$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer File: 64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.cer (raw, json) Hash identifier: YUHV3CVoaq2DTLDe4pxveNbnauO1+7N07AREWgC350E= Subject key identifier: 64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 78DC6A8EFE729D7052974AE297EAA6951CC8A75F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:39:15 +0000 Certificate not after: Tue 04 Mar 2025 17:44:15 +0000 Subordinate resources: AS: 267691 IP: 45.162.126.0/24 IP: 2803:41a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 78:dc:6a:8e:fe:72:9d:70:52:97:4a:e2:97:ea:a6:95:1c:c8:a7:5f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:39:15 2024 GMT Not After : Mar 4 17:44:15 2025 GMT Subject: CN=64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bf:1a:5f:f7:25:2e:9e:0b:18:cb:a2:59:98:d3: d3:8f:bf:a2:2b:6d:7a:28:99:f4:30:11:86:b8:6f: d5:8f:9e:fa:7f:3e:f5:11:45:a4:78:c9:02:cb:de: 89:ca:8b:4c:5e:e4:e2:f1:d0:66:24:03:a1:ec:0d: 52:7b:fa:ac:dd:b8:66:be:d0:40:30:9b:d2:20:03: 0a:7c:5b:5f:6b:f4:8d:fa:a9:7d:41:34:c9:dd:b8: d5:ac:d8:92:1e:b4:50:b5:51:42:9c:9d:b4:ab:c7: 84:b6:f6:e0:18:8a:9e:8a:f6:69:bf:9b:b5:f6:c3: a4:72:a6:bc:f8:d7:77:50:d6:54:99:2f:28:84:21: 54:72:c6:5a:a8:2f:ea:ff:cc:15:08:9c:ef:b4:cc: 80:8c:2d:f6:e8:88:3f:0c:48:80:64:bf:9e:4f:57: 09:5a:72:fd:15:a1:7a:ce:3a:89:59:66:f0:67:69: 64:93:7e:d3:5a:ae:38:18:b0:15:5c:ec:0f:4b:34: 0d:1e:74:b4:97:51:ba:d2:b3:c9:23:49:9b:2f:0b: e5:83:9a:29:71:08:e0:37:aa:4e:b4:01:58:af:59: 3d:2a:e7:15:0b:6f:0a:fb:c5:59:e8:0e:71:b5:d3: 86:28:02:31:f2:9d:b1:b9:af:1f:47:67:b0:b7:f0: dc:af Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 64:A6:B1:C6:C8:83:A1:69:4B:4E:88:ED:11:BD:2A:96:CB:EE:E0:C3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4626A0A123ED414D3F34975B9FE3F354FCD765EED3C7E2E60DDCBB27E216988C/0/64A6B1C6C883A1694B4E88ED11BD2A96CBEEE0C3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.162.126.0/24 IPv6: 2803:41a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267691 Signature Algorithm: sha256WithRSAEncryption d9:f9:15:e0:4d:94:82:70:a6:84:b6:f1:42:d1:17:8c:88:0a: e9:25:97:56:a4:0a:78:6c:dd:60:31:2e:18:cc:da:a9:1f:93: 3c:e2:52:ca:59:24:6b:b8:a3:f6:d7:2b:be:56:a5:84:cf:4f: 6a:9c:2c:75:a8:d0:dc:02:08:48:27:3d:4a:f3:50:a2:73:e7: 94:9f:5f:b5:17:5f:6d:88:ca:a2:a0:f0:9e:8f:81:72:50:8a: 11:c2:69:5c:4b:69:36:1b:59:e7:e5:bd:af:c6:4b:96:3d:a6: c9:44:47:37:26:34:fb:2b:8b:64:76:a5:7b:01:ea:20:9d:a9: 2b:d7:6f:65:cd:c1:37:3a:0b:2b:b3:15:06:3c:53:5b:e8:6f: 0b:4f:92:3f:df:a0:e5:0a:77:90:9d:39:e4:a2:89:c7:50:f6: 04:db:07:76:54:e8:39:13:4b:f8:f2:1b:57:3a:3b:8c:29:af: c2:27:9b:bf:fe:7b:71:cd:57:93:f4:99:a3:0f:cf:74:eb:fc: 45:1c:24:63:1e:39:6e:49:a6:9a:19:e0:7b:e5:b2:cd:9c:59: c4:75:f8:54:d0:44:97:aa:48:a8:f7:03:76:71:35:c2:54:eb: ce:76:c4:ac:13:25:57:01:7a:41:b9:11:42:af:1f:f0:c4:90: 5c:07:42:e9 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUeNxqjv5ynXBSl0ril+qmlRzIp18wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM5MTVaFw0yNTAzMDQxNzQ0MTVaMDMxMTAvBgNV BAMTKDY0QTZCMUM2Qzg4M0ExNjk0QjRFODhFRDExQkQyQTk2Q0JFRUUwQzMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC/Gl/3JS6eCxjLolmY09OPv6Ir bXoomfQwEYa4b9WPnvp/PvURRaR4yQLL3onKi0xe5OLx0GYkA6HsDVJ7+qzduGa+ 0EAwm9IgAwp8W19r9I36qX1BNMnduNWs2JIetFC1UUKcnbSrx4S29uAYip6K9mm/ m7X2w6Ryprz413dQ1lSZLyiEIVRyxlqoL+r/zBUInO+0zICMLfboiD8MSIBkv55P Vwlacv0VoXrOOolZZvBnaWSTftNarjgYsBVc7A9LNA0edLSXUbrSs8kjSZsvC+WD milxCOA3qk60AVivWT0q5xULbwr7xVnoDnG104YoAjHynbG5rx9HZ7C38NyvAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRkprHGyIOhaUtO iO0RvSqWy+7gwzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDYyNkEwQTEyM0VENDE0RDNGMzQ5NzVC OUZFM0YzNTRGQ0Q3NjVFRUQzQzdFMkU2MEREQ0JCMjdFMjE2OTg4Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80NjI2QTBBMTIzRUQ0MTREM0YzNDk3NUI5RkUzRjM1NEZDRDc2NUVFRDND N0UyRTYwRERDQkIyN0UyMTY5ODhDLzAvNjRBNkIxQzZDODgzQTE2OTRCNEU4OEVE MTFCRDJBOTZDQkVFRTBDMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALaJ+MA0EAgAC MAcDBQAoA0GgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQVqzANBgkqhkiG9w0B AQsFAAOCAQEA2fkV4E2UgnCmhLbxQtEXjIgK6SWXVqQKeGzdYDEuGMzaqR+TPOJS ylkka7ij9tcrvlalhM9PapwsdajQ3AIISCc9SvNQonPnlJ9ftRdfbYjKoqDwno+B clCKEcJpXEtpNhtZ5+W9r8ZLlj2myURHNyY0+yuLZHalewHqIJ2pK9dvZc3BNzoL K7MVBjxTW+hvC0+SP9+g5Qp3kJ055KKJx1D2BNsHdlToORNL+PIbVzo7jCmvwieb v/57cc1Xk/SZow/PdOv8RRwkYx45bkmmmhnge+WyzZxZxHX4VNBEl6pIqPcDdnE1 wlTrznbErBMlVwF6QbkRQq8f8MSQXAdC6Q== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:56 2024 by rpki-client on console-fra.rpki-client.org