$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.cer File: FEF38C6CB83A330CC6D5A87383C612319EA62673.cer (raw, json) Hash identifier: 1ZQd23gbOm04DD9M9hWVjV8+xtixFY+G7XwQ626Dk1M= Subject key identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6874C2DB8F74E8A47E143CE1AF00211931B74A24 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:51:59 +0000 Certificate not after: Tue 04 Mar 2025 17:56:59 +0000 Subordinate resources: AS: 27902 IP: 190.107.64.0/20 IP: 200.93.248.0/21 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 29 Nov 2024 03:21:27 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:74:c2:db:8f:74:e8:a4:7e:14:3c:e1:af:00:21:19:31:b7:4a:24 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:51:59 2024 GMT Not After : Mar 4 17:56:59 2025 GMT Subject: CN=FEF38C6CB83A330CC6D5A87383C612319EA62673 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ad:63:58:bd:9c:f8:09:ea:e9:dc:0b:81:a8:10: 53:8b:a7:1a:25:f8:3d:1e:8e:7a:ab:f0:31:bc:0c: b9:46:3d:26:4c:46:c6:0a:e0:be:44:be:0f:54:19: 87:c9:92:22:f8:c2:8e:44:d6:e5:08:97:c4:90:fb: 19:a4:76:f6:d3:75:b7:88:53:0d:e0:d2:0d:83:07: b4:c2:85:8e:76:c4:2a:e5:1b:c3:3f:2e:4a:75:ec: 24:2e:13:ee:e3:6f:9e:1f:37:c1:30:91:cd:68:fc: 3e:08:9d:c9:de:36:aa:14:f3:f0:26:f3:1b:83:47: 17:60:e2:37:ff:e8:a5:d2:7c:9e:56:78:71:6e:0e: 36:4e:45:90:d3:c0:56:1d:c6:90:10:87:2a:b5:4e: 10:01:fd:cb:c4:75:e4:fd:51:0f:c3:dd:c3:cd:4c: 0d:b1:83:ab:e5:27:07:36:4c:0e:34:05:da:b8:e6: d7:68:f0:50:e7:81:01:15:f7:a6:41:3c:de:c8:fa: e3:ae:71:2f:85:42:ea:92:8c:f2:c1:f0:14:61:2a: 69:fa:ef:c1:47:02:2b:7f:86:bd:36:a9:1a:46:86: 49:59:f1:8f:67:9b:13:0e:de:7c:b0:27:9f:51:ee: 42:f1:5d:62:0c:b8:46:9d:7f:59:25:e4:8c:10:53: f5:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: FE:F3:8C:6C:B8:3A:33:0C:C6:D5:A8:73:83:C6:12:31:9E:A6:26:73 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/D7361789250BA99FF6364FBCFD9CBFFDF800B49C6D1A1B42C51E4A7016BE1902/0/FEF38C6CB83A330CC6D5A87383C612319EA62673.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.107.64.0/20 200.93.248.0/21 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27902 Signature Algorithm: sha256WithRSAEncryption 66:e7:b2:bf:71:38:ca:d7:e3:b9:6d:f1:80:34:a8:7d:f5:27: 75:ab:9e:1b:8c:d5:f2:39:e9:58:f9:1e:7e:9a:f1:55:b1:93: 53:14:23:33:27:64:ef:97:e8:6e:37:57:2c:0a:73:4e:3b:39: