$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0251D7CDC540134049C0B5F5B66C821CC938956D.cer File: 0251D7CDC540134049C0B5F5B66C821CC938956D.cer (raw, json) Hash identifier: tL8XSChwViEGpm65SL0XDRLUcaLzReyZsec73UKZHe4= Subject key identifier: 02:51:D7:CD:C5:40:13:40:49:C0:B5:F5:B6:6C:82:1C:C9:38:95:6D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 38FF8CEB6DCC382351E51D336F270BFCBDDD7C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/1D924F1F094305FA8DFA7812B90496935D0A59A02163625CFA63823ADAB15B7F/0/0251D7CDC540134049C0B5F5B66C821CC938956D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/1D924F1F094305FA8DFA7812B90496935D0A59A02163625CFA63823ADAB15B7F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 19 Mar 2025 19:15:01 +0000 Certificate not after: Wed 18 Mar 2026 19:20:01 +0000 Subordinate resources: AS: 273203 IP: 2803:d4d0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 38:ff:8c:eb:6d:cc:38:23:51:e5:1d:33:6f:27:0b:fc:bd:dd:7c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 19 19:15:01 2025 GMT Not After : Mar 18 19:20:01 2026 GMT Subject: CN=0251D7CDC540134049C0B5F5B66C821CC938956D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:c9:4f:dd:d8:2a:bd:e2:42:16:e7:e5:0c:f4:e3: cd:fc:7e:07:4f:5b:1e:32:fb:6e:6e:29:29:79:55: 58:d6:61:90:fd:dd:a9:18:b0:dc:80:8a:3c:dc:7b: 76:65:dd:0a:fe:fc:80:8a:6a:85:ca:21:37:f5:2d: e5:ce:76:d0:c5:a9:c6:7c:aa:ef:cb:49:8e:b4:d8: 09:7d:ca:16:01:6a:94:32:4b:73:4e:fc:a0:c8:47: 74:21:8f:3b:72:fa:e7:c9:cf:97:07:3f:9f:a6:e1: 5a:ac:c9:23:2b:a9:89:ea:49:60:5b:ef:d4:ab:85: 16:e1:e9:a7:50:5e:71:7c:7d:f6:0b:2c:9e:ab:79: 67:8e:47:49:a0:32:2a:e5:93:f5:bc:56:26:95:b4: 5e:a8:81:e7:3c:38:f4:8e:ba:50:1d:d3:a5:f4:38: 03:0b:af:b1:d4:22:69:05:f1:2d:64:e9:b2:e1:80: 61:d6:66:a0:10:f0:2d:8b:e9:7b:d6:6c:45:be:b6: 72:f9:93:d1:bf:a0:40:43:30:07:fc:25:f0:df:34: 18:b7:b6:4d:e3:cd:db:58:42:f4:d7:8d:c0:54:cc: 7e:e2:9c:a6:32:f8:8e:de:dc:f1:72:ae:e3:db:61: 97:66:dd:f4:37:1d:ad:cc:e1:9c:f9:6b:41:7f:5a: 27:e5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 02:51:D7:CD:C5:40:13:40:49:C0:B5:F5:B6:6C:82:1C:C9:38:95:6D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1D924F1F094305FA8DFA7812B90496935D0A59A02163625CFA63823ADAB15B7F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1D924F1F094305FA8DFA7812B90496935D0A59A02163625CFA63823ADAB15B7F/0/0251D7CDC540134049C0B5F5B66C821CC938956D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:d4d0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273203 Signature Algorithm: sha256WithRSAEncryption 4b:43:76:0c:6d:f8:9d:1a:b4:6e:73:4a:26:1b:34:e4:2d:72: df:52:86:32:f7:e6:7f:68:08:3e:9b:9d:a5:f7:f4:a3:68:fb: a1:7b:04:41:65:7d:e1:df:aa:d5:b7:ba:4b:69:2f:77:4c:b8: 2d:40:c6:10:54:5e:f4:87:be:5f:9e:fe:5d:84:88:a3:c8:b2: 89:30:ef:53:1e:20:50:6e:73:09:95:ce:17:57:09:db:75:0a: f9:2f:3c:9b:d9:54:52:3f:50:c9:94:bd:94:f0:76:17:cb:c2: 1b:aa:22:2f:a6:ae:91:94:c4:f4:b0:72:e8:79:d5:e0:90:27: