$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/17635987A6691105242D437D62AE03F09EC477A5.cer File: 17635987A6691105242D437D62AE03F09EC477A5.cer (raw, json) Hash identifier: S22l8lZ5eMPqTK2OW4ZmseVyyJ5wMK215MK6Tc33DQA= Subject key identifier: 17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 68D58BE0CB1AEFF8DD15EDD4564664CB2FA1AEDD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:09:32 +0000 Certificate not after: Tue 04 Mar 2025 18:14:32 +0000 Subordinate resources: AS: 266734 IP: 45.230.216.0/22 IP: 2803:4320::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 68:d5:8b:e0:cb:1a:ef:f8:dd:15:ed:d4:56:46:64:cb:2f:a1:ae:dd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:09:32 2024 GMT Not After : Mar 4 18:14:32 2025 GMT Subject: CN=17635987A6691105242D437D62AE03F09EC477A5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:94:c6:3b:a4:2a:90:a0:c6:6f:6e:c2:2b:57:4f: 40:69:6d:85:af:38:0b:ad:18:e4:86:d8:a1:95:ad: 25:58:fa:62:02:77:1f:01:ca:2a:a5:b5:a8:df:9f: ff:9a:f6:16:00:59:06:20:d7:ac:b7:cc:06:11:89: ea:e2:d7:2b:55:05:99:0e:fb:9a:48:85:3d:d2:43: 45:73:6f:cf:a5:ee:ce:b8:e4:e1:68:6e:76:b7:1a: 11:f1:a9:df:dd:d1:1d:59:a3:54:13:c8:34:78:ed: d8:b3:2f:71:fd:92:f6:2c:a9:fc:0b:e3:53:c5:0d: 9e:90:3f:05:89:78:68:86:ea:3f:49:d1:ca:60:ef: e2:da:6a:c5:5c:f9:97:17:0b:97:ca:12:5d:3a:db: 38:28:e1:8a:39:92:de:29:92:82:c1:e3:3b:3b:0d: 93:bc:c3:ba:ea:25:1f:9d:39:83:ea:f4:85:9c:58: 39:48:4a:ab:59:65:6f:f6:ae:9f:a9:88:77:42:49: a6:91:91:35:9a:af:f0:6a:22:a1:51:a4:27:6e:2f: 4b:ec:67:76:f5:12:74:20:d1:6b:71:c0:04:01:ca: 0e:cb:74:f0:80:ee:37:67:10:e5:6c:6f:2a:0a:ee: 95:ea:d1:72:5d:1e:87:4e:49:96:b4:8a:53:46:eb: 89:51 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 17:63:59:87:A6:69:11:05:24:2D:43:7D:62:AE:03:F0:9E:C4:77:A5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DF71DA80B542C583081AEBBB46A5FB11E44BFA3A1558EE5752389C9D7165A89D/0/17635987A6691105242D437D62AE03F09EC477A5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.216.0/22 IPv6: 2803:4320::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266734 Signature Algorithm: sha256WithRSAEncryption 84:87:41:02:ca:55:f1:d1:05:eb:c6:8a:3a:a0:20:f3:ed:03: b9:d5:54:62:2b:51:e6:75:95:e8:ff:7f:62:bd:f7:20:af:4d: aa:04:74:61:f5:47:c0:53:93:51:2d:ca:19:4b:5e:20:61:ea: b3:97:ab:ea:f3:6c:be:93:4e:f5:50:7c:76:01:49:b0:92:76: 92:32:12:7d:d5:2c:f5:6c:07:ff:4c:4d:fd:6f:15:52:ac:8a: 46:7a:74:41:f7:43:7e:a7:eb:a8:d6:dd:cf:40:df:1b:cb:39: b8:5e:88:4b:ad:45:77:60:2d:1b:61:1f:ae:f8:5d:62:1a:c6: 17:14:bc:05:41:f3:b8:d9:b6:bd:a7:91:3d:0d:6c:fe:9f:27: 5a:48:2f:81:08:bb:52:9f:a0:c2:65:c1:c4:94:82:7e:c0:58: ba:ce:6b:8e:d5:8a:61:8f:ed:70:9d:c5:ea:17:f1:dc:65:c2: 6d:98:63:f4:3c:d5:3e:95:4e:71:9e:5c:dc:4b:bc:bd:d4:c8: 87:72:ff:f3:67:48:de:07:f2:af:12:6d:43:f1:19:1c:c0:7d: ef:ca:93:43:38:1c:42:d9:1f:15:3f:89:e7:59:94:e8:80:f7: b5:89:2f:12:dc:ff:f7:68:4e:9a:ca:c4:f4:da:33:1b:23:7a: e5:ae:80:bc -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUaNWL4Msa7/jdFe3UVkZkyy+hrt0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA5MzJaFw0yNTAzMDQxODE0MzJaMDMxMTAvBgNV BAMTKDE3NjM1OTg3QTY2OTExMDUyNDJENDM3RDYyQUUwM0YwOUVDNDc3QTUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCUxjukKpCgxm9uwitXT0BpbYWv OAutGOSG2KGVrSVY+mICdx8Byiqltajfn/+a9hYAWQYg16y3zAYRieri1ytVBZkO +5pIhT3SQ0Vzb8+l7s645OFobna3GhHxqd/d0R1Zo1QTyDR47dizL3H9kvYsqfwL 41PFDZ6QPwWJeGiG6j9J0cpg7+LaasVc+ZcXC5fKEl062zgo4Yo5kt4pkoLB4zs7 DZO8w7rqJR+dOYPq9IWcWDlISqtZZW/2rp+piHdCSaaRkTWar/BqIqFRpCduL0vs Z3b1EnQg0WtxwAQByg7LdPCA7jdnEOVsbyoK7pXq0XJdHodOSZa0ilNG64lRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQXY1mHpmkRBSQt Q31irgPwnsR3pTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREY3MURBODBCNTQyQzU4MzA4MUFFQkJC NDZBNUZCMTFFNDRCRkEzQTE1NThFRTU3NTIzODlDOUQ3MTY1QTg5RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9ERjcxREE4MEI1NDJDNTgzMDgxQUVCQkI0NkE1RkIxMUU0NEJGQTNBMTU1 OEVFNTc1MjM4OUM5RDcxNjVBODlELzAvMTc2MzU5ODdBNjY5MTEwNTI0MkQ0MzdE NjJBRTAzRjA5RUM0NzdBNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLebYMA0EAgAC MAcDBQAoA0MgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQR7jANBgkqhkiG9w0B AQsFAAOCAQEAhIdBAspV8dEF68aKOqAg8+0DudVUYitR5nWV6P9/Yr33IK9NqgR0 YfVHwFOTUS3KGUteIGHqs5er6vNsvpNO9VB8dgFJsJJ2kjISfdUs9WwH/0xN/W8V UqyKRnp0QfdDfqfrqNbdz0DfG8s5uF6IS61Fd2AtG2EfrvhdYhrGFxS8BUHzuNm2 vaeRPQ1s/p8nWkgvgQi7Up+gwmXBxJSCfsBYus5rjtWKYY/tcJ3F6hfx3GXCbZhj 9DzVPpVOcZ5c3Eu8vdTIh3L/82dI3gfyrxJtQ/EZHMB978qTQzgcQtkfFT+J51mU 6ID3tYkvEtz/92hOmsrE9NozGyN65a6AvA== -----END CERTIFICATE-----Generated at Fri Oct 25 14:08:04 2024 by rpki-client on console-ams.rpki-client.org