$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer File: 799047095697CAFF9BFB195F0DA85EBCCC395DCE.cer (raw, json) Hash identifier: Vb3HzSJoRW1BBWOqO9tN0M48m1aNiERn9YtuGJa++ww= Subject key identifier: 79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7B6615E545C1F64794D2E5892E274805DF5C0DD2 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:48:47 +0000 Certificate not after: Tue 04 Mar 2025 17:53:47 +0000 Subordinate resources: AS: 27687 IP: 45.65.254.0/23 IP: 2801:16:3000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:66:15:e5:45:c1:f6:47:94:d2:e5:89:2e:27:48:05:df:5c:0d:d2 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:48:47 2024 GMT Not After : Mar 4 17:53:47 2025 GMT Subject: CN=799047095697CAFF9BFB195F0DA85EBCCC395DCE Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8a:a4:c2:e1:c0:ab:92:7a:69:b8:e8:58:2c:93: 80:6a:18:0c:1c:22:73:f3:62:89:2e:59:cc:8e:b0: d4:e4:52:db:8d:3d:7e:18:8c:cf:6d:0b:8f:d7:f9: cc:04:3f:2e:1b:f8:77:7a:ad:95:76:94:5f:b4:6e: 1f:09:23:74:3f:c1:d8:b7:30:38:2b:e2:14:9c:11: c1:00:1f:99:e0:10:5a:b6:1f:62:ee:a4:b2:ef:c6: 66:30:8c:ae:40:91:5f:e0:dc:6c:dc:ee:b0:3a:17: 7c:11:ed:22:4f:3e:15:21:e0:3e:97:0d:be:d6:2b: 1c:41:7d:68:1f:37:31:d6:ba:12:c2:77:6c:c7:9a: f7:95:b8:42:0a:90:17:2d:9a:02:1a:b5:ac:97:74: 3e:44:0c:ec:84:ab:fe:9e:31:7b:e5:3d:8d:3e:ec: f6:1c:4d:3e:8e:61:08:2b:9a:a5:7d:16:3b:e1:f1: 62:12:77:db:5e:73:8e:f0:a7:4a:cb:5d:df:cf:e3: ea:1a:81:69:0a:ee:c8:69:7b:75:fd:99:3c:ac:9f: fb:bd:5d:58:fe:b7:80:27:18:4a:69:28:71:22:9c: 17:76:b9:ab:33:91:ca:fa:61:cd:6e:30:56:78:a6: 84:18:1f:2a:df:20:7c:3f:66:69:c9:63:74:5b:a7: 3b:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 79:90:47:09:56:97:CA:FF:9B:FB:19:5F:0D:A8:5E:BC:CC:39:5D:CE X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/EB4F1EF8AEE4A26C4DC57296A09CEC403648D98A3F97E7B3A47707B1337DDAD0/0/799047095697CAFF9BFB195F0DA85EBCCC395DCE.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.65.254.0/23 IPv6: 2801:16:3000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27687 Signature Algorithm: sha256WithRSAEncryption 43:78:62:d9:c1:98:40:82:24:99:8f:a2:26:44:1f:70:cb:a7: f1:c4:8a:18:c2:d5:3c:b1:73:2f:e2:9f:81:79:08:ac:f0:bb: 1e:8f:fc:24:05:1c:33:e9:42:02:14:89:38:c0:1b:80:52:39: ea:1d:41:dc:57:0c:a6:3f:9f:31:88:4d:c6:01:81:08:52:46: