp5yfM 9j0cQCBBeyUcN6a2lpvwAtC0s7n+239DeCrSJMwt+Wdp2a+EOMCnKZW96rvFAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBToQV8gPrkw8ZHA OYqIDBGzEO5YhDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzIyMUQzNjU0ODg2Qjc4OUFEMTI4MTM4 REJFQTJCRjVDREZDOUU4OUQzODQ5REFDMEFENTZENUQyOTMyOTA3MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zMjIxRDM2NTQ4ODZCNzg5QUQxMjgxMzhEQkVBMkJGNUNERkM5RTg5RDM4 NDlEQUMwQUQ1NkQ1RDI5MzI5MDcwLzAvRTg0MTVGMjAzRUI5MzBGMTkxQzAzOThB ODgwQzExQjMxMEVFNTg4NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQBpKO4AwQCqvY4 MA0EAgACMAcDBQAoA4gQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQlxjANBgkq hkiG9w0BAQsFAAOCAQEAOa9SZlyUWr1YVji+zrWDybfyS1ogiIkC6CrcVHIuBLKE MqL0ll8BgGFLoJywu2JuMx8gZ/UEtdD9LeSoGmH8Gy81yGaXvvJ5u/iVnOttAG7u AvG9C6Rl62O+1FC7Cp4U8EPOvq3w1qY476KcS97lA1RvPHwJPX3lXt2z3ZJL9ONO IyRiA3R4KO61xcmI5Dw3NSwQ4N3xrZOcatzR/bSg3exO1+cx5JtTdRV6G2lxCd7n l77p+PijH9ZejhQbPsToQlx/rCUj2WwrE3tzIDEoiqSVmV8I9x+ornrfw4q8Dto/ LOKLugnKyxccJuiWP4MU5NIKEh7WREwr+2IFamMUEQ== -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:54 2024 by rpki-client on console-ams.rpki-client.org