$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer File: EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.cer (raw, json) Hash identifier: 8zprxCMdQ42GarkvkSSj5+aWz0dI2OB40kEptYjvv1Q= Subject key identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 77DDDCE59FDB80AB09C6D4272A3BE59C2003E026 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:04:05 +0000 Certificate not after: Tue 04 Mar 2025 18:09:05 +0000 Subordinate resources: AS: 273129 IP: 45.7.240.0/22 IP: 2803:23c0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 20 May 2024 05:31:57 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:dd:dc:e5:9f:db:80:ab:09:c6:d4:27:2a:3b:e5:9c:20:03:e0:26 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:04:05 2024 GMT Not After : Mar 4 18:09:05 2025 GMT Subject: CN=EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:2f:26:a2:e4:5c:e3:f8:33:c7:0d:fc:f3:95: 42:30:a2:db:f7:48:23:90:8c:d1:20:fa:a2:a2:db: 76:94:c0:0c:34:d7:7e:29:e6:c0:0a:d3:55:a3:35: b5:67:e5:35:f6:d8:a2:05:1f:04:42:ed:18:d8:4b: 17:cd:57:fd:ff:f7:8f:9f:15:48:21:46:ec:ea:2c: 77:74:cd:c1:b2:60:50:d0:4f:69:c6:b1:ae:45:a8: d3:1d:d7:2c:6d:ad:c9:04:2e:7d:d9:7a:87:43:47: c4:35:78:8c:d1:cb:80:79:02:ac:6c:5f:60:cd:a2: 58:a3:52:1e:5b:d0:de:6d:a8:64:85:fe:d9:ae:33: 78:88:d5:2e:f3:af:23:f6:62:20:05:74:51:b1:f8: da:54:55:e6:02:b6:2d:1c:07:e8:1c:ba:37:a4:28: f0:d4:4d:17:af:79:c0:74:c6:b3:bb:43:2b:80:b1: 82:db:d8:72:e2:61:6c:5d:ce:14:dd:d6:e3:95:cd: 0e:88:97:0e:c9:07:a9:9c:47:43:d4:51:6c:d4:20: 01:b4:f3:18:2d:c8:6e:81:6f:c9:44:04:04:76:d7: 67:e0:32:71:6b:7c:81:fb:25:4a:9a:7f:38:31:53: ce:42:7d:7f:3d:5a:07:85:a6:3c:1d:9b:4a:82:ef: be:73 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: EC:52:A7:B0:6C:00:A7:9A:61:CB:F2:C7:12:32:AF:61:D3:DD:AF:52 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6E53B5F8017E6E47294355D90CCBA0C224A15646DD97017F8FE0BBABD76E1AB9/0/EC52A7B06C00A79A61CBF2C71232AF61D3DDAF52.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.7.240.0/22 IPv6: 2803:23c0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273129 Signature Algorithm: sha256WithRSAEncryption c3:b3:9b:00:f8:c5:fa:ed:74:13:66:22:cc:e5:fe:be:c2:3d: 1f:7f:b3:68:e7:03:6d:67:8f:82:f1:02:5c:91:c8:14:9c:78: f2:9c:d0:c1:75:e4:ac:32:ab:59:84:48:c4:f0:1a:49:32:41: cf:8b:6a:df:da:bb:f8:05:a8:d7:bd:3b:3a:42:87:1e:2e:c7: 59:7f:d6:84:dc:a8:ed:dc:57:74:a3:f9:0b:fe:49:68:35:86: 0b:b4:c9:0b:0a:17:b2:50:ac:3a:d4:25:05:99:33:82:e3:6d: 34:82:a8:75:69:a0:c9:90:1e:18:1c:df:5f:f8:93:cf:6c:d2: 57:9e:51:2c:6f:74:30:86:49:83:3e:9e:5a:a8:fb:d2:22:e6: cf:01:37:79:1d:05:ea:73:9c:37:2e:b0:34:a0:27:79:de:86: 2f:80:3b:b5:af:bf:86:15:17:73:9c:5b:9c:19:bf:21:e5:e6: fa:8e:90:da:d5:03:a0:f7:3e:8e:56:73:31:40:cf:06:66:2e: f2:fb:aa:28:9a:9f:39:11:83:93:da:ee:b7:15:46:5e:70:86: 04:71:8c:62:d1:fe:f3:66:62:56:65:b7:f5:05:da:16:d5:7d: 41:33:be:bf:b8:4b:d0:08:b5:51:0e:96:32:a0:c6:db:6d:bb: ee:74:f1:ff -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUd93c5Z/bgKsJxtQnKjvlnCAD4CYwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA0MDVaFw0yNTAzMDQxODA5MDVaMDMxMTAvBgNV BAMTKEVDNTJBN0IwNkMwMEE3OUE2MUNCRjJDNzEyMzJBRjYxRDNEREFGNTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC4Lyai5Fzj+DPHDfzzlUIwotv3 SCOQjNEg+qKi23aUwAw0134p5sAK01WjNbVn5TX22KIFHwRC7RjYSxfNV/3/94+f FUghRuzqLHd0zcGyYFDQT2nGsa5FqNMd1yxtrckELn3ZeodDR8Q1eIzRy4B5Aqxs X2DNolijUh5b0N5tqGSF/tmuM3iI1S7zryP2YiAFdFGx+NpUVeYCti0cB+gcujek KPDUTRevecB0xrO7QyuAsYLb2HLiYWxdzhTd1uOVzQ6Ilw7JB6mcR0PUUWzUIAG0 8xgtyG6Bb8lEBAR212fgMnFrfIH7JUqafzgxU85CfX89WgeFpjwdm0qC775zAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTsUqewbACnmmHL 8scSMq9h092vUjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkU1M0I1RjgwMTdFNkU0NzI5NDM1NUQ5 MENDQkEwQzIyNEExNTY0NkREOTcwMTdGOEZFMEJCQUJENzZFMUFCOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82RTUzQjVGODAxN0U2RTQ3Mjk0MzU1RDkwQ0NCQTBDMjI0QTE1NjQ2REQ5 NzAxN0Y4RkUwQkJBQkQ3NkUxQUI5LzAvRUM1MkE3QjA2QzAwQTc5QTYxQ0JGMkM3 MTIzMkFGNjFEM0REQUY1Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLQfwMA0EAgAC MAcDBQAoAyPAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQq6TANBgkqhkiG9w0B AQsFAAOCAQEAw7ObAPjF+u10E2YizOX+vsI9H3+zaOcDbWePgvECXJHIFJx48pzQ wXXkrDKrWYRIxPAaSTJBz4tq39q7+AWo1707OkKHHi7HWX/WhNyo7dxXdKP5C/5J aDWGC7TJCwoXslCsOtQlBZkzguNtNIKodWmgyZAeGBzfX/iTz2zSV55RLG90MIZJ gz6eWqj70iLmzwE3eR0F6nOcNy6wNKAned6GL4A7ta+/hhUXc5xbnBm/IeXm+o6Q 2tUDoPc+jlZzMUDPBmYu8vuqKJqfORGDk9rutxVGXnCGBHGMYtH+82ZiVmW39QXa FtV9QTO+v7hL0Ai1UQ6WMqDG22277nTx/w== -----END CERTIFICATE-----Generated at Thu May 16 22:33:58 2024 by rpki-client on console-ams.rpki-client.org