$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer File: 00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.cer (raw, json) Hash identifier: 61Ez8RlwIGBLh2EAW6Cw1MiOXtcGv3sWjlJwKKr7zcs= Subject key identifier: 00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6245F50CA96A93207BDC572840FBA5EBB7EF9A76 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:09:27 +0000 Certificate not after: Tue 04 Mar 2025 18:14:27 +0000 Subordinate resources: AS: 265530 IP: 45.5.52.0/22 IP: 2806:28e::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 May 2024 10:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 62:45:f5:0c:a9:6a:93:20:7b:dc:57:28:40:fb:a5:eb:b7:ef:9a:76 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:09:27 2024 GMT Not After : Mar 4 18:14:27 2025 GMT Subject: CN=00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:86:04:42:94:19:9c:b9:86:37:72:b7:8f:25: b0:cc:82:0b:60:15:92:b9:c7:9f:f2:95:f1:de:36: 28:e2:37:09:52:4a:85:db:f2:a5:d7:56:2d:2b:a1: 8c:a7:b4:d5:06:65:91:e2:46:fc:9b:3a:1d:b8:a4: 48:55:4a:ce:14:6a:6e:63:a2:90:96:5b:b7:ce:20: 15:f1:df:74:2e:13:82:99:09:2f:1d:d4:24:16:e2: d8:2c:dd:8d:bc:d5:4f:6c:60:b7:ba:d2:6a:96:c8: 8f:16:ec:30:d3:5b:66:d3:44:d4:31:8d:86:f9:3e: a3:7d:36:f6:33:8e:41:a6:b9:15:ea:f7:01:65:5e: 93:88:e3:0a:8b:9e:26:85:2e:af:a7:4c:d5:7c:a0: 82:cf:d8:f2:08:b7:d0:11:51:ba:71:61:60:c3:41: a5:28:34:6c:18:76:95:84:14:8c:fe:ce:c5:82:0a: 7b:55:b8:70:cd:18:6c:24:75:89:ca:5d:91:0a:74: e3:82:ec:3b:ca:dd:ad:84:34:12:b3:7b:02:38:82: 2c:6f:4c:09:e6:02:2c:c8:cd:c4:39:3a:af:95:8b: 14:a5:95:9f:39:47:65:46:68:f8:81:c5:02:fa:bb: 55:2e:f9:52:09:08:5f:ec:79:c2:68:c2:20:8e:86: 8b:2f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 00:CD:C0:EF:33:C6:0D:8C:03:5C:A6:9F:18:6F:D6:C3:DD:EE:F5:F5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3C2B34BBC77424E2C6759DD22F8183A72878DE501A6E5523E0A55F55F22C91E7/0/00CDC0EF33C60D8C035CA69F186FD6C3DDEEF5F5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.52.0/22 IPv6: 2806:28e::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265530 Signature Algorithm: sha256WithRSAEncryption 08:57:ec:e6:9c:c6:97:86:3e:49:32:8b:4f:12:60:6e:c6:08: 55:82:77:3e:89:2b:fb:ac:3f:08:f7:75:48:ed:e1:e9:5e:fe: 7a:60:f8:2f:a7:37:10:bb:c5:c1:a9:78:85:0a:0c:68:78:a7: c3:29:90:f8:0e:d4:01:25:99:70:a7:69:c8:ab:81:eb:14:79: b7:4b:65:44:92:e4:82:c0:fc:be:39:46:03:39:78:c5:84:5f: b7:17:6d:d9:1f:ec:d7:79:c1:83:5c:5c:a3:a8:a4:18:11:66: 79:dd:4b:89:70:1c:58:e9:67:45:98:d7:89:91:e2:6a:22:02: 1c:be:65:2e:48:3d:6e:a5:a2:be:e8:2a:3a:09:6b:fb:00:17: 79:43:71:09:fa:5a:bf:28:85:cb:50:cf:de:87:f2:34:05:21: c5:3d:55:c7:56:0c:fc:c6:94:79:6a:c0:9d:22:76:54:27:d5: cb:08:4f:c0:01:9b:53:e3:63:e7:b8:49:5e:80:c3:31:0a:dc: e5:61:03:47:59:5d:2d:64:09:a3:71:ac:b5:fd:2b:d9:8e:14: 27:4e:1a:d9:46:a9:9c:ae:48:99:c6:c2:86:95:40:10:82:f9: ba:1f:02:f0:00:f2:0c:cd:1d:7b:66:7a:9f:63:1f:c4:d8:ff: 23:ab:cf:b6 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUYkX1DKlqkyB73FcoQPul67fvmnYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA5MjdaFw0yNTAzMDQxODE0MjdaMDMxMTAvBgNV BAMTKDAwQ0RDMEVGMzNDNjBEOEMwMzVDQTY5RjE4NkZENkMzRERFRUY1RjUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCohgRClBmcuYY3crePJbDMggtg FZK5x5/ylfHeNijiNwlSSoXb8qXXVi0roYyntNUGZZHiRvybOh24pEhVSs4Uam5j opCWW7fOIBXx33QuE4KZCS8d1CQW4tgs3Y281U9sYLe60mqWyI8W7DDTW2bTRNQx jYb5PqN9NvYzjkGmuRXq9wFlXpOI4wqLniaFLq+nTNV8oILP2PIIt9ARUbpxYWDD QaUoNGwYdpWEFIz+zsWCCntVuHDNGGwkdYnKXZEKdOOC7DvK3a2ENBKzewI4gixv TAnmAizIzcQ5Oq+VixSllZ85R2VGaPiBxQL6u1Uu+VIJCF/secJowiCOhosvAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQAzcDvM8YNjANc pp8Yb9bD3e719TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvM0MyQjM0QkJDNzc0MjRFMkM2NzU5REQy MkY4MTgzQTcyODc4REU1MDFBNkU1NTIzRTBBNTVGNTVGMjJDOTFFNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zQzJCMzRCQkM3NzQyNEUyQzY3NTlERDIyRjgxODNBNzI4NzhERTUwMUE2 RTU1MjNFMEE1NUY1NUYyMkM5MUU3LzAvMDBDREMwRUYzM0M2MEQ4QzAzNUNBNjlG MTg2RkQ2QzNEREVFRjVGNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQU0MA0EAgAC MAcDBQAoBgKOMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNOjANBgkqhkiG9w0B AQsFAAOCAQEACFfs5pzGl4Y+STKLTxJgbsYIVYJ3Pokr+6w/CPd1SO3h6V7+emD4 L6c3ELvFwal4hQoMaHinwymQ+A7UASWZcKdpyKuB6xR5t0tlRJLkgsD8vjlGAzl4 xYRftxdt2R/s13nBg1xco6ikGBFmed1LiXAcWOlnRZjXiZHiaiICHL5lLkg9bqWi vugqOglr+wAXeUNxCfpavyiFy1DP3ofyNAUhxT1Vx1YM/MaUeWrAnSJ2VCfVywhP wAGbU+Nj57hJXoDDMQrc5WEDR1ldLWQJo3Gstf0r2Y4UJ04a2UapnK5ImcbChpVA EIL5uh8C8ADyDM0de2Z6n2MfxNj/I6vPtg== -----END CERTIFICATE-----Generated at Sat May 18 17:19:19 2024 by rpki-client on console-ams.rpki-client.org