$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/7328461355B304B789F60508DF555EAC428848F4.cer File: 7328461355B304B789F60508DF555EAC428848F4.cer (raw, json) Hash identifier: zOUfaok4606k2rhCYoRiLkhS1h5UvFoEGY0rDr69Isw= Subject key identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 45772614A078DFADCB6F76C1032DC5BD7B2F0383 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 18 Sep 2024 17:55:15 +0000 Certificate not after: Wed 17 Sep 2025 18:00:15 +0000 Subordinate resources: AS: 264784 AS: 266668 IP: 45.228.188.0/22 IP: 168.197.216.0/22 IP: 2803:a920::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 29 Oct 2024 04:07:37 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 45:77:26:14:a0:78:df:ad:cb:6f:76:c1:03:2d:c5:bd:7b:2f:03:83 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Sep 18 17:55:15 2024 GMT Not After : Sep 17 18:00:15 2025 GMT Subject: CN=7328461355B304B789F60508DF555EAC428848F4 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e9:00:b4:8a:78:5d:51:a1:db:ca:02:c2:71:ca: 8e:0e:4e:97:d9:cc:c9:b0:42:e2:3f:3f:ff:37:da: 61:9b:1d:53:4b:ee:15:4f:77:95:2a:d4:c5:d1:6a: a5:c3:cf:e0:2f:eb:69:43:9f:42:a6:7c:60:30:8c: 63:17:08:8a:61:4f:95:eb:50:cb:2e:6d:1a:cc:e6: f8:fe:76:dc:76:68:b4:61:d9:68:66:63:1d:e0:d5: b7:07:5c:7c:9e:4d:50:47:2d:0a:5a:98:ea:ac:75: 55:d5:9f:21:66:8c:37:4c:4b:80:cc:f8:9c:2c:07: cd:d4:a1:ea:6c:96:39:fa:20:bb:7d:a8:fa:0e:fd: 4a:f9:f3:c8:69:a6:70:93:76:eb:d1:4f:ef:e2:e6: cc:2a:49:3c:95:f0:69:3e:17:fc:5f:da:d6:98:a8: fc:8d:c2:79:21:56:99:f4:a6:58:e1:93:3e:68:f4: e3:26:97:93:ef:78:db:31:ad:64:10:0b:28:26:ce: b8:5b:fb:78:93:d5:2b:66:15:aa:74:1b:93:b8:66: bb:fb:58:f5:3f:31:6f:d0:62:6c:9c:92:e7:68:c1: ad:4c:5a:66:f3:00:26:47:99:01:ce:77:9d:f9:e1: e1:7a:74:10:16:92:e3:fe:a7:e7:21:8a:bb:fb:85: d4:fb Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 73:28:46:13:55:B3:04:B7:89:F6:05:08:DF:55:5E:AC:42:88:48:F4 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DAA6AC625BA95DDD02AAE75BB21A588A2D05CBF3D851C77F67998CC5BC25D626/0/7328461355B304B789F60508DF555EAC428848F4.