$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer File: FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.cer (raw, json) Hash identifier: w20dBnVolB4/TWRujh+3n6uHqhOGQi66afoGQ1+WXP8= Subject key identifier: FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 358C7CDBBD88BFF64CFC7A0F2F596B9E4E4FA1ED Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:07:59 +0000 Certificate not after: Tue 04 Mar 2025 18:12:59 +0000 Subordinate resources: AS: 272038 IP: 181.233.180.0/22 IP: 2803:4d10::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Jun 2024 05:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 35:8c:7c:db:bd:88:bf:f6:4c:fc:7a:0f:2f:59:6b:9e:4e:4f:a1:ed Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:07:59 2024 GMT Not After : Mar 4 18:12:59 2025 GMT Subject: CN=FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b2:ab:1a:e1:57:8b:29:c7:9e:44:a8:29:cb:e7: fb:96:b7:ef:9d:c9:c2:49:12:a5:ab:74:f5:b5:b6: 37:23:4d:7d:c1:f1:2f:84:9b:99:c8:b6:5f:64:47: ef:ed:b1:6e:14:9d:0b:4e:5b:06:37:45:67:ec:4c: fb:e9:b7:3d:ca:8c:b2:61:48:e8:29:66:82:c1:c1: 4d:d9:86:7d:3b:a4:e5:4f:3a:82:04:e9:32:8e:74: 02:89:cd:5e:9e:07:47:d1:4c:56:2c:d3:c4:c0:aa: cc:bd:72:b2:4e:44:4e:00:09:fd:bf:cb:e8:fc:a8: 81:20:34:50:e9:67:bf:29:77:75:9e:5b:7d:1a:83: e5:5a:6a:6e:42:b3:85:2b:d3:83:52:03:91:2c:62: 3b:3f:fc:82:36:b4:cc:8b:58:e3:38:a8:4c:9f:31: a5:82:f4:26:ca:60:b0:80:2f:e0:ab:b2:5a:fc:7f: 80:b5:bc:93:f7:05:8b:4c:72:3c:7a:42:ba:58:5d: b9:05:bc:f4:2e:4c:29:34:08:54:b7:e3:25:1d:a0: 61:bc:8a:66:88:40:d0:3c:11:ce:89:5f:28:14:a4: 9d:0f:b6:d6:39:e3:55:55:39:f5:eb:6c:cf:23:f7: 69:b7:f6:84:77:c6:29:a6:62:02:1e:26:2d:5c:23: 69:0b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FD:A5:A3:52:F4:B8:A1:5F:DA:0A:C9:ED:2B:32:89:C3:22:2C:BA:CF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D2F3C520B16F36A3CD65033D6705BDEF2711280BEF3F2A03A238DDEF2D567FD4/0/FDA5A352F4B8A15FDA0AC9ED2B3289C3222CBACF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 181.233.180.0/22 IPv6: 2803:4d10::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272038 Signature Algorithm: sha256WithRSAEncryption 2b:16:9c:95:05:c3:ca:7f:cd:d5:2a:c2:ac:cc:38:70:e2:09: e9:1d:61:bd:cf:b0:c1:9c:94:65:12:77:50:f3:64:72:ac:16: 15:7b:2e:7f:bc:65:09:4c:52:48:c1:b5:73:36:6b:26:24:98: d2:40:f3:36:ce:f1:50:7c:0b:7c:4f:49:ce:06:8a:48:f4:81: e4:93:79:2c:c1:e2:20:37:65:b7:04:09:82:5c:80:c7:79:f7: 4b:0b:2c:a0:5e:6e:9f:dc:ae:35:d6:3e:e3:58:4b:2e:10:5a: 58:ed:1f:00:b8:cb:85:7d:2f:a0:0c:b0:d3:1c:3a:bd:0e:72: f7:31:06:7e:51:ae:4e:36:a7:6e:29:23:e7:51:75:16:f0:07: 10:54:50:52:90:8a:2b:62:1e:95:05:16:67:a3:2e:8b:0b:7a: eb:1e:8e:7d:27:4a:2d:ce:3b:30:4f:a8:ae:47:c4:45:bb:00: 9a:9c:d2:f4:a4:26:8e:05:26:9c:73:8e:4e:ab:d5:a2:bc:1d: f2:8b:77:24:ba:b4:8a:fc:e3:90:68:92:8d:6d:bc:f7:9d:19: c9:0f:b5:fe:33:79:62:84:c2:e0:77:d3:e2:ef:8c:3c:c4:b7: 7b:dc:1b:a3:6c:40:f8:22:80:e3:ad:e2:92:98:0b:73:22:6d: 76:01:21:8c -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNYx8272Iv/ZM/HoPL1lrnk5Poe0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA3NTlaFw0yNTAzMDQxODEyNTlaMDMxMTAvBgNV BAMTKEZEQTVBMzUyRjRCOEExNUZEQTBBQzlFRDJCMzI4OUMzMjIyQ0JBQ0YwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCyqxrhV4spx55EqCnL5/uWt++d ycJJEqWrdPW1tjcjTX3B8S+Em5nItl9kR+/tsW4UnQtOWwY3RWfsTPvptz3KjLJh SOgpZoLBwU3Zhn07pOVPOoIE6TKOdAKJzV6eB0fRTFYs08TAqsy9crJORE4ACf2/ y+j8qIEgNFDpZ78pd3WeW30ag+Vaam5Cs4Ur04NSA5EsYjs//II2tMyLWOM4qEyf MaWC9CbKYLCAL+Crslr8f4C1vJP3BYtMcjx6QrpYXbkFvPQuTCk0CFS34yUdoGG8 imaIQNA8Ec6JXygUpJ0PttY541VVOfXrbM8j92m39oR3ximmYgIeJi1cI2kLAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT9paNS9LihX9oK ye0rMonDIiy6zzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDJGM0M1MjBCMTZGMzZBM0NENjUwMzNE NjcwNUJERUYyNzExMjgwQkVGM0YyQTAzQTIzOERERUYyRDU2N0ZENC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EMkYzQzUyMEIxNkYzNkEzQ0Q2NTAzM0Q2NzA1QkRFRjI3MTEyODBCRUYz RjJBMDNBMjM4RERFRjJENTY3RkQ0LzAvRkRBNUEzNTJGNEI4QTE1RkRBMEFDOUVE MkIzMjg5QzMyMjJDQkFDRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCtem0MA0EAgAC MAcDBQAoA00QMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQmpjANBgkqhkiG9w0B AQsFAAOCAQEAKxaclQXDyn/N1SrCrMw4cOIJ6R1hvc+wwZyUZRJ3UPNkcqwWFXsu f7xlCUxSSMG1czZrJiSY0kDzNs7xUHwLfE9JzgaKSPSB5JN5LMHiIDdltwQJglyA x3n3SwssoF5un9yuNdY+41hLLhBaWO0fALjLhX0voAyw0xw6vQ5y9zEGflGuTjan bikj51F1FvAHEFRQUpCKK2IelQUWZ6Muiwt66x6OfSdKLc47ME+orkfERbsAmpzS 9KQmjgUmnHOOTqvVorwd8ot3JLq0ivzjkGiSjW28950ZyQ+1/jN5YoTC4HfT4u+M PMS3e9wbo2xA+CKA463ikpgLcyJtdgEhjA== -----END CERTIFICATE-----Generated at Tue May 28 17:49:19 2024 by rpki-client on console-fra.rpki-client.org