$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/44E64485724E968388B6E813B4E688D91A27BC21.cer File: 44E64485724E968388B6E813B4E688D91A27BC21.cer (raw, json) Hash identifier: FAL2dHFGhTPRHb/B8XzeT+30bziF8NcHNZXQwckn7dU= Subject key identifier: 44:E6:44:85:72:4E:96:83:88:B6:E8:13:B4:E6:88:D9:1A:27:BC:21 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1A575C1BF85B87D12B190A20AA8FD4829E5E3EAE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/44E64485724E968388B6E813B4E688D91A27BC21.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:52:51 +0000 Certificate not after: Tue 04 Mar 2025 17:57:51 +0000 Subordinate resources: AS: 28451 IP: 2806:3f9::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1a:57:5c:1b:f8:5b:87:d1:2b:19:0a:20:aa:8f:d4:82:9e:5e:3e:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:52:51 2024 GMT Not After : Mar 4 17:57:51 2025 GMT Subject: CN=44E64485724E968388B6E813B4E688D91A27BC21 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:aa:76:29:0a:60:31:b3:bb:97:3e:e5:db:ba:b0: 46:9e:9e:0e:38:92:ea:ac:a5:19:c6:f1:2c:2d:5a: 2f:30:bc:f4:34:56:76:fc:e1:24:12:2a:5e:c5:dc: f3:c2:56:d9:9c:50:03:35:ba:d8:07:7d:de:4a:e4: fa:20:5b:ce:46:a4:0c:54:55:27:66:c8:79:41:8d: 14:a7:09:08:99:1a:c1:bc:c1:7f:c1:db:b1:89:56: 40:fc:f7:c6:a5:36:da:c6:ab:1d:57:9a:bc:e8:f2: cd:dd:b3:c8:93:48:40:cf:2a:21:37:36:75:47:7a: 62:c8:ed:a7:e4:cd:a6:b9:d4:91:f4:24:34:05:cd: 8f:ac:9c:ec:7a:06:2d:55:d7:e3:cc:5b:0a:e6:4f: 86:5a:14:1a:ad:9e:d4:df:6b:4b:35:22:22:a1:ae: 3f:05:62:e2:e1:2a:4a:d0:41:41:9f:5d:ad:21:7c: a3:7e:bf:ff:53:ae:37:6f:a1:d5:7c:f8:62:8a:de: a6:3f:a1:1f:12:04:82:4d:07:22:10:2f:6b:41:9e: e6:2b:28:73:e5:7f:bb:3a:c8:0f:35:63:49:59:80: 6e:a4:69:1d:e3:15:2b:a7:20:98:a2:3a:99:95:cc: 4a:06:27:d0:c7:87:84:f4:fd:0f:fe:f0:4a:15:49: f7:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 44:E6:44:85:72:4E:96:83:88:B6:E8:13:B4:E6:88:D9:1A:27:BC:21 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6B0F5E25AE725321BECD3B7873052DADD2DC65817280AC0B1B19B0B70A7472FF/0/44E64485724E968388B6E813B4E688D91A27BC21.