$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer File: 669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer (raw, json) Hash identifier: KQW2j4KazRNN41R8C/uxA8CTJVi3+Seb7OPJayXEt54= Subject key identifier: 66:90:67:DB:13:87:B4:BF:8A:24:6E:94:B0:3A:03:08:DC:CF:3C:6D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 081645E72D4C7E4C962AAFA9D3EAA263E3B50998 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:15:24 +0000 Certificate not after: Tue 04 Mar 2025 18:20:24 +0000 Subordinate resources: AS: 266756 IP: 45.233.92.0/22 IP: 2803:c720::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 08:16:45:e7:2d:4c:7e:4c:96:2a:af:a9:d3:ea:a2:63:e3:b5:09:98 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:15:24 2024 GMT Not After : Mar 4 18:20:24 2025 GMT Subject: CN=669067DB1387B4BF8A246E94B03A0308DCCF3C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:90:05:da:3c:a0:fb:f6:45:92:97:4f:5b: fe:ff:6a:62:3d:27:96:0b:e4:85:98:e7:2e:fc:82: 6e:29:99:fa:ac:f5:bb:05:28:f1:37:78:b5:42:7c: 7c:df:39:b2:e0:5a:e9:c3:aa:bd:c5:98:55:8f:c6: 6e:f5:25:6e:aa:55:9e:0c:b4:90:57:6f:a9:05:4f: 8d:9b:5d:45:56:17:65:11:eb:b5:13:eb:18:42:1a: ce:94:8c:98:35:95:62:03:4a:dc:8a:28:e4:d1:7d: fc:62:16:89:18:99:f4:dd:8e:69:a7:df:de:c0:2a: 92:60:11:c1:5f:b1:64:ae:99:67:80:6e:69:02:05: 79:9f:af:43:9b:8f:ba:68:83:24:75:c5:40:23:13: 8d:e0:23:76:04:dd:22:f3:d6:db:4e:7e:38:4a:30: 6a:cb:b6:96:31:a0:5b:e8:7c:60:ed:08:ab:05:49: 73:84:55:7b:be:6b:5d:1e:d3:4e:63:4f:20:16:c7: c1:5d:15:e6:b7:80:5a:b4:aa:da:37:80:be:57:3e: 47:32:45:1e:10:b3:74:96:98:3b:51:25:9e:aa:76: 2e:19:76:a2:31:e0:aa:e6:92:42:4f:45:7b:ab:f6: 1a:8d:e3:09:b2:42:38:97:4d:82:bb:fa:75:63:95: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:90:67:DB:13:87:B4:BF:8A:24:6E:94:B0:3A:03:08:DC:CF:3C:6D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.92.0/22 IPv6: 2803:c720::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266756 Signature Algorithm: sha256WithRSAEncryption 9e:84:56:22:c6:3c:fc:86:b4:c0:f0:90:d0:cd:39:38:c3:84: 55:5b:2e:f9:c0:04:5d:95:55:24:92:94:43:f2:29:09:fa:df: 69:10:1d:be:e6:3e:5d:5a:1c:80:42:8f:5e:94:ec:36:5b:a7: 78:48:31:64:91:c6:31:c8:9a:64:63:ee:93:6a:de:52:97:78: 75:90:ea:12:14:ec:91:bf:23:e2:7c:a3:b0:d9:52:25:9a:80: 90:ea:7c:5b:b1:79:67:c1:67:3d:6c:31:7e:fe:ac:8f:64:52: e1:ab:c5:59:05:56:b9:dc:9a:da:cd:8b:be:a9:38:46:eb:2a: e1:ad:96:00:13:50:ac:f9:5a:cf:f4:97:b9:95:f0:5a:59:4e: 5c:86:2c:2b:c3:58:c8:c3:a0:22:53:a1:a5:39:a7:3c:77:41: 67:f4:ed:45:d9:9b:a3:e3:d1:83:35:72:02:0a:34:01:d6:14: 84:e5:7b:45:4b:6b:d4:68:58:c2:4e:59:7d:e8:96:f1:48:93: 82:3d:05:81:b7:a3:e3:97:ba:fd:61:ec:32:ad:e9:66:97:22: cc:9b:89:45:8d:61:74:7e:39:a6:64:f4:36:f9:9f:6b:84:a7: fa:2d:ca:df:58:57:a5:07:78:e4:c8:3c:5f:27:91:7b:fe:75: ec:3c:bd:39 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUCBZF5y1MfkyWKq+p0+qiY+O1CZgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE1MjRaFw0yNTAzMDQxODIwMjRaMDMxMTAvBgNV BAMTKDY2OTA2N0RCMTM4N0I0QkY4QTI0NkU5NEIwM0EwMzA4RENDRjNDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC525AF2jyg+/ZFkpdPW/7/amI9 J5YL5IWY5y78gm4pmfqs9bsFKPE3eLVCfHzfObLgWunDqr3FmFWPxm71JW6qVZ4M tJBXb6kFT42bXUVWF2UR67UT6xhCGs6UjJg1lWIDStyKKOTRffxiFokYmfTdjmmn 397AKpJgEcFfsWSumWeAbmkCBXmfr0Obj7pogyR1xUAjE43gI3YE3SLz1ttOfjhK MGrLtpYxoFvofGDtCKsFSXOEVXu+a10e005jTyAWx8FdFea3gFq0qto3gL5XPkcy RR4Qs3SWmDtRJZ6qdi4ZdqIx4KrmkkJPRXur9hqN4wmyQjiXTYK7+nVjlSNtAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmkGfbE4e0v4ok bpSwOgMI3M88bTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzgwN0NGMEI0Q0U2Rjg2QUZFMkUyQkND NDU1ODU5MjA3M0EwNTREODAwNDc1NkFENTNENjlFNTk0MDk1RDU3Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DODA3Q0YwQjRDRTZGODZBRkUyRTJCQ0M0NTU4NTkyMDczQTA1NEQ4MDA0 NzU2QUQ1M0Q2OUU1OTQwOTVENTdCLzAvNjY5MDY3REIxMzg3QjRCRjhBMjQ2RTk0 QjAzQTAzMDhEQ0NGM0M2RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLelcMA0EAgAC MAcDBQAoA8cgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSBDANBgkqhkiG9w0B AQsFAAOCAQEAnoRWIsY8/Ia0wPCQ0M05OMOEVVsu+cAEXZVVJJKUQ/IpCfrfaRAd vuY+XVocgEKPXpTsNluneEgxZJHGMciaZGPuk2reUpd4dZDqEhTskb8j4nyjsNlS JZqAkOp8W7F5Z8FnPWwxfv6sj2RS4avFWQVWudya2s2Lvqk4Rusq4a2WABNQrPla z/SXuZXwWllOXIYsK8NYyMOgIlOhpTmnPHdBZ/TtRdmbo+PRgzVyAgo0AdYUhOV7 RUtr1GhYwk5ZfeiW8UiTgj0Fgbej45e6/WHsMq3pZpcizJuJRY1hdH45pmT0Nvmf a4Sn+i3K31hXpQd45Mg8XyeRe/517Dy9OQ== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:56 2024 by rpki-client on console-fra.rpki-client.org