$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.cer File: 06D18BEA60CBF0A0B777C76A44223261A203D25F.cer (raw, json) Hash identifier: OjbB0ZxdYbadE4dG+Jxtmue9QHCmmcskBQMF/KkgLqU= Subject key identifier: 06:D1:8B:EA:60:CB:F0:A0:B7:77:C7:6A:44:22:32:61:A2:03:D2:5F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 371A6715F83F0D3E7C9159D7C8BB9A8040F167B5 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:18:26 +0000 Certificate not after: Tue 04 Mar 2025 18:23:26 +0000 Subordinate resources: AS: 267755 IP: 45.170.124.0/22 IP: 2803:b3a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 01 Jun 2024 05:34:54 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 37:1a:67:15:f8:3f:0d:3e:7c:91:59:d7:c8:bb:9a:80:40:f1:67:b5 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:18:26 2024 GMT Not After : Mar 4 18:23:26 2025 GMT Subject: CN=06D18BEA60CBF0A0B777C76A44223261A203D25F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d7:e1:d5:5f:9a:35:f5:24:65:41:03:fb:3c:c2: 05:ee:eb:f7:0b:44:2a:05:b4:3c:fe:23:f6:ae:e9: c5:7b:f9:8e:1d:93:08:fe:18:85:91:98:df:f4:d3: ca:9f:1e:4c:98:0b:cb:5d:e2:3e:b5:aa:59:4a:3a: 78:dc:b2:ea:5e:a1:87:9f:8e:88:71:3f:88:46:fd: 01:fc:a9:a2:47:fb:f2:05:fe:4d:37:dd:cf:47:1f: c6:37:1d:7d:45:a9:0d:24:da:7d:64:e6:34:fe:ae: e2:97:3a:6c:b4:b6:49:9e:35:6b:0a:2f:57:4c:cb: 57:55:21:58:3e:9f:45:d5:85:1f:bb:e3:6e:39:d5: 1d:03:44:e9:53:f1:fb:85:a5:00:83:82:06:7e:59: ed:d1:bd:7b:24:62:f8:51:a2:af:2f:c8:2e:07:11: b1:f0:d1:6f:7a:0f:71:0c:45:e8:bb:9f:c7:06:44: 58:87:fa:29:54:e4:68:c4:08:c5:0a:67:7a:a6:12: bd:38:6a:c1:3a:a3:6f:50:69:cb:23:b2:53:79:17: 85:5e:68:b1:42:5b:03:a9:76:18:35:e6:a6:95:ec: c6:56:e8:5e:e6:05:4d:a8:17:30:81:58:5d:18:96: d0:7b:6a:a4:cb:25:66:b7:51:70:07:fd:17:4f:ce: 0d:cf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 06:D1:8B:EA:60:CB:F0:A0:B7:77:C7:6A:44:22:32:61:A2:03:D2:5F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C75F053002B290630FDA808B4EAB223C2F886DEDABDADA46E0224FB0CCFA14FA/0/06D18BEA60CBF0A0B777C76A44223261A203D25F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.170.124.0/22 IPv6: 2803:b3a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267755 Signature Algorithm: sha256WithRSAEncryption 16:d3:56:77:ee:cf:e8:b9:1b:09:9c:81:0c:b9:cd:c9:94:25: 39:36:81:c9:c7:f7:08:42:28:1c:42:de:16:65:2d:b2:0d:a9: 42:4e:31:0d:ca:f3:13:84:26:85:31:4b:46:3f:fd:a2:9a:a9: 31:01:fe:ab:40:73:f6:c1:fd:1c:46:2b:88:ee:b0:06:3f:fe: e0:39:bc:05:90:e4:16:14:08:86:ab:0f:3d:79:fe:dd:1b:8f: ad:8b:95:cc:9d:56:d2:96:0b:43:c4:eb:ff:85:46:58:f3:0e: 18:fe:76:e7:89:71:f2:b3:ef:f6:61:b5:eb:ee:b1:a5:cb:43: 96:51:7a:4c:89:89:a9:bc:52:2f:dc:c6:6d:ad:d3:43:0f:5c: 4a:d9:40:ac:92:26:ce:96:d6:61:34:bf:4f:c5:3a:7d:bc:dc: ea:82:95:ee:ea:90:d1:4c:76:d3:68:66:9f:27:31:56:e3:d8: 98:8e:3c:8a:7d:02:6b:94:23:21:6f:0a:f9:39:bf:59:fb:c9: 1d:f2:b6:2e:06:cb:67:0e:3b:26:0d:51:94:e8:67:06:ee:91: 96:b3:95:66:36:9c:69:c4:1c:8d:6e:c0:86:54:a1:c6:70:75: c6:a7:77:98:94:26:f2:e6:1a:13:8a:d4:a7:b2:74:47:25:28: 5f:04:86:a0 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUNxpnFfg/DT58kVnXyLuagEDxZ7UwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE4MjZaFw0yNTAzMDQxODIzMjZaMDMxMTAvBgNV BAMTKDA2RDE4QkVBNjBDQkYwQTBCNzc3Qzc2QTQ0MjIzMjYxQTIwM0QyNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDX4dVfmjX1JGVBA/s8wgXu6/cL RCoFtDz+I/au6cV7+Y4dkwj+GIWRmN/008qfHkyYC8td4j61qllKOnjcsupeoYef johxP4hG/QH8qaJH+/IF/k033c9HH8Y3HX1FqQ0k2n1k5jT+ruKXOmy0tkmeNWsK L1dMy1dVIVg+n0XVhR+742451R0DROlT8fuFpQCDggZ+We3RvXskYvhRoq8vyC4H EbHw0W96D3EMRei7n8cGRFiH+ilU5GjECMUKZ3qmEr04asE6o29QacsjslN5F4Ve aLFCWwOpdhg15qaV7MZW6F7mBU2oFzCBWF0YltB7aqTLJWa3UXAH/RdPzg3PAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQG0YvqYMvwoLd3 x2pEIjJhogPSXzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzc1RjA1MzAwMkIyOTA2MzBGREE4MDhC NEVBQjIyM0MyRjg4NkRFREFCREFEQTQ2RTAyMjRGQjBDQ0ZBMTRGQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DNzVGMDUzMDAyQjI5MDYzMEZEQTgwOEI0RUFCMjIzQzJGODg2REVEQUJE QURBNDZFMDIyNEZCMENDRkExNEZBLzAvMDZEMThCRUE2MENCRjBBMEI3NzdDNzZB NDQyMjMyNjFBMjAzRDI1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLap8MA0EAgAC MAcDBQAoA7OgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV6zANBgkqhkiG9w0B AQsFAAOCAQEAFtNWd+7P6LkbCZyBDLnNyZQlOTaBycf3CEIoHELeFmUtsg2pQk4x DcrzE4QmhTFLRj/9opqpMQH+q0Bz9sH9HEYriO6wBj/+4Dm8BZDkFhQIhqsPPXn+ 3RuPrYuVzJ1W0pYLQ8Tr/4VGWPMOGP5254lx8rPv9mG16+6xpctDllF6TImJqbxS L9zGba3TQw9cStlArJImzpbWYTS/T8U6fbzc6oKV7uqQ0Ux202hmnycxVuPYmI48 in0Ca5QjIW8K+Tm/WfvJHfK2LgbLZw47Jg1RlOhnBu6RlrOVZjacacQcjW7AhlSh xnB1xqd3mJQm8uYaE4rUp7J0RyUoXwSGoA== -----END CERTIFICATE-----Generated at Wed May 29 06:10:53 2024 by rpki-client on console-ams.rpki-client.org