$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer File: C7109B5FA9AA24BBF70E62A4318E4348C69F700A.cer (raw, json) Hash identifier: zs+/cDzRrQX0nGymFG/znCg2LCd1V+kZvcHH2+QVoh0= Subject key identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6C7C9643169602AE07CCF3E57093C3112E7CB0B7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:59:28 +0000 Certificate not after: Tue 04 Mar 2025 18:04:28 +0000 Subordinate resources: AS: 266666 IP: 45.228.152.0/22 IP: 2801:19:b000::/48 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6c:7c:96:43:16:96:02:ae:07:cc:f3:e5:70:93:c3:11:2e:7c:b0:b7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:59:28 2024 GMT Not After : Mar 4 18:04:28 2025 GMT Subject: CN=C7109B5FA9AA24BBF70E62A4318E4348C69F700A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8f:1c:e0:0e:55:06:3f:a0:f7:88:1e:19:3e:6f: a9:cc:73:b9:16:be:b4:f4:10:fb:de:8f:4c:e8:a9: 82:74:d3:5f:90:52:a4:7f:06:ec:26:79:2b:42:a4: 73:7d:43:17:5a:4a:85:bb:6c:c6:2a:8a:77:49:54: fa:f3:f6:32:7e:16:3e:2e:5e:f0:48:d9:e3:1d:44: 05:bd:a3:ba:5c:5e:3c:56:55:0e:d8:74:5a:82:4f: 6b:e3:f3:7e:be:99:5f:e3:09:b7:f2:4a:9c:dd:68: 1b:da:99:0a:4c:27:e1:77:70:57:fe:41:3e:3a:ad: 9b:81:90:bc:0a:27:af:a7:79:62:91:98:5c:78:33: 0a:7f:94:d4:f6:6b:3d:90:25:40:fa:5d:44:e6:6a: d2:da:c6:d4:24:ce:ab:67:21:96:84:37:3d:b2:02: ca:fd:5b:ea:64:cf:5b:22:95:d7:e1:a5:3a:ea:c8: 47:eb:75:8b:df:1f:d4:7f:ad:a7:42:43:43:a6:7f: e6:e9:5c:5b:96:e7:34:95:57:6b:26:47:25:ee:ea: 88:f6:96:25:b0:5b:b7:af:82:7b:14:54:54:f3:d7: 0b:70:df:f1:f1:44:2c:8e:72:48:6d:45:61:5f:ac: f9:a9:95:77:0a:20:6c:7a:1b:a6:e8:17:5a:cb:5c: 09:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C7:10:9B:5F:A9:AA:24:BB:F7:0E:62:A4:31:8E:43:48:C6:9F:70:0A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C828148AA9CAD41F6075F42DDD4DD51C88406D4FA0F42129E99F455342828A7A/0/C7109B5FA9AA24BBF70E62A4318E4348C69F700A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.152.0/22 IPv6: 2801:19:b000::/48 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266666 Signature Algorithm: sha256WithRSAEncryption ca:11:6f:a8:5c:64:44:3c:f6:6d:db:b0:21:28:90:e1:96:66: a1:c4:d3:4d:c0:63:bc:d0:3c:0a:02:a8:af:e7:19:ce:9e:bf: 8c:6e:ce:0e:34:d3:cd:8d:4d:b8:93:6a:53:b9:fb:fd:27:29: d4:9d:1f:dd:1d:12:15:9c:35:d0:6b:47:a9:c5:ea:01:eb:0f: 33:14:4e:0c:6a:4b:28:41:33:72:1a:e3:ba:b6:79:d1:05:4d: 4d:c1:84:3c:cc:e4:74:0c:21:c4:b0:3c:0e:67:d5:9d:aa:bb: 14:48:c0:6a:67:d2:cb:b4:f2:bf:fb:2f:e1:db:08:9e:e3:88: 9a:9e:4c:b8:2c:d5:61:ba:8c:c2:ce:a7:3e:56:e8:19:13:df: 79:9c:0c:0c:8a:4d:d2:30:91:cb:62:78:76:4a:ea:8e:4c:2a: e0:57:3f:02:57:84:20:e8:6a:8f:ba:46:a3:07:f1:d5:15:26: 83:81:e3:90:a4:2d:21:c0:7b:cb:53:09:60:ee:d8:0b:c3:9f: 13:ce:be:46:a2:10:95:b7:8a:6b:f3:10:3c:c6:19:c5:f1:c3: 27:d5:b5:77:1e:cb:91:19:4a:86:75:11:e8:37:4d:73:35:b8: b8:0b:66:14:be:2a:f8:6c:c2:56:9f:b2:53:63:e6:de:e6:f5: 93:8e:6e:86 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUbHyWQxaWAq4HzPPlcJPDES58sLcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU5MjhaFw0yNTAzMDQxODA0MjhaMDMxMTAvBgNV BAMTKEM3MTA5QjVGQTlBQTI0QkJGNzBFNjJBNDMxOEU0MzQ4QzY5RjcwMEEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCPHOAOVQY/oPeIHhk+b6nMc7kW vrT0EPvej0zoqYJ001+QUqR/BuwmeStCpHN9QxdaSoW7bMYqindJVPrz9jJ+Fj4u XvBI2eMdRAW9o7pcXjxWVQ7YdFqCT2vj836+mV/jCbfySpzdaBvamQpMJ+F3cFf+ QT46rZuBkLwKJ6+neWKRmFx4Mwp/lNT2az2QJUD6XUTmatLaxtQkzqtnIZaENz2y Asr9W+pkz1sildfhpTrqyEfrdYvfH9R/radCQ0Omf+bpXFuW5zSVV2smRyXu6oj2 liWwW7evgnsUVFTz1wtw3/HxRCyOckhtRWFfrPmplXcKIGx6G6boF1rLXAkRAgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTHEJtfqaoku/cO YqQxjkNIxp9wCjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzgyODE0OEFBOUNBRDQxRjYwNzVGNDJE REQ0REQ1MUM4ODQwNkQ0RkEwRjQyMTI5RTk5RjQ1NTM0MjgyOEE3QS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DODI4MTQ4QUE5Q0FENDFGNjA3NUY0MkRERDRERDUxQzg4NDA2RDRGQTBG NDIxMjlFOTlGNDU1MzQyODI4QTdBLzAvQzcxMDlCNUZBOUFBMjRCQkY3MEU2MkE0 MzE4RTQzNDhDNjlGNzAwQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCLeSYMA8EAgAC MAkDBwAoAQAZsAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBGqMA0GCSqGSIb3 DQEBCwUAA4IBAQDKEW+oXGREPPZt27AhKJDhlmahxNNNwGO80DwKAqiv5xnOnr+M bs4ONNPNjU24k2pTufv9JynUnR/dHRIVnDXQa0epxeoB6w8zFE4MaksoQTNyGuO6 tnnRBU1NwYQ8zOR0DCHEsDwOZ9WdqrsUSMBqZ9LLtPK/+y/h2wie44ianky4LNVh uozCzqc+VugZE995nAwMik3SMJHLYnh2SuqOTCrgVz8CV4Qg6GqPukajB/HVFSaD geOQpC0hwHvLUwlg7tgLw58Tzr5GohCVt4pr8xA8xhnF8cMn1bV3HsuRGUqGdRHo N01zNbi4C2YUvir4bMJWn7JTY+be5vWTjm6G -----END CERTIFICATE-----Generated at Fri May 31 20:32:57 2024 by rpki-client on console-ams.rpki-client.org