eb:97:f1:46:de:16:3a:b1:1a:74:4b:aa:52:06:04:27:d8:1a: 4a:fe:70:06:54:0e:96:fe:9c:e4:45:bf:2c:f3:24:a4:28:06: 41:18:f8:7f:bf:72:b2:ec:16:c0:a9:31:8d:52:fd:ad:44:38: 80:2e:1c:65:af:22:24:4c:8b:3b:c9:f8:d3:df:d4:f6:21:91: 6a:1c:9c:27:14:c6:c1:24:33:81:3c:45:03:cb:24:aa:06:fa: 9e:bf:e0:bd:d5:e9:a5:62:19:1f:9e:e6:c1:0d:70:c7:6d:7d: 72:1d:fd:c9:b6:a4:ca:59:92:c7:b9:5c:c0:20:6c:0f:4a:21: dd:d9:55:77:a9:e9:e2:9f:a1:0a:89:2b:f5:b0:e5:bf:79:9c: a9:b5:9a:d3:ec:3d:41:49:c6:68:ce:f1:ce:d5:9e:23:46:75: aa:24:ba:c9:4f:d0:b5:3f:e0:39:90:84:3a:8d:28:8c:ac:81: 1b:ca:39:3e -----BEGIN CERTIFICATE----- MIIGpjCCBY6gAwIBAgIUe2YV5UXB9keU0uWJLidIBd9cDdIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ4NDdaFw0yNTAzMDQxNzUzNDdaMDMxMTAvBgNV BAMTKDc5OTA0NzA5NTY5N0NBRkY5QkZCMTk1RjBEQTg1RUJDQ0MzOTVEQ0UwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCKpMLhwKuSemm46Fgsk4BqGAwc InPzYokuWcyOsNTkUtuNPX4YjM9tC4/X+cwEPy4b+Hd6rZV2lF+0bh8JI3Q/wdi3 MDgr4hScEcEAH5ngEFq2H2LupLLvxmYwjK5AkV/g3Gzc7rA6F3wR7SJPPhUh4D6X Db7WKxxBfWgfNzHWuhLCd2zHmveVuEIKkBctmgIatayXdD5EDOyEq/6eMXvlPY0+ 7PYcTT6OYQgrmqV9Fjvh8WISd9tec47wp0rLXd/P4+oagWkK7shpe3X9mTysn/u9 XVj+t4AnGEppKHEinBd2uaszkcr6Yc1uMFZ4poQYHyrfIHw/ZmnJY3Rbpzv1AgMB AAGjggOwMIIDrDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBR5kEcJVpfK/5v7 GV8NqF68zDldzjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRUI0RjFFRjhBRUU0QTI2QzREQzU3Mjk2 QTA5Q0VDNDAzNjQ4RDk4QTNGOTdFN0IzQTQ3NzA3QjEzMzdEREFEMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9FQjRGMUVGOEFFRTRBMjZDNERDNTcyOTZBMDlDRUM0MDM2NDhEOThBM0Y5 N0U3QjNBNDc3MDdCMTMzN0REQUQwLzAvNzk5MDQ3MDk1Njk3Q0FGRjlCRkIxOTVG MERBODVFQkNDQzM5NURDRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQBLUH+MA8EAgAC MAkDBwAoAQAWMAAwGQYIKwYBBQUHAQgBAf8ECjAIoAYwBAICbCcwDQYJKoZIhvcN AQELBQADggEBAEN4YtnBmECCJJmPoiZEH3DLp/HEihjC1Tyxcy/in4F5CKzwux6P /CQFHDPpQgIUiTjAG4BSOeodQdxXDKY/nzGITcYBgQhSRuuX8UbeFjqxGnRLqlIG BCfYGkr+cAZUDpb+nORFvyzzJKQoBkEY+H+/crLsFsCpMY1S/a1EOIAuHGWvIiRM izvJ+NPf1PYhkWocnCcUxsEkM4E8RQPLJKoG+p6/4L3V6aViGR+e5sENcMdtfXId /cm2pMpZkse5XMAgbA9KId3ZVXep6eKfoQqJK/Ww5b95nKm1mtPsPUFJxmjO8c7V niNGdaokuslP0LU/4DmQhDqNKIysgRvKOT4= -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:43 2024 by rpki-client on console-ams.rpki-client.org