$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.cer File: 02B881E65D6C311F6B248CD1A44B07782782D3C5.cer (raw, json) Hash identifier: zNv2G22ckn2c3Ibemb7ybZ7GfDoVTleaQNBlSgj4Npg= Subject key identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 26870DB4F97136D2D5455B91E6B6EB3CDAE1D348 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:45:40 +0000 Certificate not after: Tue 04 Mar 2025 17:50:40 +0000 Subordinate resources: AS: 267699 IP: 45.164.64.0/22 IP: 2803:51a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 26:87:0d:b4:f9:71:36:d2:d5:45:5b:91:e6:b6:eb:3c:da:e1:d3:48 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:45:40 2024 GMT Not After : Mar 4 17:50:40 2025 GMT Subject: CN=02B881E65D6C311F6B248CD1A44B07782782D3C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:6d:80:17:05:93:a3:18:4b:db:1c:2f:f9:11: 5b:fe:6e:04:b4:57:62:e3:59:37:05:9c:3b:84:47: ae:01:f1:c9:9c:1c:d1:d7:dd:cd:73:68:e6:da:7f: e8:50:39:35:99:e2:c8:5a:8b:39:61:46:9d:74:9a: 10:28:6f:fc:91:47:ec:f6:17:bf:f2:f2:24:49:48: 47:36:4d:28:f9:d7:28:e4:eb:08:47:ce:6b:b4:70: e6:89:c4:9f:c7:a7:ce:69:c1:93:14:54:71:00:7d: 71:bb:90:1a:6a:48:df:41:45:a5:4a:b4:bb:26:a9: 44:d8:71:b9:9e:22:4d:65:db:13:36:fc:e7:cb:9e: 50:09:10:54:bc:d1:01:cf:3a:8b:6c:a6:cc:36:74: 68:1b:c0:8e:98:16:9f:ee:e0:a1:9d:40:fd:ad:42: d5:c2:0e:4c:58:88:f5:bc:df:5f:18:3b:5f:25:74: 89:3c:6f:89:ce:76:ff:ae:b9:01:e1:e1:d6:9a:97: 0d:d4:50:9e:1c:1a:70:8b:0f:f6:33:4c:ef:bb:10: 0f:88:74:d3:22:b9:e4:4b:fe:53:a8:44:83:4a:8b: 4b:f4:24:24:ef:e0:88:25:4c:11:fb:7a:95:4e:db: 4c:4c:03:24:48:cd:21:2e:7c:7a:5e:7d:e4:0c:89: 2f:dd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:B8:81:E6:5D:6C:31:1F:6B:24:8C:D1:A4:4B:07:78:27:82:D3:C5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F15A46CEEB9819E6B43190D27F17AAF0B7B5242F6268117DC0787CBC2C11ECE2/0/02B881E65D6C311F6B248CD1A44B07782782D3C5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.164.64.0/22 IPv6: 2803:51a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267699 Signature Algorithm: sha256WithRSAEncryption c0:5e:1b:8b:02:b0:a5:72:d0:99:ad:d6:b0:8c:ee:d7:a5:a7: 11:45:e1:4a:db:e4:b0:91:b6:1d:8d:c5:d5:f9:c4:cc:87:5a: 86:f9:a5:99:d4:44:c7:65:65:82:0a:76:31:9c:97:88:6e:e9: 64:df:e2:2f:89:e9:61:71:ee:de:49:8d:fc:5b:ba:de:59:51: d9:fd:37:3d:80:aa:a7:7f:eb:89:52:17:3d:94:68:94:8b:d5: d6:09:f6:59:98:49:81:67:1b:59:2e:88:5f:e5:5d:c1:aa:94: f6:38:1e:05:a5:69:76:74:9e:ad:e4:82:da:da:1b:6b:c3:f5: cf:24:39:ea:6f:44:19:62:41:bf:f6:a6:20:cf:f6:a7:d9:93: b2:59:89:f5:5b:10:69:58:1f:67:88:84:ee:98:9e:d1:09:cb: f8:ce:22:9d:79:48:c4:6a:bd:10:dc:cc:ef:62:d0:7a:77:f0: 67:36:44:bc:35:ac:51:2d:04:f0:72:47:1b:8d:6d:ce:ba:bb: c8:dd:0a:05:90:8e:97:00:0d:d4:17:a4:1d:83:05:14:64:f1: eb:44:2e:17:e9:be:cb:c5:cf:a2:95:eb:ed:13:7e:44:37:99: 24:d5:f8:da:fd:1b:87:4f:d9:56:f2:4d:9f:29:ec:40:a3:fc: 26:d6:7b:a1 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUJocNtPlxNtLVRVuR5rbrPNrh00gwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ1NDBaFw0yNTAzMDQxNzUwNDBaMDMxMTAvBgNV BAMTKDAyQjg4MUU2NUQ2QzMxMUY2QjI0OENEMUE0NEIwNzc4Mjc4MkQzQzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCzbYAXBZOjGEvbHC/5EVv+bgS0 V2LjWTcFnDuER64B8cmcHNHX3c1zaObaf+hQOTWZ4shaizlhRp10mhAob/yRR+z2 F7/y8iRJSEc2TSj51yjk6whHzmu0cOaJxJ/Hp85pwZMUVHEAfXG7kBpqSN9BRaVK tLsmqUTYcbmeIk1l2xM2/OfLnlAJEFS80QHPOotspsw2dGgbwI6YFp/u4KGdQP2t QtXCDkxYiPW8318YO18ldIk8b4nOdv+uuQHh4daalw3UUJ4cGnCLD/YzTO+7EA+I dNMiueRL/lOoRINKi0v0JCTv4IglTBH7epVO20xMAyRIzSEufHpefeQMiS/dAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCuIHmXWwxH2sk jNGkSwd4J4LTxTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjE1QTQ2Q0VFQjk4MTlFNkI0MzE5MEQy N0YxN0FBRjBCN0I1MjQyRjYyNjgxMTdEQzA3ODdDQkMyQzExRUNFMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMTVBNDZDRUVCOTgxOUU2QjQzMTkwRDI3RjE3QUFGMEI3QjUyNDJGNjI2 ODExN0RDMDc4N0NCQzJDMTFFQ0UyLzAvMDJCODgxRTY1RDZDMzExRjZCMjQ4Q0Qx QTQ0QjA3NzgyNzgyRDNDNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLaRAMA0EAgAC MAcDBQAoA1GgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQVszANBgkqhkiG9w0B AQsFAAOCAQEAwF4biwKwpXLQma3WsIzu16WnEUXhStvksJG2HY3F1fnEzIdahvml mdREx2Vlggp2MZyXiG7pZN/iL4npYXHu3kmN/Fu63llR2f03PYCqp3/riVIXPZRo lIvV1gn2WZhJgWcbWS6IX+VdwaqU9jgeBaVpdnSereSC2toba8P1zyQ56m9EGWJB v/amIM/2p9mTslmJ9VsQaVgfZ4iE7pie0QnL+M4inXlIxGq9ENzM72LQenfwZzZE vDWsUS0E8HJHG41tzrq7yN0KBZCOlwAN1BekHYMFFGTx60QuF+m+y8XPopXr7RN+ RDeZJNX42v0bh0/ZVvJNnynsQKP8JtZ7oQ== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:54 2024 by rpki-client on console-fra.rpki-client.org