$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer File: 2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.cer (raw, json) Hash identifier: fI3j4Fo2DnrmhBS83SSyYMMEszMgC6gf+q9l8FikLTk= Subject key identifier: 2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 58FA82CE41D86724048FA956191B3A32D9B1632D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Mon 14 Oct 2024 22:35:01 +0000 Certificate not after: Mon 13 Oct 2025 22:40:01 +0000 Subordinate resources: AS: 265666 IP: 45.5.56.0/22 IP: 148.222.112.0/21 IP: 2803:eec0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 24 Oct 2024 22:19:21 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:fa:82:ce:41:d8:67:24:04:8f:a9:56:19:1b:3a:32:d9:b1:63:2d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Oct 14 22:35:01 2024 GMT Not After : Oct 13 22:40:01 2025 GMT Subject: CN=2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:af:77:b3:5f:77:d2:5f:6b:b8:5f:75:9a:42: e8:ac:86:57:a3:33:85:eb:a8:43:31:5a:ec:fd:97: 7e:90:da:70:0a:82:14:76:c1:8f:d2:68:55:0a:39: e3:c6:a2:17:5b:b1:69:74:3c:d3:08:1d:f5:d0:75: f3:53:a0:db:34:b4:7d:0d:8d:f0:5c:7b:16:b4:fc: 93:62:b4:bc:43:bb:38:f5:86:5d:6e:b3:c2:79:71: d3:af:90:f3:0f:9c:01:6a:90:ae:d7:cd:15:e6:43: 78:f6:2e:d8:82:56:24:65:2d:57:07:0d:50:24:f4: 1e:7e:58:4d:2b:51:63:b3:3e:f5:b8:24:d8:b6:d6: 95:ce:35:ca:88:e7:45:70:45:c7:33:f6:70:53:c6: 1d:cb:f3:76:2e:5f:5d:3c:54:fb:af:1f:dc:89:bc: 66:50:2f:ac:bc:32:39:6c:a3:24:4d:9b:8a:a6:a4: d0:a0:52:2c:bc:7d:ef:d8:70:6b:3d:df:a7:ce:d0: 28:b7:4b:52:2b:6f:bb:1b:e9:b9:dc:9b:cc:64:4b: 92:1e:79:ff:52:55:a9:c4:9f:f5:06:ef:c2:ac:f1: bb:31:c0:6a:a9:ce:41:82:32:be:ff:b7:cc:33:ce: 3a:c0:cb:17:c9:5b:a5:33:13:f8:c8:03:a1:30:98: 44:7f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2A:ED:E3:E0:FD:44:F5:06:E2:EE:63:64:B7:D5:11:11:BA:4E:A1:ED X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DB07D469BCEF4ABEBA8F153C0B8DCD774B385BDAFA40D307E02A66B14CC34E03/0/2AEDE3E0FD44F506E2EE6364B7D51111BA4EA1ED.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.5.56.0/22 148.222.112.0/21 IPv6: 2803:eec0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265666 Signature Algorithm: sha256WithRSAEncryption 7f:72:f9:f9:37:2b:14:e7:dd:5b:b6:1a:cc:d0:85:b2:f0:c0: 5a:09:e6:8e:ac:9c:5a:d9:8f:88:3b:54:6a:59:1e:8c:f8:1d: 1f:57:42:96:55:09:ff:95:d7:04:ff:d1:e2:5a:92:fc:ed:6c: be:8f:51:33:ae:a3:4c:c4:05:b7:8e:32:69:78:a6:4a:75:3d: 38:43:a5:2f:86:86:ae:db:93:2a:18:7e:9b:b1:80:17:b8:2a: c6:09:84:37:35:6b:81:fd:7e:27:44:54:50:83:51:07:e7:55: fa:59:7b:0a:29:a6:3b:ca:13:2f:c5:8f:3a:8e:b9:c8:36:c0: 9c:45:85:45:6d:1f:44:1f:e6:69:6b:51:b4:9f:53:8c:79:72: d3:27:6a:21:97:3e:e6:e8:7b:02:7d:4c:3b:d4:dc:7e:3b:dd: 0d:09:48:7c:c3:8b:d4:df:92:92:40:a6:e2:a4:42:9a:35:33: 49:5b:62:e7:f8:56:23:1d:91:c7:e2:4a:df:75:81:ee:80:a1: dc:ab:d8:2c:9d:56:78:58:d0:ab:3d:86:2f:10:64:df:04:b8: b0:f0:b8:e8:de:09:77:7b:be:ea:3e:0d:f6:bc:9f:e0:8d:fd: 89:bc:f1:ac:e0:1f:63:6f:91:2b:1d:44:8e:9f:7f:e3:7b:70: 50:b5:57:6b -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUWPqCzkHYZyQEj6lWGRs6MtmxYy0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDEwMTQyMjM1MDFaFw0yNTEwMTMyMjQwMDFaMDMxMTAvBgNV BAMTKDJBRURFM0UwRkQ0NEY1MDZFMkVFNjM2NEI3RDUxMTExQkE0RUExRUQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDJr3ezX3fSX2u4X3WaQuishlej M4XrqEMxWuz9l36Q2nAKghR2wY/SaFUKOePGohdbsWl0PNMIHfXQdfNToNs0tH0N jfBcexa0/JNitLxDuzj1hl1us8J5cdOvkPMPnAFqkK7XzRXmQ3j2LtiCViRlLVcH DVAk9B5+WE0rUWOzPvW4JNi21pXONcqI50VwRccz9nBTxh3L83YuX108VPuvH9yJ vGZQL6y8MjlsoyRNm4qmpNCgUiy8fe/YcGs936fO0Ci3S1Irb7sb6bncm8xkS5Ie ef9SVanEn/UG78Ks8bsxwGqpzkGCMr7/t8wzzjrAyxfJW6UzE/jIA6EwmER/AgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQq7ePg/UT1BuLu Y2S31RERuk6h7TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREIwN0Q0NjlCQ0VGNEFCRUJBOEYxNTND MEI4RENENzc0QjM4NUJEQUZBNDBEMzA3RTAyQTY2QjE0Q0MzNEUwMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQjA3RDQ2OUJDRUY0QUJFQkE4RjE1M0MwQjhEQ0Q3NzRCMzg1QkRBRkE0 MEQzMDdFMDJBNjZCMTRDQzM0RTAzLzAvMkFFREUzRTBGRDQ0RjUwNkUyRUU2MzY0 QjdENTExMTFCQTRFQTFFRC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLQU4AwQDlN5w MA0EAgACMAcDBQAoA+7AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNwjANBgkq hkiG9w0BAQsFAAOCAQEAf3L5+TcrFOfdW7YazNCFsvDAWgnmjqycWtmPiDtUalke jPgdH1dCllUJ/5XXBP/R4lqS/O1svo9RM66jTMQFt44yaXimSnU9OEOlL4aGrtuT Khh+m7GAF7gqxgmENzVrgf1+J0RUUINRB+dV+ll7CimmO8oTL8WPOo65yDbAnEWF RW0fRB/maWtRtJ9TjHly0ydqIZc+5uh7An1MO9TcfjvdDQlIfMOL1N+SkkCm4qRC mjUzSVti5/hWIx2Rx+JK33WB7oCh3KvYLJ1WeFjQqz2GLxBk3wS4sPC46N4Jd3u+ 6j4N9ryf4I39ibzxrOAfY2+RKx1Ejp9/43twULVXaw== -----END CERTIFICATE-----Generated at Mon Oct 21 18:17:00 2024 by rpki-client on console-ams.rpki-client.org