ab:9b:e2:84:d7:f4:57:96:9e:93:67:32:a5:57:8f:eb:21:17: 25:69:f0:9a:84:f3:b9:ab:a5:38:fc:e8:f9:c5:b6:0b:b9:32: 7b:3e:98:90:a6:fa:a2:32:f1:b5:08:aa:35:ce:89:d3:f5:28: 48:cd:44:17:3e:33:07:d9:17:93:09:c9:bb:74:7c:43:57:39: d6:25:d7:9c:7d:66:36:08:cb:9b:ef:91:5b:b0:9c:e0:9b:f6: 21:13:cd:43:39:80:53:91:a5:6f:ec:1c:2d:2e:37:e4:9b:16: 9b:b6:0e:51:e2:a4:1b:4e:ee:13:6e:0d:11:aa:af:d1:ce:1b: a0:9a:07:8a -----BEGIN CERTIFICATE----- MIIGljCCBX6gAwIBAgITOP+M623MOCNR5R0zbycL/L3dfDANBgkqhkiG9w0BAQsF ADAzMTEwLwYDVQQDEyhCQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFF NjYxODE2MB4XDTI1MDMxOTE5MTUwMVoXDTI2MDMxODE5MjAwMVowMzExMC8GA1UE AxMoMDI1MUQ3Q0RDNTQwMTM0MDQ5QzBCNUY1QjY2QzgyMUNDOTM4OTU2RDCCASIw DQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMlP3dgqveJCFuflDPTjzfx+B09b HjL7bm4pKXlVWNZhkP3dqRiw3ICKPNx7dmXdCv78gIpqhcohN/Ut5c520MWpxnyq 78tJjrTYCX3KFgFqlDJLc078oMhHdCGPO3L658nPlwc/n6bhWqzJIyupiepJYFvv 1KuFFuHpp1BecXx99gssnqt5Z45HSaAyKuWT9bxWJpW0XqiB5zw49I66UB3TpfQ4 AwuvsdQiaQXxLWTpsuGAYdZmoBDwLYvpe9ZsRb62cvmT0b+gQEMwB/wl8N80GLe2 TePN21hC9NeNwFTMfuKcpjL4jt7c8XKu49thl2bd9DcdrczhnPlrQX9aJ+UCAwEA AaOCA6EwggOdMA8GA1UdEwEB/wQFMAMBAf8wHQYDVR0OBBYEFAJR183FQBNAScC1 9bZsghzJOJVtMB8GA1UdIwQYMBaAFLzAZl7Pipe4PjmCaNkqJVuuZhgWMA4GA1Ud DwEB/wQEAwIBBjCBsAYDVR0fBIGoMIGlMIGioIGfoIGchoGZcnN5bmM6Ly9yZXBv c2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkRDMzU5NERENEU1NEJBREU3 MDlBQzBEMjU1Q0YyNzlDNDc3MTZEMkU4QjNGNEQ0NURDNDYzNTU4OTlCMzZENC8w L0JDQzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY3JsMIG5 BggrBgEFBQcBAQSBrDCBqTCBpgYIKwYBBQUHMAKGgZlyc3luYzovL3JlcG9zaXRv cnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9FNUFBMUIyQzY5MEQzNEREM0E0MkUw QzAyNjhDMzIxOEVEMTU4RTE1RDI5RkNCRDBCQUI2NkI0Nzg2RDYzMkU2LzAvQkND MDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJBRTY2MTgxNi5jZXIwggFxBggr BgEFBQcBCwSCAWMwggFfMHkGCCsGAQUFBzAFhm1yc3luYzovL3JlcG9zaXRvcnku bGFjbmljLm5ldC9ycGtpL2xhY25pYy8xRDkyNEYxRjA5NDMwNUZBOERGQTc4MTJC OTA0OTY5MzVEMEE1OUEwMjE2MzYyNUNGQTYzODIzQURBQjE1QjdGLzAvMIGmBggr BgEFBQcwCoaBmXJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFj bmljLzFEOTI0RjFGMDk0MzA1RkE4REZBNzgxMkI5MDQ5NjkzNUQwQTU5QTAyMTYz NjI1Q0ZBNjM4MjNBREFCMTVCN0YvMC8wMjUxRDdDREM1NDAxMzQwNDlDMEI1RjVC NjZDODIxQ0M5Mzg5NTZELm1mdDA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxh Y25pYy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMBgGA1UdIAEB/wQOMAwwCgYI KwYBBQUHDgIwIAYIKwYBBQUHAQcBAf8EETAPMA0EAgACMAcDBQAoA9TQMBoGCCsG AQUFBwEIAQH/BAswCaAHMAUCAwQrMzANBgkqhkiG9w0BAQsFAAOCAQEAS0N2DG34 nRq0bnNKJhs05C1y31KGMvfmf2gIPpudpff0o2j7oXsEQWV94d+q1be6S2kvd0y4 LUDGEFRe9Ie+X57+XYSIo8iyiTDvUx4gUG5zCZXOF1cJ23UK+S88m9lUUj9QyZS9 lPB2F8vCG6oiL6aukZTE9LBy6HnV4JAnq5vihNf0V5aek2cypVeP6yEXJWnwmoTz uaulOPzo+cW2C7kyez6YkKb6ojLxtQiqNc6J0/UoSM1EFz4zB9kXkwnJu3R8Q1c5 1iXXnH1mNgjLm++RW7Cc4Jv2IRPNQzmAU5Glb+wcLS435JsWm7YOUeKkG07uE24N Eaqv0c4boJoHig== -----END CERTIFICATE-----Generated at Sun Apr 6 04:15:07 2025 by rpki-client