$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.cer File: 22E20380327B2CB679071D7FE9AC4DBFA317A166.cer (raw, json) Hash identifier: C74mQAp0Ti3ntNjvrPE2l8XpDxnfgp0dFbZBkdXQIjc= Subject key identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3C02D4B49B834F1A5559018C978BF0C60FF0F974 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:44:40 +0000 Certificate not after: Tue 04 Mar 2025 17:49:40 +0000 Subordinate resources: AS: 265551 IP: 45.238.188.0/22 IP: 2806:302::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Fri 05 Jul 2024 04:45:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:02:d4:b4:9b:83:4f:1a:55:59:01:8c:97:8b:f0:c6:0f:f0:f9:74 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:44:40 2024 GMT Not After : Mar 4 17:49:40 2025 GMT Subject: CN=22E20380327B2CB679071D7FE9AC4DBFA317A166 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a8:d6:0d:de:0c:54:7b:21:46:55:0a:55:87:7c: 73:2e:c4:66:9e:a1:35:2b:0e:04:d0:e5:fd:a1:2d: 16:19:18:da:2e:40:8b:5a:bd:d8:3c:3c:bf:d8:41: 3f:4b:65:cf:85:c0:97:2d:b9:b6:7d:82:04:68:0c: 36:9f:33:df:16:ad:2a:26:04:35:4d:8d:54:1b:54: e0:3c:d2:17:a7:d4:6f:53:ad:de:64:e9:a7:eb:dd: 78:c1:44:69:ae:c1:39:2f:6a:ce:49:ce:e9:dc:f6: a7:fb:82:b8:d7:d5:14:83:13:45:57:23:90:41:35: 72:18:b4:d8:2e:99:3c:f3:be:d1:5d:a1:5d:bd:d7: 1d:65:d9:42:e5:1b:5f:54:bf:0d:f9:86:1d:09:ca: a8:37:d9:02:3a:db:ef:0a:07:b7:7f:f2:f5:c0:30: 4c:3e:05:17:83:cb:2d:f9:fd:50:df:cd:21:e2:b7: 5b:eb:01:8f:56:de:10:43:c4:42:2b:54:5a:ea:12: c0:41:87:21:d7:cc:50:23:c2:34:13:d0:bd:ad:4b: 06:26:c4:81:a0:3e:23:8d:7d:cd:f9:33:41:da:1c: 55:26:02:7c:f3:3e:27:c9:6b:c9:d2:ae:fe:17:06: 67:46:c0:31:88:56:0f:4d:ef:9b:86:de:e0:7c:99: e7:5b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 22:E2:03:80:32:7B:2C:B6:79:07:1D:7F:E9:AC:4D:BF:A3:17:A1:66 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5359CB115707A94B2C3E128BC01B48F5E95FE98A6FCD66581274DFFCB6447AAF/0/22E20380327B2CB679071D7FE9AC4DBFA317A166.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.188.0/22 IPv6: 2806:302::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265551 Signature Algorithm: sha256WithRSAEncryption 63:e2:e2:8b:f2:9a:f9:6b:b4:57:c8:43:80:e4:19:19:94:a9: f3:00:dd:7f:02:2e:83:68:79:c9:c5:d2:7d:12:7d:3f:19:01: f3:1a:57:9f:05:8a:1f:21:45:17:60:8d:70:bf:e7:4b:29:72: cf:ed:bb:d7:32:75:76:a6:55:44:32:c5:df:95:bf:8a:cb:4c: 7b:e8:73:5e:e7:2b:a3:7c:aa:00:2b:b0:af:7c:06:58:bc:28: bb:fe:4d:d7:99:ea:f7:40:af:d4:3b:03:58:69:b8:bb:9c:79: b4:e2:4a:f5:14:5c:0c:01:be:e4:bc:9c:03:15:94:9b:ab:de: 8f:79:30:b1:c5:a0:22:7a:95:7b:7d:90:23:bc:b1:e1:17:2e: f3:a3:55:36:69:bb:98:08:5e:a1:02:09:0e:68:c6:a4:8b:05: 25:a2:20:d7:8c:83:4c:ac:c2:5d:db:2b:c9:16:20:42:ca:3c: 30:c0:9d:43:5b:8e:14:f9:ff:1e:c0:ab:ae:78:13:ab:a9:b7: 12:28:83:9a:37:36:e9:70:94:5c:00:7a:54:fa:60:18:6f:66: eb:0e:d9:6f:53:b1:5c:0c:76:c3:94:2f:70:3f:d9:f5:7c:85: 04:46:0a:75:70:3c:99:e2:cc:cf:c5:e6:78:2a:e6:fa:6f:0e: 0b:35:10:d9 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUPALUtJuDTxpVWQGMl4vwxg/w+XQwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ0NDBaFw0yNTAzMDQxNzQ5NDBaMDMxMTAvBgNV BAMTKDIyRTIwMzgwMzI3QjJDQjY3OTA3MUQ3RkU5QUM0REJGQTMxN0ExNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCo1g3eDFR7IUZVClWHfHMuxGae oTUrDgTQ5f2hLRYZGNouQItavdg8PL/YQT9LZc+FwJctubZ9ggRoDDafM98WrSom BDVNjVQbVOA80hen1G9Trd5k6afr3XjBRGmuwTkvas5Jzunc9qf7grjX1RSDE0VX I5BBNXIYtNgumTzzvtFdoV291x1l2ULlG19Uvw35hh0Jyqg32QI62+8KB7d/8vXA MEw+BReDyy35/VDfzSHit1vrAY9W3hBDxEIrVFrqEsBBhyHXzFAjwjQT0L2tSwYm xIGgPiONfc35M0HaHFUmAnzzPifJa8nSrv4XBmdGwDGIVg9N75uG3uB8medbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQi4gOAMnsstnkH HX/prE2/oxehZjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTM1OUNCMTE1NzA3QTk0QjJDM0UxMjhC QzAxQjQ4RjVFOTVGRTk4QTZGQ0Q2NjU4MTI3NERGRkNCNjQ0N0FBRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MzU5Q0IxMTU3MDdBOTRCMkMzRTEyOEJDMDFCNDhGNUU5NUZFOThBNkZD RDY2NTgxMjc0REZGQ0I2NDQ3QUFGLzAvMjJFMjAzODAzMjdCMkNCNjc5MDcxRDdG RTlBQzREQkZBMzE3QTE2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe68MA0EAgAC MAcDBQAoBgMCMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNTzANBgkqhkiG9w0B AQsFAAOCAQEAY+Lii/Ka+Wu0V8hDgOQZGZSp8wDdfwIug2h5ycXSfRJ9PxkB8xpX nwWKHyFFF2CNcL/nSylyz+271zJ1dqZVRDLF35W/istMe+hzXucro3yqACuwr3wG WLwou/5N15nq90Cv1DsDWGm4u5x5tOJK9RRcDAG+5LycAxWUm6vej3kwscWgInqV e32QI7yx4Rcu86NVNmm7mAheoQIJDmjGpIsFJaIg14yDTKzCXdsryRYgQso8MMCd Q1uOFPn/HsCrrngTq6m3EiiDmjc26XCUXAB6VPpgGG9m6w7Zb1OxXAx2w5QvcD/Z 9XyFBEYKdXA8meLMz8XmeCrm+m8OCzUQ2Q== -----END CERTIFICATE-----Generated at Mon Jul 1 03:56:31 2024 by rpki-client on console-ams.rpki-client.org