$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/244A8750A93B99A9DD76D16C557F7E6415151B49.cer File: 244A8750A93B99A9DD76D16C557F7E6415151B49.cer (raw, json) Hash identifier: dlPdvCA8uaHdOOPKRRrxsIIsFPaTcOMqxRUXqMgc7vI= Subject key identifier: 24:4A:87:50:A9:3B:99:A9:DD:76:D1:6C:55:7F:7E:64:15:15:1B:49 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 11910655CF92CA042285387B6B45BE55958C3112 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6F17D336111CD6EDDD642066CB2EB6228EAE87F734A13BDD57F7FEB814EFA9E1/0/244A8750A93B99A9DD76D16C557F7E6415151B49.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6F17D336111CD6EDDD642066CB2EB6228EAE87F734A13BDD57F7FEB814EFA9E1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:15:10 +0000 Certificate not after: Tue 04 Mar 2025 18:20:10 +0000 Subordinate resources: AS: 266747 IP: 45.228.66.0/24 IP: 2803:9250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 11:91:06:55:cf:92:ca:04:22:85:38:7b:6b:45:be:55:95:8c:31:12 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:15:10 2024 GMT Not After : Mar 4 18:20:10 2025 GMT Subject: CN=244A8750A93B99A9DD76D16C557F7E6415151B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:31:98:58:55:10:95:31:49:de:7a:13:fa: eb:6b:e5:d2:22:a3:9f:e2:ce:f9:54:42:3c:e1:47: 61:c6:9c:74:e1:12:ae:3a:7a:b1:8d:b6:9e:b2:7b: ab:a2:73:bd:05:f1:63:2b:1a:4e:c2:c4:e6:f0:55: 6e:f4:ec:59:83:08:0f:1e:2a:ee:bd:e7:06:db:cc: 65:63:08:17:42:6c:aa:1f:f3:ef:3e:b8:f7:26:fc: a3:e7:ec:d6:02:26:fd:cb:03:48:5d:08:0b:87:f6: 26:3b:b9:05:20:0e:d8:c8:f9:f3:45:47:2e:55:f4: 87:a7:32:60:4f:45:e4:52:dc:52:7b:62:a0:78:39: ed:ed:c5:0a:d5:19:50:25:82:97:b3:d3:6d:35:97: a3:0b:12:1e:1c:e0:d6:cf:f7:a9:a7:b1:92:9b:af: ea:4e:f5:9a:40:d7:66:82:9f:b1:db:4d:96:e7:79: 8b:f8:8c:80:5d:5a:1a:5a:51:5d:b6:81:08:b7:6c: ea:cd:26:42:2c:85:df:f2:3e:09:cf:c7:2e:9d:54: 05:bb:b0:86:5a:da:00:aa:54:2b:f2:2c:cb:57:1e: 0f:6f:bc:4f:fa:22:67:3c:63:63:7f:f6:75:3e:28: 0d:69:5b:81:81:89:d0:d9:6a:64:6e:87:0a:0f:3e: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:4A:87:50:A9:3B:99:A9:DD:76:D1:6C:55:7F:7E:64:15:15:1B:49 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6F17D336111CD6EDDD642066CB2EB6228EAE87F734A13BDD57F7FEB814EFA9E1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6F17D336111CD6EDDD642066CB2EB6228EAE87F734A13BDD57F7FEB814EFA9E1/0/244A8750A93B99A9DD76D16C557F7E6415151B49.