f8:ca:35:3c:4f:ba:bf:08:ce:82:8d:92:d7:45:06:97:2f:8f: 5b:00:5b:f6:a4:94:68:95:0a:12:9a:eb:7f:0d:9e:d5:02:90: a4:d6:79:8b:39:ab:42:1d:89:73:1d:d5:b0:82:7a:34:59:18: 8d:1c:98:af:69:78:46:42:b9:a0:ac:bd:3e:d1:84:15:9e:81: 8b:e7:53:ad:cd:81:0a:64:92:0e:e9:9c:ed:d1:bd:49:b4:ff: 32:2b:76:16:ca:95:9b:a6:10:ba:d5:19:f7:52:a2:d2:6f:35: 8e:b9:73:4a:0e:b4:93:8f:ac:fa:d4:e4:8a:69:ac:c0:ab:df: 46:6d:11:67:7f:1d:ea:16:05:3e:fb:7b:ea:82:56:7d:8c:52: 96:55:f7:f9:ee:80:f7:52:4c:5a:20:d1:8b:28:89:45:e8:bd: 16:d1:cf:b1:77:cf:dd:f8:61:d4:67:27:40:cc:c5:14:b1:cf: 81:39:5b:15:8a:a3:f1:f6:d8:cf:20:3b:02:3b:5b:a5:ad:e6: c6:a4:20:e0 -----BEGIN CERTIFICATE----- MIIGmzCCBYOgAwIBAgIUaHTC24906KR+FDzhrwAhGTG3SiQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUxNTlaFw0yNTAzMDQxNzU2NTlaMDMxMTAvBgNV BAMTKEZFRjM4QzZDQjgzQTMzMENDNkQ1QTg3MzgzQzYxMjMxOUVBNjI2NzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCtY1i9nPgJ6uncC4GoEFOLpxol +D0ejnqr8DG8DLlGPSZMRsYK4L5Evg9UGYfJkiL4wo5E1uUIl8SQ+xmkdvbTdbeI Uw3g0g2DB7TChY52xCrlG8M/Lkp17CQuE+7jb54fN8Ewkc1o/D4IncneNqoU8/Am 8xuDRxdg4jf/6KXSfJ5WeHFuDjZORZDTwFYdxpAQhyq1ThAB/cvEdeT9UQ/D3cPN TA2xg6vlJwc2TA40Bdq45tdo8FDngQEV96ZBPN7I+uOucS+FQuqSjPLB8BRhKmn6 78FHAit/hr02qRpGhklZ8Y9nmxMO3nywJ59R7kLxXWIMuEadf1kl5IwQU/UTAgMB AAGjggOlMIIDoTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBT+84xsuDozDMbV qHODxhIxnqYmczAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRDczNjE3ODkyNTBCQTk5RkY2MzY0RkJD RkQ5Q0JGRkRGODAwQjQ5QzZEMUExQjQyQzUxRTRBNzAxNkJFMTkwMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ENzM2MTc4OTI1MEJBOTlGRjYzNjRGQkNGRDlDQkZGREY4MDBCNDlDNkQx QTFCNDJDNTFFNEE3MDE2QkUxOTAyLzAvRkVGMzhDNkNCODNBMzMwQ0M2RDVBODcz ODNDNjEyMzE5RUE2MjY3My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCUGCCsGAQUFBwEHAQH/BBYwFDASBAIAATAMAwQEvmtAAwQDyF34 MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAmz+MA0GCSqGSIb3DQEBCwUAA4IBAQBm 57K/cTjK1+O5bfGANKh99Sd1q54bjNXyOelY+R5+mvFVsZNTFCMzJ2Tvl+huN1cs CnNOOzn4yjU8T7q/CM6CjZLXRQaXL49bAFv2pJRolQoSmut/DZ7VApCk1nmLOatC HYlzHdWwgno0WRiNHJivaXhGQrmgrL0+0YQVnoGL51OtzYEKZJIO6Zzt0b1JtP8y K3YWypWbphC61Rn3UqLSbzWOuXNKDrSTj6z61OSKaazAq99GbRFnfx3qFgU++3vq glZ9jFKWVff57oD3UkxaINGLKIlF6L0W0c+xd8/d+GHUZydAzMUUsc+BOVsViqPx 9tjPIDsCO1ulrebGpCDg -----END CERTIFICATE-----Generated at Sun Nov 24 07:10:11 2024 by rpki-client on console-ams.rpki-client.org