$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/029141245BD9F1CE31BEF7964E181E44F17CE901.cer File: 029141245BD9F1CE31BEF7964E181E44F17CE901.cer (raw, json) Hash identifier: azyUFjuPRWkhqbdbufPpz178XcEC02/tGkxi3+2te+A= Subject key identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0988F39B05E478E4999B890B6D5CC448C223430A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:01:03 +0000 Certificate not after: Tue 04 Mar 2025 18:06:03 +0000 Subordinate resources: AS: 265663 IP: 45.175.140.0/22 IP: 2803:6c60::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 27 Nov 2024 03:32:48 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 09:88:f3:9b:05:e4:78:e4:99:9b:89:0b:6d:5c:c4:48:c2:23:43:0a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:01:03 2024 GMT Not After : Mar 4 18:06:03 2025 GMT Subject: CN=029141245BD9F1CE31BEF7964E181E44F17CE901 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:8b:1e:d6:17:58:e8:ad:0f:8b:e2:c9:8c:87: 0e:61:0d:92:42:a5:bb:02:51:17:a6:c0:fa:c8:f5: ca:72:04:8c:7d:81:a9:ba:0e:39:aa:9f:b3:75:b1: d6:79:6e:c4:1a:79:0b:5e:8a:3d:7e:6b:e9:85:c0: c8:4e:6e:8c:24:1c:98:31:36:98:f2:53:a5:48:42: fc:0d:31:ff:0a:66:19:62:ad:bb:c0:26:a5:e9:90: 4b:81:1e:45:f9:5e:c6:f5:3f:a7:b4:29:f8:22:39: e0:59:bf:ff:2e:9b:3d:4a:ae:13:05:ca:bc:c7:ee: 38:d8:2d:f9:6e:e3:f0:71:61:69:51:82:86:e8:97: 45:2f:79:49:9a:50:4e:9b:06:06:1b:cf:4b:2e:e0: 51:18:2b:71:0a:dc:3d:63:3f:7d:53:5c:99:db:24: c5:f8:9e:81:46:bd:a0:a1:65:92:27:22:70:3c:18: a1:2e:11:a7:82:d2:e9:a0:a0:2b:9d:4a:b4:72:9b: ce:77:31:ac:73:c2:60:98:d7:f3:7a:5c:08:3a:e0: 20:7b:5d:34:89:78:d0:f0:ae:d8:f4:38:53:16:1a: 5e:f5:09:29:86:ee:78:ad:db:19:5a:a5:2d:bb:2a: cc:bd:06:d8:02:b2:b0:80:b8:89:fd:93:ce:43:e0: 1a:0d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:91:41:24:5B:D9:F1:CE:31:BE:F7:96:4E:18:1E:44:F1:7C:E9:01 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/BB4DF8CC7F0E83CF9DA7BB36773BA4B398F3570BC6019CA934CA5B06B8706C64/0/029141245BD9F1CE31BEF7964E181E44F17CE901.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.175.140.0/22 IPv6: 2803:6c60::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265663 Signature Algorithm: sha256WithRSAEncryption 7a:48:de:28:f3:48:54:96:4a:c0:3f:97:e3:51:2e:60:65:64: 16:2c:43:20:a9:5f:6a:35:9e:d5:ad:62:22:c5:bf:9f:f6:0a: 25:87:d5:ae:c7:cf:df:bc:d3:eb:f6:1b:42:9a:52:82:18:0d: fe:c1:24:54:0c:9c:e9:be:72:24:28:1b:78:f3:66:19:8c:45: db:39:41:01:ab:59:ad:f8:ae:52:6d:73:72:aa:2a:52:3f:cb: 4f:cf:ad:78:f8:8c:9c:24:08:0e:8d:4d:1d:da:2c:37:2e:f7: 46:e9:27:7f:af:8b:d9:66:eb:0e:02:ef:9f:0c:e5:99:d4:01: 91:e0:0b:15:2c:9a:07:0e:84:e6:5f:b6:c3:a8:4e:96:e5:18: e9:93:55:61:aa:04:e7:71:71:84:50:bd:f3:46:f7:bc:c6:e2: 84:ab:ae:2c:9f:f7:3c:e6:23:e9:bd:35:a3:ea:ea:22:15:a4: 30:20:64:9e:8a:e1:e8:9f:c0:9e:dc:12:d7:7f:cb:93:16:06: 04:fd:c2:90:c1:f2:4c:0b:2b:29:57:a7:6b:f0:94:32:d4:0f: f7:03:b6:4b:a9:4a:cb:c8:6a:68:b5:dc:de:85:f4:e7:1e:f8: 77:e8:f0:79:c8:c6:62:9d:3b:19:fd:91:4f:30:df:2a:ab:47: 87:71:ae:03 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUCYjzmwXkeOSZm4kLbVzESMIjQwowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODAxMDNaFw0yNTAzMDQxODA2MDNaMDMxMTAvBgNV BAMTKDAyOTE0MTI0NUJEOUYxQ0UzMUJFRjc5NjRFMTgxRTQ0RjE3Q0U5MDEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0ix7WF1jorQ+L4smMhw5hDZJC pbsCURemwPrI9cpyBIx9gam6Djmqn7N1sdZ5bsQaeQteij1+a+mFwMhObowkHJgx NpjyU6VIQvwNMf8KZhlirbvAJqXpkEuBHkX5Xsb1P6e0KfgiOeBZv/8umz1KrhMF yrzH7jjYLflu4/BxYWlRgobol0UveUmaUE6bBgYbz0su4FEYK3EK3D1jP31TXJnb JMX4noFGvaChZZInInA8GKEuEaeC0umgoCudSrRym853MaxzwmCY1/N6XAg64CB7 XTSJeNDwrtj0OFMWGl71CSmG7nit2xlapS27Ksy9BtgCsrCAuIn9k85D4BoNAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQCkUEkW9nxzjG+ 95ZOGB5E8XzpATAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQkI0REY4Q0M3RjBFODNDRjlEQTdCQjM2 NzczQkE0QjM5OEYzNTcwQkM2MDE5Q0E5MzRDQTVCMDZCODcwNkM2NC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9CQjRERjhDQzdGMEU4M0NGOURBN0JCMzY3NzNCQTRCMzk4RjM1NzBCQzYw MTlDQTkzNENBNUIwNkI4NzA2QzY0LzAvMDI5MTQxMjQ1QkQ5RjFDRTMxQkVGNzk2 NEUxODFFNDRGMTdDRTkwMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa+MMA0EAgAC MAcDBQAoA2xgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNvzANBgkqhkiG9w0B AQsFAAOCAQEAekjeKPNIVJZKwD+X41EuYGVkFixDIKlfajWe1a1iIsW/n/YKJYfV rsfP37zT6/YbQppSghgN/sEkVAyc6b5yJCgbePNmGYxF2zlBAatZrfiuUm1zcqoq Uj/LT8+tePiMnCQIDo1NHdosNy73Ruknf6+L2WbrDgLvnwzlmdQBkeALFSyaBw6E 5l+2w6hOluUY6ZNVYaoE53FxhFC980b3vMbihKuuLJ/3POYj6b01o+rqIhWkMCBk norh6J/AntwS13/LkxYGBP3CkMHyTAsrKVena/CUMtQP9wO2S6lKy8hqaLXc3oX0 5x74d+jwecjGYp07Gf2RTzDfKqtHh3GuAw== -----END CERTIFICATE-----Generated at Fri Nov 22 04:00:02 2024 by rpki-client on console-ams.rpki-client.org