$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.cer File: 46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.cer (raw, json) Hash identifier: Xu1t8iAudrXeH64SyFzVo6phxSAcFUexoycdPgPKteE= Subject key identifier: 46:C8:53:7B:A4:91:0D:B9:99:B9:E7:57:EE:D7:CB:E1:BB:73:EE:6A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 564427663AAEF2791556F60362276C378CC7D518 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:39:02 +0000 Certificate not after: Tue 04 Mar 2025 17:44:02 +0000 Subordinate resources: AS: 265612 IP: 45.189.236.0/22 IP: 2806:369::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 56:44:27:66:3a:ae:f2:79:15:56:f6:03:62:27:6c:37:8c:c7:d5:18 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:39:02 2024 GMT Not After : Mar 4 17:44:02 2025 GMT Subject: CN=46C8537BA4910DB999B9E757EED7CBE1BB73EE6A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b0:87:bf:be:6e:c5:cf:eb:de:6a:ce:74:a3:5d: c0:8f:09:ac:5a:23:c2:c0:94:91:a5:fc:55:4d:be: a5:dc:d4:67:95:4b:3a:8e:f3:60:d1:ad:f6:d4:d4: 48:d2:2d:fa:7b:55:f9:8c:88:98:0a:ad:28:63:ae: 28:6f:13:8f:82:39:b9:47:a9:46:5b:1a:68:dc:2b: 2a:ef:17:cf:e0:8b:64:80:f0:5d:65:5b:9a:aa:bd: 59:c3:e5:ce:92:25:75:45:f4:1c:5b:0e:69:2a:92: 9a:e5:e9:01:23:52:2c:a3:3a:14:9b:82:5d:c1:35: 30:76:a0:8d:ac:3d:38:fc:e4:c4:e0:58:ef:f7:a2: 96:78:8b:f5:00:bc:98:79:f0:60:13:c8:06:44:79: 7f:ea:33:e7:01:48:8e:32:50:f5:75:96:3f:ae:e9: b6:c4:fa:5c:d0:a5:40:e8:e8:2b:89:04:78:b7:8a: ca:00:6a:32:a6:a2:23:84:1a:20:a4:5a:0d:63:0d: ec:ad:90:33:9f:bd:cc:ab:f3:be:b2:55:02:d5:e2: 96:4e:6f:5b:f2:ea:74:6a:12:d4:25:5c:d3:3e:65: f8:37:3e:97:66:1d:c4:48:e2:e3:91:ec:04:4c:dd: ea:35:7c:3b:3e:f6:af:4d:3f:00:49:f3:8f:d1:78: 6a:a3 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 46:C8:53:7B:A4:91:0D:B9:99:B9:E7:57:EE:D7:CB:E1:BB:73:EE:6A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/E18734C3C026B14082B457B665F4D453B9D3684008C6AE86ED26153B8FA7CC09/0/46C8537BA4910DB999B9E757EED7CBE1BB73EE6A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.236.0/22 IPv6: 2806:369::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265612 Signature Algorithm: sha256WithRSAEncryption c8:02:96:70:58:7c:7a:f9:2a:8f:5b:4e:69:63:10:c0:f0:f8: ee:b7:09:00:1c:cb:53:15:1c:af:1f:d0:14:18:33:8d:d9:ed: 37:0c:61:68:19:d7:77:c3:d6:21:b4:7c:c9:19:14:8b:5c:64: 64:69:f4:28:d0:06:77:ee:a2:48:95:7c:25:a6:0c:63:04:96: 76:9a:43:41:83:39:82:27:28:c8:ab:65:1d:fe:09:8a:95:1e: 01:05:d6:65:13:70:22:64:cf:13:38:4a:d4:7e:a8:8e:0b:89: c0:8c:54:ba:d7:90:81:27:d0:8a:a0:4f:2e:f6:5f:32:a1:74: 33:cb:18:42:88:10:a5:4c:08:b0:60:43:d1:13:1f:9a:d8:4c: c6:c3:37:5d:0b:6f:af:43:08:04:68:d4:39:c4:5e:7f:b0:76: 71:98:fe:c2:2e:2f:43:8b:66:4f:57:8b:a1:b4:f5:e0:62:41: 6e:16:59:84:e6:e8:ee:bd:27:6f:44:f9:b3:79:15:83:5d:c4: a4:a4:9b:28:8f:39:8a:3d:f5:22:d6:83:d0:a3:d3:cb:d0:78: 7e:b2:dd:18:56:de:4e:63:6e:40:a6:39:f7:3a:30:f8:a4:cd: 26:59:99:0b:dc:68:7f:5a:19:65:20:92:d2:45:e5:b9:87:6b: 5a:14:10:c3 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUVkQnZjqu8nkVVvYDYidsN4zH1RgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM5MDJaFw0yNTAzMDQxNzQ0MDJaMDMxMTAvBgNV BAMTKDQ2Qzg1MzdCQTQ5MTBEQjk5OUI5RTc1N0VFRDdDQkUxQkI3M0VFNkEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCwh7++bsXP695qznSjXcCPCaxa I8LAlJGl/FVNvqXc1GeVSzqO82DRrfbU1EjSLfp7VfmMiJgKrShjrihvE4+COblH qUZbGmjcKyrvF8/gi2SA8F1lW5qqvVnD5c6SJXVF9BxbDmkqkprl6QEjUiyjOhSb gl3BNTB2oI2sPTj85MTgWO/3opZ4i/UAvJh58GATyAZEeX/qM+cBSI4yUPV1lj+u 6bbE+lzQpUDo6CuJBHi3isoAajKmoiOEGiCkWg1jDeytkDOfvcyr876yVQLV4pZO b1vy6nRqEtQlXNM+Zfg3PpdmHcRI4uOR7ARM3eo1fDs+9q9NPwBJ84/ReGqjAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRGyFN7pJENuZm5 51fu18vhu3PuajAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTE4NzM0QzNDMDI2QjE0MDgyQjQ1N0I2 NjVGNEQ0NTNCOUQzNjg0MDA4QzZBRTg2RUQyNjE1M0I4RkE3Q0MwOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FMTg3MzRDM0MwMjZCMTQwODJCNDU3QjY2NUY0RDQ1M0I5RDM2ODQwMDhD NkFFODZFRDI2MTUzQjhGQTdDQzA5LzAvNDZDODUzN0JBNDkxMERCOTk5QjlFNzU3 RUVEN0NCRTFCQjczRUU2QS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb3sMA0EAgAC MAcDBQAoBgNpMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNjDANBgkqhkiG9w0B AQsFAAOCAQEAyAKWcFh8evkqj1tOaWMQwPD47rcJABzLUxUcrx/QFBgzjdntNwxh aBnXd8PWIbR8yRkUi1xkZGn0KNAGd+6iSJV8JaYMYwSWdppDQYM5gicoyKtlHf4J ipUeAQXWZRNwImTPEzhK1H6ojguJwIxUuteQgSfQiqBPLvZfMqF0M8sYQogQpUwI sGBD0RMfmthMxsM3XQtvr0MIBGjUOcRef7B2cZj+wi4vQ4tmT1eLobT14GJBbhZZ hObo7r0nb0T5s3kVg13EpKSbKI85ij31ItaD0KPTy9B4frLdGFbeTmNuQKY59zow +KTNJlmZC9xof1oZZSCS0kXluYdrWhQQww== -----END CERTIFICATE-----Generated at Fri Oct 25 13:07:23 2024 by rpki-client on console-fra.rpki-client.org