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.188.0/22 168.197.216.0/22 IPv6: 2803:a920::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264784 266668 Signature Algorithm: sha256WithRSAEncryption 74:e8:80:e1:0d:de:a5:4e:dd:ec:4e:e2:4e:43:91:0d:fe:e0: e2:01:b7:e0:99:27:96:0b:8e:28:3f:0f:f2:4c:13:d1:5e:5e: d8:32:32:97:d7:80:64:07:3a:23:58:73:59:6d:4d:41:aa:8a: fe:7b:69:69:b1:0d:af:60:b1:b7:15:6d:92:4c:b3:8b:21:a9: c0:b0:2b:8d:4c:7e:0f:ab:51:b0:f4:77:49:f2:be:a7:6a:7d: d3:39:3f:5c:78:4d:de:51:1b:9b:f8:c6:2d:34:31:5f:23:9a: 25:4a:4a:02:9a:71:92:bb:6a:cc:4e:c7:81:0e:a3:3a:c0:09: 5a:4a:47:44:c7:48:7e:bc:14:b9:56:3e:70:cd:e6:6f:a8:0a: af:42:e6:8c:b8:2f:91:fd:7c:2b:a2:fd:55:7b:7e:30:12:0b: 09:c1:e1:45:d7:0a:2f:e8:db:9c:39:bf:68:7d:e9:1f:75:61: 5f:36:77:35:71:c8:9d:96:eb:71:3e:f8:d5:2d:e5:fc:c7:88: 11:07:ce:82:9e:4a:95:eb:00:59:34:dd:6d:3a:47:03:63:4c: 6c:57:b7:12:e1:3c:c5:b3:05:ce:92:d9:d0:b1:93:0b:5d:f5: cf:a4:a2:b9:40:e6:71:c5:93:1f:75:5f:86:a9:eb:2d:a4:cd: b0:1d:4b:f1 -----BEGIN CERTIFICATE----- MIIGsDCCBZigAwIBAgIURXcmFKB4363Lb3bBAy3FvXsvA4MwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA5MTgxNzU1MTVaFw0yNTA5MTcxODAwMTVaMDMxMTAvBgNV BAMTKDczMjg0NjEzNTVCMzA0Qjc4OUY2MDUwOERGNTU1RUFDNDI4ODQ4RjQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDpALSKeF1RodvKAsJxyo4OTpfZ zMmwQuI/P/832mGbHVNL7hVPd5Uq1MXRaqXDz+Av62lDn0KmfGAwjGMXCIphT5Xr UMsubRrM5vj+dtx2aLRh2WhmYx3g1bcHXHyeTVBHLQpamOqsdVXVnyFmjDdMS4DM +JwsB83Uoepsljn6ILt9qPoO/Ur588hppnCTduvRT+/i5swqSTyV8Gk+F/xf2taY qPyNwnkhVpn0pljhkz5o9OMml5PveNsxrWQQCygmzrhb+3iT1StmFap0G5O4Zrv7 WPU/MW/QYmyckudowa1MWmbzACZHmQHOd5354eF6dBAWkuP+p+chirv7hdT7AgMB AAGjggO6MIIDtjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRzKEYTVbMEt4n2 BQjfVV6sQohI9DAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREFBNkFDNjI1QkE5NURERDAyQUFFNzVC QjIxQTU4OEEyRDA1Q0JGM0Q4NTFDNzdGNjc5OThDQzVCQzI1RDYyNi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQUE2QUM2MjVCQTk1REREMDJBQUU3NUJCMjFBNTg4QTJEMDVDQkYzRDg1 MUM3N0Y2Nzk5OENDNUJDMjVENjI2LzAvNzMyODQ2MTM1NUIzMDRCNzg5RjYwNTA4 REY1NTVFQUM0Mjg4NDhGNC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQCLeS8AwQCqMXY MA0EAgACMAcDBQAoA6kgMB8GCCsGAQUFBwEIAQH/BBAwDqAMMAoCAwQKUAIDBBGs MA0GCSqGSIb3DQEBCwUAA4IBAQB06IDhDd6lTt3sTuJOQ5EN/uDiAbfgmSeWC44o Pw/yTBPRXl7YMjKX14BkBzojWHNZbU1Bqor+e2lpsQ2vYLG3FW2STLOLIanAsCuN TH4Pq1Gw9HdJ8r6nan3TOT9ceE3eURub+MYtNDFfI5olSkoCmnGSu2rMTseBDqM6 wAlaSkdEx0h+vBS5Vj5wzeZvqAqvQuaMuC+R/Xwrov1Ve34wEgsJweFF1wov6Nuc Ob9ofekfdWFfNnc1ccidlutxPvjVLeX8x4gRB86CnkqV6wBZNN1tOkcDY0xsV7cS 4TzFswXOktnQsZMLXfXPpKK5QOZxxZMfdV+GqestpM2wHUvx -----END CERTIFICATE-----Generated at Fri Oct 25 14:08:08 2024 by rpki-client on console-ams.rpki-client.org