$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.cer File: 37778FB3BBBCADF08682A83B0412FC276F4AEE14.cer (raw, json) Hash identifier: oyQFLgW5OvdRmgqeqv7ZKGnIKSjPGboQ01boC3mHBtk= Subject key identifier: 37:77:8F:B3:BB:BC:AD:F0:86:82:A8:3B:04:12:FC:27:6F:4A:EE:14 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0D3AE4387AF5D79E0A290580E1AC3BA908E6F8F1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:37:14 +0000 Certificate not after: Tue 04 Mar 2025 17:42:14 +0000 Subordinate resources: AS: 265583 IP: 45.174.240.0/22 IP: 2806:338::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:3a:e4:38:7a:f5:d7:9e:0a:29:05:80:e1:ac:3b:a9:08:e6:f8:f1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:37:14 2024 GMT Not After : Mar 4 17:42:14 2025 GMT Subject: CN=37778FB3BBBCADF08682A83B0412FC276F4AEE14 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b3:d2:8a:58:71:5f:00:58:08:ba:c5:4d:23:b3: dc:e6:71:82:ac:2b:dc:ee:fb:68:49:9f:a0:7b:73: f7:00:82:c7:aa:5a:03:22:34:10:cd:88:c9:af:a5: 1b:5c:d4:3e:05:29:a0:a1:d9:09:63:b8:7d:01:b0: 1b:ab:08:22:9a:2b:d2:da:ba:37:a1:65:17:f9:24: b5:3a:94:8e:79:71:6f:c6:08:0e:fd:3d:12:f5:81: 7d:f0:e6:b1:91:ef:29:fb:2d:05:27:4e:12:f6:46: 43:28:5f:84:e2:13:3b:06:3b:80:42:9f:0d:b8:f1: b3:c6:8e:93:31:46:c9:3c:7d:6a:2f:07:05:c4:1e: 8f:a2:83:a5:ad:56:82:75:d6:cf:3e:cc:28:3e:7d: 23:0f:d6:ef:7a:b3:2b:e8:69:6f:5a:f9:24:44:0b: 78:8a:16:9e:80:71:8a:19:ae:6f:84:16:6a:64:f2: d1:97:20:88:88:e5:df:8e:15:28:58:41:10:d5:dc: ea:4d:09:0f:25:2e:71:9e:50:9e:0e:03:b4:b0:1b: 35:b1:80:df:d8:b1:53:76:34:ab:68:d2:a6:1f:55: 78:6b:e2:14:c3:51:ad:45:8c:92:c1:c6:7d:e2:ce: 5f:22:2e:b9:54:53:3d:ff:7f:82:eb:8a:84:27:5b: a6:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 37:77:8F:B3:BB:BC:AD:F0:86:82:A8:3B:04:12:FC:27:6F:4A:EE:14 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C2B569F144DE665F07F73FCC55E6012ECFE982F76F42BC732C30C3F1D974F0E2/0/37778FB3BBBCADF08682A83B0412FC276F4AEE14.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.174.240.0/22 IPv6: 2806:338::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265583 Signature Algorithm: sha256WithRSAEncryption 4f:c5:54:d9:02:5b:2b:6a:86:18:49:28:ee:d1:9c:5b:a1:f8: 12:2a:c4:c6:bc:10:21:05:0d:c9:f7:9d:43:c8:f2:83:3a:85: 4d:0b:ee:09:1e:cf:63:3e:ea:36:49:fb:be:7d:ad:0b:8f:46: ac:47:ca:d6:c9:04:61:af:72:b4:af:24:a7:19:99:bc:6c:b1: 81:17:da:3b:58:97:0f:a8:1c:b1:fe:9d:d0:81:2a:7e:c0:74: e7:bb:51:46:89:28:b7:07:3d:de:08:99:f0:9e:36:fd:f7:fd: 87:73:25:91:a0:cd:59:f5:ee:6f:c3:16:94:bb:23:ed:ae:8b: 09:2f:16:8d:01:97:78:86:f4:70:d8:03:bd:84:02:61:04:0c: 82:b0:94:e2:e0:67:17:da:27:6d:e3:d2:3d:9f:29:84:2c:99: 10:1d:5e:a8:80:f0:32:c7:f4:7b:32:cd:90:f0:94:3d:b3:ca: f8:73:1a:a3:ee:fe:ba:ea:ec:9f:fb:52:57:e1:04:ff:f6:50: f4:fc:d6:01:c9:0a:be:aa:54:64:55:7a:f9:f2:1b:da:bc:cd: ec:39:03:ad:7a:8e:ef:cc:fb:34:fb:a2:58:b0:48:82:da:65: 8e:53:76:ff:c3:1b:49:9e:83:99:91:b7:63:0c:0f:1f:5d:a0: b5:d1:b8:8f -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUDTrkOHr1154KKQWA4aw7qQjm+PEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM3MTRaFw0yNTAzMDQxNzQyMTRaMDMxMTAvBgNV BAMTKDM3Nzc4RkIzQkJCQ0FERjA4NjgyQTgzQjA0MTJGQzI3NkY0QUVFMTQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCz0opYcV8AWAi6xU0js9zmcYKs K9zu+2hJn6B7c/cAgseqWgMiNBDNiMmvpRtc1D4FKaCh2QljuH0BsBurCCKaK9La ujehZRf5JLU6lI55cW/GCA79PRL1gX3w5rGR7yn7LQUnThL2RkMoX4TiEzsGO4BC nw248bPGjpMxRsk8fWovBwXEHo+ig6WtVoJ11s8+zCg+fSMP1u96syvoaW9a+SRE C3iKFp6AcYoZrm+EFmpk8tGXIIiI5d+OFShYQRDV3OpNCQ8lLnGeUJ4OA7SwGzWx gN/YsVN2NKto0qYfVXhr4hTDUa1FjJLBxn3izl8iLrlUUz3/f4LrioQnW6YXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ3d4+zu7yt8IaC qDsEEvwnb0ruFDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzJCNTY5RjE0NERFNjY1RjA3RjczRkND NTVFNjAxMkVDRkU5ODJGNzZGNDJCQzczMkMzMEMzRjFEOTc0RjBFMi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DMkI1NjlGMTQ0REU2NjVGMDdGNzNGQ0M1NUU2MDEyRUNGRTk4MkY3NkY0 MkJDNzMyQzMwQzNGMUQ5NzRGMEUyLzAvMzc3NzhGQjNCQkJDQURGMDg2ODJBODNC MDQxMkZDMjc2RjRBRUUxNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa7wMA0EAgAC MAcDBQAoBgM4MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNbzANBgkqhkiG9w0B AQsFAAOCAQEAT8VU2QJbK2qGGEko7tGcW6H4EirExrwQIQUNyfedQ8jygzqFTQvu CR7PYz7qNkn7vn2tC49GrEfK1skEYa9ytK8kpxmZvGyxgRfaO1iXD6gcsf6d0IEq fsB057tRRokotwc93giZ8J42/ff9h3MlkaDNWfXub8MWlLsj7a6LCS8WjQGXeIb0 cNgDvYQCYQQMgrCU4uBnF9onbePSPZ8phCyZEB1eqIDwMsf0ezLNkPCUPbPK+HMa o+7+uursn/tSV+EE//ZQ9PzWAckKvqpUZFV6+fIb2rzN7DkDrXqO78z7NPuiWLBI gtpljlN2/8MbSZ6DmZG3YwwPH12gtdG4jw== -----END CERTIFICATE-----Generated at Sun Jun 2 12:44:49 2024 by rpki-client on console-ams.rpki-client.org