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.66.0/24 IPv6: 2803:9250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266747 Signature Algorithm: sha256WithRSAEncryption 43:98:e7:43:c8:17:50:63:d4:7a:a2:d7:1b:d6:fd:0c:e9:59: 21:b3:9d:3e:76:53:ac:7b:8a:07:59:05:f8:9c:10:81:32:2b: 99:2f:d8:6a:a4:42:00:14:f2:5c:16:29:b6:48:e8:4d:5e:e3: 58:3b:7a:9e:dd:dd:95:46:06:ae:d9:48:2a:39:dc:e4:99:c8: ea:c6:15:64:c9:d8:11:75:a0:b6:f3:ee:61:31:4f:38:73:0f: b3:7b:56:1a:e3:d1:e7:58:03:29:a2:a1:6a:38:18:75:d8:4c: 71:ce:15:d2:cd:1c:04:ee:19:d6:f7:38:48:c6:c7:48:da:9c: 1a:89:37:c6:cf:7f:cd:9a:ea:87:e8:a6:57:f7:ec:89:ea:55: 3f:96:2d:bf:8c:63:5a:49:d1:18:aa:18:84:a4:66:18:11:3b: 45:c0:3a:49:21:5c:6e:79:6c:a1:b9:01:ad:9e:06:c3:04:cb: 31:51:d8:98:a4:7d:a7:b4:d2:43:d4:dc:c2:e3:b6:19:23:cc: 25:c5:8d:7b:00:46:57:8e:2e:a0:85:a4:f6:b2:0e:bd:a0:75: 94:4a:6c:44:4e:5d:40:42:34:f2:2e:5b:bb:aa:8f:8a:34:4c: b1:5c:57:01:80:95:8c:a7:68:4d:c5:f5:63:68:db:a0:f9:07: c3:84:18:c7 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUEZEGVc+SygQihTh7a0W+VZWMMRIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODE1MTBaFw0yNTAzMDQxODIwMTBaMDMxMTAvBgNV BAMTKDI0NEE4NzUwQTkzQjk5QTlERDc2RDE2QzU1N0Y3RTY0MTUxNTFCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgTGYWFUQlTFJ3noT+utr5dIi o5/izvlUQjzhR2HGnHThEq46erGNtp6ye6uic70F8WMrGk7CxObwVW707FmDCA8e Ku695wbbzGVjCBdCbKof8+8+uPcm/KPn7NYCJv3LA0hdCAuH9iY7uQUgDtjI+fNF Ry5V9IenMmBPReRS3FJ7YqB4Oe3txQrVGVAlgpez0201l6MLEh4c4NbP96mnsZKb r+pO9ZpA12aCn7HbTZbneYv4jIBdWhpaUV22gQi3bOrNJkIshd/yPgnPxy6dVAW7 sIZa2gCqVCvyLMtXHg9vvE/6Imc8Y2N/9nU+KA1pW4GBidDZamRuhwoPPvIbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkSodQqTuZqd12 0WxVf35kFRUbSTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkYxN0QzMzYxMTFDRDZFRERENjQyMDY2 Q0IyRUI2MjI4RUFFODdGNzM0QTEzQkRENTdGN0ZFQjgxNEVGQTlFMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82RjE3RDMzNjExMUNENkVEREQ2NDIwNjZDQjJFQjYyMjhFQUU4N0Y3MzRB MTNCREQ1N0Y3RkVCODE0RUZBOUUxLzAvMjQ0QTg3NTBBOTNCOTlBOURENzZEMTZD NTU3RjdFNjQxNTE1MUI0OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALeRCMA0EAgAC MAcDBQAoA5JQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQR+zANBgkqhkiG9w0B AQsFAAOCAQEAQ5jnQ8gXUGPUeqLXG9b9DOlZIbOdPnZTrHuKB1kF+JwQgTIrmS/Y aqRCABTyXBYptkjoTV7jWDt6nt3dlUYGrtlIKjnc5JnI6sYVZMnYEXWgtvPuYTFP OHMPs3tWGuPR51gDKaKhajgYddhMcc4V0s0cBO4Z1vc4SMbHSNqcGok3xs9/zZrq h+imV/fsiepVP5Ytv4xjWknRGKoYhKRmGBE7RcA6SSFcbnlsobkBrZ4GwwTLMVHY mKR9p7TSQ9TcwuO2GSPMJcWNewBGV44uoIWk9rIOvaB1lEpsRE5dQEI08i5bu6qP ijRMsVxXAYCVjKdoTcX1Y2jboPkHw4QYxw== -----END CERTIFICATE-----Generated at Thu Sep 5 15:36:46 2024 by rpki-client on console-fra.rpki-client.org