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3f9::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28451 Signature Algorithm: sha256WithRSAEncryption b7:74:7d:5b:13:44:d5:75:7a:24:04:26:38:7e:a6:01:ed:3e: 3b:c6:bc:7b:2c:f5:9d:76:6c:e7:42:27:e1:ea:59:7d:3a:9a: 45:a9:2b:ce:cf:93:ef:0f:7f:a8:52:d5:c6:56:ca:a6:d7:65: bb:4e:87:8d:27:18:9f:a4:61:8b:a6:cb:20:58:e4:b1:23:59: f0:a8:9a:1e:ac:3b:20:91:72:0c:92:8b:52:0a:b3:a8:10:77: b6:c2:32:81:2a:6f:52:3c:72:32:59:98:0d:5e:a7:6d:40:61: 38:6f:c7:b6:7e:f5:89:44:77:c2:1d:bf:5f:f4:6c:cc:d5:f2: 3c:67:5a:a0:50:6e:de:2c:7f:90:25:39:34:c3:7a:31:86:38: b9:54:28:3c:47:97:5c:c8:8d:60:50:2c:b5:a7:f1:d3:47:74: 5f:bc:79:80:fb:ee:0c:1e:a8:17:d5:20:5b:fa:d7:a1:62:9e: 5e:c1:14:e3:7d:7b:d5:a4:74:da:e0:a8:34:e3:dd:a9:fe:09: 45:c4:f0:ac:5e:e0:ca:e8:7d:75:8b:bd:b8:e4:37:22:1e:c4: b9:62:8f:b6:3b:5f:71:38:95:36:5b:76:a7:ce:29:5f:ad:8d: fe:af:e3:3c:8c:4f:1e:fe:35:bb:c5:20:80:e1:3d:76:55:b1: 91:64:9e:f2 -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgIUGldcG/hbh9ErGQogqo/Ugp5ePq4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzUyNTFaFw0yNTAzMDQxNzU3NTFaMDMxMTAvBgNV BAMTKDQ0RTY0NDg1NzI0RTk2ODM4OEI2RTgxM0I0RTY4OEQ5MUEyN0JDMjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCqdikKYDGzu5c+5du6sEaeng44 kuqspRnG8SwtWi8wvPQ0Vnb84SQSKl7F3PPCVtmcUAM1utgHfd5K5PogW85GpAxU VSdmyHlBjRSnCQiZGsG8wX/B27GJVkD898alNtrGqx1Xmrzo8s3ds8iTSEDPKiE3 NnVHemLI7afkzaa51JH0JDQFzY+snOx6Bi1V1+PMWwrmT4ZaFBqtntTfa0s1IiKh rj8FYuLhKkrQQUGfXa0hfKN+v/9TrjdvodV8+GKK3qY/oR8SBIJNByIQL2tBnuYr KHPlf7s6yA81Y0lZgG6kaR3jFSunIJiiOpmVzEoGJ9DHh4T0/Q/+8EoVSffJAgMB AAGjggOgMIIDnDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRE5kSFck6Wg4i2 6BO05ojZGie8ITAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkIwRjVFMjVBRTcyNTMyMUJFQ0QzQjc4 NzMwNTJEQUREMkRDNjU4MTcyODBBQzBCMUIxOUIwQjcwQTc0NzJGRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82QjBGNUUyNUFFNzI1MzIxQkVDRDNCNzg3MzA1MkRBREQyREM2NTgxNzI4 MEFDMEIxQjE5QjBCNzBBNzQ3MkZGLzAvNDRFNjQ0ODU3MjRFOTY4Mzg4QjZFODEz QjRFNjg4RDkxQTI3QkMyMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD+TAZBggr BgEFBQcBCAEB/wQKMAigBjAEAgJvIzANBgkqhkiG9w0BAQsFAAOCAQEAt3R9WxNE 1XV6JAQmOH6mAe0+O8a8eyz1nXZs50In4epZfTqaRakrzs+T7w9/qFLVxlbKptdl u06HjScYn6Rhi6bLIFjksSNZ8KiaHqw7IJFyDJKLUgqzqBB3tsIygSpvUjxyMlmY DV6nbUBhOG/Htn71iUR3wh2/X/RszNXyPGdaoFBu3ix/kCU5NMN6MYY4uVQoPEeX XMiNYFAstafx00d0X7x5gPvuDB6oF9UgW/rXoWKeXsEU43171aR02uCoNOPdqf4J RcTwrF7gyuh9dYu9uOQ3Ih7EuWKPtjtfcTiVNlt2p84pX62N/q/jPIxPHv41u8Ug gOE9dlWxkWSe8g== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:55 2024 by rpki-client on console-fra.rpki-client.org