$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0DE8977243535CE0F3EC273478A6A417B2521028.cer File: 0DE8977243535CE0F3EC273478A6A417B2521028.cer (raw, json) Hash identifier: 5CmdVNTurmxv3LBb7GO+erYyzbIxH9d+eivzcMSALxg= Subject key identifier: 0D:E8:97:72:43:53:5C:E0:F3:EC:27:34:78:A6:A4:17:B2:52:10:28 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 122D67B9C7CC92D18B8DCCE5071B444DB4F8E61E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:14:33 +0000 Certificate not after: Tue 04 Mar 2025 18:19:33 +0000 Subordinate resources: AS: 266775 IP: 45.235.96.0/23 IP: 2801:19:7000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 12:2d:67:b9:c7:cc:92:d1:8b:8d:cc:e5:07:1b:44:4d:b4:f8:e6:1e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:14:33 2024 GMT Not After : Mar 4 18:19:33 2025 GMT Subject: CN=0DE8977243535CE0F3EC273478A6A417B2521028 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:f5:35:6a:cb:e3:15:98:7d:5e:dd:fd:0f:eb: de:33:98:68:fa:3f:82:47:11:f4:e8:cf:fd:7e:8a: 52:16:dc:64:62:fb:de:85:95:f3:64:2f:9f:f0:42: 2d:3e:3e:c2:59:42:0e:2b:21:bb:b0:62:dd:0d:d1: 0d:85:e8:17:fa:3f:89:66:da:7a:c5:46:b6:dd:31: cf:6a:a4:94:86:41:37:c8:dd:01:df:86:af:4a:aa: 1d:43:5f:0a:9f:4d:d7:26:a0:98:a3:4b:b8:3d:06: 0c:e4:f0:a0:f2:d9:d3:87:61:74:07:95:ee:7d:ff: 54:4d:db:2c:76:94:3d:1f:70:85:a0:6c:99:17:ce: f7:f3:a8:b0:46:dc:96:2a:36:51:ae:94:b0:2c:bf: 5a:ad:19:9b:fa:8e:7e:80:e3:01:4f:9b:ba:ce:7d: e4:3f:38:4c:3d:28:f4:76:2b:6a:c1:ee:9a:cc:23: 8c:90:7e:af:7f:2e:54:30:52:49:1d:94:9e:1b:d4: 5b:0f:69:0d:66:3c:64:24:c2:a3:cd:52:8e:b6:ef: 5d:b9:a0:3c:39:78:aa:c1:63:d8:29:d4:42:d1:ac: f9:5d:07:29:43:7e:d0:ea:81:50:f4:6f:11:f9:8a: 2d:c5:b7:fa:7d:1c:ca:ba:18:96:ed:2e:60:69:0a: 4e:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0D:E8:97:72:43:53:5C:E0:F3:EC:27:34:78:A6:A4:17:B2:52:10:28 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/59D5E763C9E392911834DD536CB796AC7B1A28201584B9E701F27FBCD402997F/0/0DE8977243535CE0F3EC273478A6A417B2521028.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.235.96.0/23 IPv6: 2801:19:7000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266775 Signature Algorithm: sha256WithRSAEncryption 13:94:41:5c:b2:6d:e1:fc:a8:67:c9:d2:12:30:69:2e:b5:27: 3e:03:31:dd:c3:5c:5e:f7:1f:13:ea:f1:30:92:29:89:1f:86: 60:00:4f:05:c4:a3:81:fe:94:1a:48:d2:26:98:24:75:fd:98: 9c:38:35:cb:3e:86:f3:f2:67:e9:94:f2:5c:a9:2e:82:7a:f8: 5d:96:37:b1:2b:f9:82:9a:86:4d:5c:48:4f:49:43:38:36:8f: e4:9a:56:e3:f7:27:b5:d7:a7:35:61:a4:ef:cf:b0:7f:48:37: 3a:57:ec:c8:82:00:e5:ba:1d:24:83:c4:2c:7e:14:36:19:16: 18:af:9a:b5:bd:1f:d3:3e:bb:0d:19:44:45:ff:b2:50:58:46: 44:52:81:16:9d:c4:a9:0f:ae:c2:db:a1:fb:0e:ac:36:2a:ef: e2:c1:b1:cd:33:fb:07:b7:5a:e4:f1:7d:25:2f:4e:00:f9:d0: 73:d2:12:a9:b2:5f:29:35:fb:00:90:27:b4:70:f7:04:25:16: bd:ca:94:cb:39:13:78:e7:44:26:ed:a9:cd:10:b1:16:7e:11: 5b:69:d9:86:0e:83:18:12:a9:0e:4d:63:66:50:ea:4d:57:a2: 52:04:a3:e9:39:4e:1b:35:d5:91:c4:86:db:61:fe:c3:6d:28: 96:7f:52:de -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUEi1nucfMktGLjczlBxtETbT45h4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE0MzNaFw0yNTAzMDQxODE5MzNaMDMxMTAvBgNV BAMTKDBERTg5NzcyNDM1MzVDRTBGM0VDMjczNDc4QTZBNDE3QjI1MjEwMjgwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDl9TVqy+MVmH1e3f0P694zmGj6 P4JHEfToz/1+ilIW3GRi+96FlfNkL5/wQi0+PsJZQg4rIbuwYt0N0Q2F6Bf6P4lm 2nrFRrbdMc9qpJSGQTfI3QHfhq9Kqh1DXwqfTdcmoJijS7g9Bgzk8KDy2dOHYXQH le59/1RN2yx2lD0fcIWgbJkXzvfzqLBG3JYqNlGulLAsv1qtGZv6jn6A4wFPm7rO feQ/OEw9KPR2K2rB7prMI4yQfq9/LlQwUkkdlJ4b1FsPaQ1mPGQkwqPNUo627125 oDw5eKrBY9gp1ELRrPldBylDftDqgVD0bxH5ii3Ft/p9HMq6GJbtLmBpCk4FAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQN6JdyQ1Nc4PPs JzR4pqQXslIQKDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTlENUU3NjNDOUUzOTI5MTE4MzRERDUz NkNCNzk2QUM3QjFBMjgyMDE1ODRCOUU3MDFGMjdGQkNENDAyOTk3Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81OUQ1RTc2M0M5RTM5MjkxMTgzNERENTM2Q0I3OTZBQzdCMUEyODIwMTU4 NEI5RTcwMUYyN0ZCQ0Q0MDI5OTdGLzAvMERFODk3NzI0MzUzNUNFMEYzRUMyNzM0 NzhBNkE0MTdCMjUyMTAyOC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLetgMA8EAgAC MAkDBwAoAQAZcAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBIXMA0GCSqGSIb3 DQEBCwUAA4IBAQATlEFcsm3h/KhnydISMGkutSc+AzHdw1xe9x8T6vEwkimJH4Zg AE8FxKOB/pQaSNImmCR1/ZicODXLPobz8mfplPJcqS6CevhdljexK/mCmoZNXEhP SUM4No/kmlbj9ye116c1YaTvz7B/SDc6V+zIggDluh0kg8QsfhQ2GRYYr5q1vR/T PrsNGURF/7JQWEZEUoEWncSpD67C26H7Dqw2Ku/iwbHNM/sHt1rk8X0lL04A+dBz 0hKpsl8pNfsAkCe0cPcEJRa9ypTLORN450Qm7anNELEWfhFbadmGDoMYEqkOTWNm UOpNV6JSBKPpOU4bNdWRxIbbYf7DbSiWf1Le -----END CERTIFICATE-----Generated at Fri Oct 25 14:08:03 2024 by rpki-client on console-ams.rpki-client.org