$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.cer File: 6E840FECAB68344FF2B11C283CC52BA203CF728F.cer (raw, json) Hash identifier: uRAXFD0bTw8Mnw94Rk9SS4smn0jN/PnY/+pPwndNk5g= Subject key identifier: 6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 04E6F44620E57B71F802F3FD059F1CDE836560FA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:41:55 +0000 Certificate not after: Tue 04 Mar 2025 17:46:55 +0000 Subordinate resources: AS: 266793 IP: 45.234.160.0/23 IP: 2803:10a0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 22 May 2024 10:19:15 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 04:e6:f4:46:20:e5:7b:71:f8:02:f3:fd:05:9f:1c:de:83:65:60:fa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:41:55 2024 GMT Not After : Mar 4 17:46:55 2025 GMT Subject: CN=6E840FECAB68344FF2B11C283CC52BA203CF728F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e7:42:30:b9:c4:d7:0c:c4:ca:50:17:82:05:b1: 92:44:ca:16:6d:e6:f7:7c:9f:9d:e8:9a:82:82:13: e9:ce:09:c0:04:8d:f1:77:70:b3:61:c3:1d:e4:f2: 58:bc:0c:bb:27:e7:88:94:b1:92:24:dc:fa:fe:bf: 8c:56:01:d4:d0:ae:63:f1:9a:49:c0:12:58:c3:56: c3:0a:ec:12:5a:ec:e7:4b:02:78:7b:47:c5:a9:dd: 69:7a:30:26:13:7d:78:de:b6:cf:09:37:c8:9c:74: da:d3:80:b4:fc:5e:34:71:65:a6:98:a2:a3:a9:06: 27:da:a8:27:70:07:6e:43:dc:da:41:90:bb:df:86: 4e:0a:d0:13:f5:5d:04:cb:44:14:21:fd:ef:7a:27: 1a:72:b3:2f:46:16:8c:fb:e8:73:26:4e:49:53:20: e2:6f:42:9c:2a:37:7c:63:5e:5b:b6:97:b5:4a:35: a4:7d:2a:f4:7b:cd:8e:ff:9a:27:23:7b:03:da:f0: 88:03:9c:73:b0:4d:10:6d:a1:dc:bd:ba:75:71:cf: ce:b1:09:2a:5e:f9:6b:62:eb:2f:db:f7:b6:f7:59: 07:84:42:32:cd:b9:d7:9a:7f:db:72:bd:cd:d9:3d: d7:bb:c6:da:b8:9f:67:3c:4e:6e:34:9f:00:51:4c: cc:03 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 6E:84:0F:EC:AB:68:34:4F:F2:B1:1C:28:3C:C5:2B:A2:03:CF:72:8F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0A937846F7A9CB9D831315D7425DB9B68DEB04C4C00AF6C89327D01BAD14F0AA/0/6E840FECAB68344FF2B11C283CC52BA203CF728F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.234.160.0/23 IPv6: 2803:10a0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266793 Signature Algorithm: sha256WithRSAEncryption 79:b3:2f:db:17:29:f1:79:bd:de:86:20:d9:4d:d5:d7:87:3a: c9:08:a3:c7:7a:3f:1d:bf:d8:22:5c:d2:03:cb:50:68:24:94: 82:37:88:b1:d8:c0:99:aa:77:b2:2a:52:ce:2c:55:f4:d6:70: 96:ea:65:40:99:0e:99:2c:a6:27:36:da:3b:81:be:98:fd:10: 78:ae:20:49:59:0a:f1:76:b5:3c:d3:c3:0e:d6:c5:5e:c2:77: 9c:ee:be:07:89:08:b7:cb:83:51:a3:ef:dd:17:5f:dd:3f:95: ed:ec:88:26:09:51:32:8f:4c:8b:d6:b8:48:26:9d:b4:99:4e: 8b:84:d4:67:7d:11:e6:6b:84:c6:af:b7:d4:14:1f:40:af:29: 85:da:72:69:e6:88:b3:b8:d7:29:7f:8c:fe:e3:fb:ab:29:12: 86:bb:37:c3:60:49:ee:3f:3a:bc:4b:26:f5:81:89:a8:38:4b: bc:7f:1a:1d:03:02:8a:74:0d:ae:27:bd:98:2d:a3:78:2d:79: d0:fb:a2:c7:71:19:bc:87:10:1f:5b:a2:31:48:ef:7d:54:17: f3:c4:ab:80:24:3a:72:e8:dd:17:14:80:49:a2:c2:8f:e6:69: 77:0a:b8:ae:e7:e6:c7:47:bf:02:9f:fa:c4:79:97:0e:df:fc: 2e:a0:73:31 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUBOb0RiDle3H4AvP9BZ8c3oNlYPowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQxNTVaFw0yNTAzMDQxNzQ2NTVaMDMxMTAvBgNV BAMTKDZFODQwRkVDQUI2ODM0NEZGMkIxMUMyODNDQzUyQkEyMDNDRjcyOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDnQjC5xNcMxMpQF4IFsZJEyhZt 5vd8n53omoKCE+nOCcAEjfF3cLNhwx3k8li8DLsn54iUsZIk3Pr+v4xWAdTQrmPx mknAEljDVsMK7BJa7OdLAnh7R8Wp3Wl6MCYTfXjets8JN8icdNrTgLT8XjRxZaaY oqOpBifaqCdwB25D3NpBkLvfhk4K0BP1XQTLRBQh/e96Jxpysy9GFoz76HMmTklT IOJvQpwqN3xjXlu2l7VKNaR9KvR7zY7/micjewPa8IgDnHOwTRBtody9unVxz86x CSpe+Wti6y/b97b3WQeEQjLNudeaf9tyvc3ZPde7xtq4n2c8Tm40nwBRTMwDAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRuhA/sq2g0T/Kx HCg8xSuiA89yjzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEE5Mzc4NDZGN0E5Q0I5RDgzMTMxNUQ3 NDI1REI5QjY4REVCMDRDNEMwMEFGNkM4OTMyN0QwMUJBRDE0RjBBQS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQTkzNzg0NkY3QTlDQjlEODMxMzE1RDc0MjVEQjlCNjhERUIwNEM0QzAw QUY2Qzg5MzI3RDAxQkFEMTRGMEFBLzAvNkU4NDBGRUNBQjY4MzQ0RkYyQjExQzI4 M0NDNTJCQTIwM0NGNzI4Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQBLeqgMA0EAgAC MAcDBQAoAxCgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSKTANBgkqhkiG9w0B AQsFAAOCAQEAebMv2xcp8Xm93oYg2U3V14c6yQijx3o/Hb/YIlzSA8tQaCSUgjeI sdjAmap3sipSzixV9NZwluplQJkOmSymJzbaO4G+mP0QeK4gSVkK8Xa1PNPDDtbF XsJ3nO6+B4kIt8uDUaPv3Rdf3T+V7eyIJglRMo9Mi9a4SCadtJlOi4TUZ30R5muE xq+31BQfQK8phdpyaeaIs7jXKX+M/uP7qykShrs3w2BJ7j86vEsm9YGJqDhLvH8a HQMCinQNrie9mC2jeC150Puix3EZvIcQH1uiMUjvfVQX88SrgCQ6cujdFxSASaLC j+Zpdwq4rufmx0e/Ap/6xHmXDt/8LqBzMQ== -----END CERTIFICATE-----Generated at Sat May 18 17:19:20 2024 by rpki-client on console-ams.rpki-client.org