$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer File: 2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.cer (raw, json) Hash identifier: kyKRQ+3Tu6xFxc1sjW1WZqpo6ONbxagIYapdsu95Tl8= Subject key identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4D992E1457BF69753256E682913E333491191E7D Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:37:45 +0000 Certificate not after: Tue 04 Mar 2025 17:42:45 +0000 Subordinate resources: AS: 269884 IP: 45.188.216.0/23 IP: 2803:f8e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4d:99:2e:14:57:bf:69:75:32:56:e6:82:91:3e:33:34:91:19:1e:7d Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:37:45 2024 GMT Not After : Mar 4 17:42:45 2025 GMT Subject: CN=2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:78:95:b2:46:37:1c:43:a8:b4:70:ce:c2:29: e6:87:03:5c:42:07:59:18:14:a0:7b:66:1b:d1:3f: a8:8b:54:52:24:1f:e7:d9:40:18:be:26:3c:50:b3: 09:c3:42:df:40:c6:12:64:df:8a:e3:ea:24:98:85: 5b:a5:76:c1:5a:6e:5a:68:25:ce:0a:9a:7f:51:ae: ec:3c:1d:db:9d:19:09:cf:f8:e0:40:28:47:9b:67: d2:35:c3:84:19:6d:c2:6d:e2:1d:27:f6:28:80:25: 1e:7c:9f:c7:a9:27:d3:25:72:95:87:f3:7e:8f:a1: 2a:c9:87:0c:e1:c9:1a:93:bf:b0:c8:28:11:d8:f0: c8:91:66:8a:fd:e6:07:95:61:7c:cd:4e:4a:6e:d1: b5:09:eb:ca:ca:4a:04:b5:11:53:a0:63:d1:0c:81: c9:b1:e5:a7:69:bc:42:44:0c:af:a9:e0:b9:ce:d0: 96:cb:4b:88:09:c2:a8:cc:55:3e:fa:b3:45:ac:61: e5:ff:90:57:55:a6:08:a9:ad:b0:09:0a:be:e8:ff: ea:19:68:c3:04:20:47:ea:fd:0b:2c:31:62:2c:8c: 42:1e:f6:f3:d0:da:9a:81:8e:d5:c0:cc:6b:00:fc: 68:7b:3d:5f:ae:5d:10:75:f6:d7:4d:8a:16:29:1d: dd:65 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 2C:7C:1D:3B:D7:C2:77:D2:28:6A:F6:B4:46:1F:6A:27:64:87:6A:5F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/20222FE3707FC0E83510EEE1F8B46CB6100B787B45D0B209B61F835E021E5BE5/0/2C7C1D3BD7C277D2286AF6B4461F6A2764876A5F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.188.216.0/23 IPv6: 2803:f8e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269884 Signature Algorithm: sha256WithRSAEncryption cb:f3:a8:9b:4d:da:ac:0b:9b:ee:76:a1:c8:50:d5:61:f7:fb: fa:5e:94:92:03:57:a8:c3:10:b8:71:49:17:eb:bc:8b:0e:b5: 81:92:c0:1a:bd:39:23:21:0b:74:a5:00:79:e8:2e:6a:bd:00: e6:13:62:e0:45:81:a3:71:08:bf:6b:1b:57:54:e3:21:d4:00: af:22:1b:c3:27:09:8a:d3:b8:b9:52:e8:90:3b:81:ad:48:e9: 51:d1:a4:83:63:39:25:5e:7b:e8:aa:15:0d:75:db:ee:8f:c1: bb:2a:1b:b3:81:1f:94:e0:24:04:68:ed:a0:92:da:cd:11:cf: 04:0f:ec:32:94:bb:91:76:00:33:d8:20:90:07:7c:e3:3a:08: e9:8c:f0:ae:2c:ee:29:fb:cb:1d:6e:3c:29:f8:66:cd:c4:50: 34:44:11:bd:b9:c0:ca:49:2f:a2:db:5f:c2:3d:8b:59:6b:b4: b1:52:23:0e:f5:86:7c:70:c2:83:45:e3:63:f5:8f:ae:f9:be: 34:15:f7:a8:09:5d:82:0f:53:de:b6:03:84:9e:84:6e:23:a6: 4d:71:47:21:5d:79:39:59:32:a4:ca:5c:20:6d:c7:29:ec:3a: 80:1b:91:6f:78:eb:e9:ec:cd:bf:12:f6:3f:71:1a:56:93:28: 04:f9:8e:ff -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTZkuFFe/aXUyVuaCkT4zNJEZHn0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM3NDVaFw0yNTAzMDQxNzQyNDVaMDMxMTAvBgNV BAMTKDJDN0MxRDNCRDdDMjc3RDIyODZBRjZCNDQ2MUY2QTI3NjQ4NzZBNUYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDLeJWyRjccQ6i0cM7CKeaHA1xC B1kYFKB7ZhvRP6iLVFIkH+fZQBi+JjxQswnDQt9AxhJk34rj6iSYhVuldsFablpo Jc4Kmn9Rruw8HdudGQnP+OBAKEebZ9I1w4QZbcJt4h0n9iiAJR58n8epJ9MlcpWH 836PoSrJhwzhyRqTv7DIKBHY8MiRZor95geVYXzNTkpu0bUJ68rKSgS1EVOgY9EM gcmx5adpvEJEDK+p4LnO0JbLS4gJwqjMVT76s0WsYeX/kFdVpgiprbAJCr7o/+oZ aMMEIEfq/QssMWIsjEIe9vPQ2pqBjtXAzGsA/Gh7PV+uXRB19tdNihYpHd1lAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQsfB0718J30ihq 9rRGH2onZIdqXzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjAyMjJGRTM3MDdGQzBFODM1MTBFRUUx RjhCNDZDQjYxMDBCNzg3QjQ1RDBCMjA5QjYxRjgzNUUwMjFFNUJFNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMDIyMkZFMzcwN0ZDMEU4MzUxMEVFRTFGOEI0NkNCNjEwMEI3ODdCNDVE MEIyMDlCNjFGODM1RTAyMUU1QkU1LzAvMkM3QzFEM0JEN0MyNzdEMjI4NkFGNkI0 NDYxRjZBMjc2NDg3NkE1Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLbzYMA0EAgAC MAcDBQAoA/jgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQePDANBgkqhkiG9w0B AQsFAAOCAQEAy/Oom03arAub7nahyFDVYff7+l6UkgNXqMMQuHFJF+u8iw61gZLA Gr05IyELdKUAeeguar0A5hNi4EWBo3EIv2sbV1TjIdQAryIbwycJitO4uVLokDuB rUjpUdGkg2M5JV576KoVDXXb7o/Buyobs4EflOAkBGjtoJLazRHPBA/sMpS7kXYA M9ggkAd84zoI6YzwrizuKfvLHW48KfhmzcRQNEQRvbnAykkvottfwj2LWWu0sVIj DvWGfHDCg0XjY/WPrvm+NBX3qAldgg9T3rYDhJ6EbiOmTXFHIV15OVkypMpcIG3H Kew6gBuRb3jr6ezNvxL2P3EaVpMoBPmO/w== -----END CERTIFICATE-----Generated at Fri Oct 25 14:08:06 2024 by rpki-client on console-ams.rpki-client.org