$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.cer File: 04066F3321E4D30296716F0BC0C96F60BA79A6E3.cer (raw, json) Hash identifier: c2tiwoGmJWUpoYQ1OvS++ybdT0pgSI8nhBV7tvxllws= Subject key identifier: 04:06:6F:33:21:E4:D3:02:96:71:6F:0B:C0:C9:6F:60:BA:79:A6:E3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3F672726D5DB4FA8FA5D1E7EA81993873BAF112F Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 23:19:13 +0000 Certificate not after: Wed 04 Feb 2026 23:24:13 +0000 Subordinate resources: AS: 271811 IP: 177.184.88.0/22 IP: 2803:b010::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3f:67:27:26:d5:db:4f:a8:fa:5d:1e:7e:a8:19:93:87:3b:af:11:2f Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 23:19:13 2025 GMT Not After : Feb 4 23:24:13 2026 GMT Subject: CN=04066F3321E4D30296716F0BC0C96F60BA79A6E3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:17:51:21:3f:ec:14:a8:0a:cb:59:ca:cd:63: c7:c1:94:65:e7:a0:73:c4:a9:f0:ed:33:15:83:b7: db:09:74:e0:4b:e2:25:c1:ba:ee:be:d1:7b:58:c9: e4:46:35:bb:c7:c9:4c:a2:53:d8:1a:67:1e:96:69: 1d:35:5c:45:6d:d0:9f:99:8b:79:1e:85:0f:7a:73: 5e:79:77:56:a0:c9:da:23:bf:5e:f9:77:96:98:c9: 56:90:aa:30:00:7d:70:b6:55:c1:df:6e:b4:5f:29: 38:6c:ca:14:49:da:16:7a:d6:8f:1e:f1:71:0f:ba: 3f:85:eb:83:47:3c:2b:97:82:d8:81:82:ed:5f:84: 01:93:56:b4:4f:43:c3:cc:44:52:75:6b:62:bf:aa: d5:fe:c7:25:e1:40:a1:d0:1d:1b:c2:03:b8:86:37: a6:d9:c1:1f:9b:80:b5:7b:b6:ef:39:f5:c0:8b:9f: 21:e7:99:1f:d1:86:6d:e5:2b:56:67:ff:f8:4c:69: 40:1d:11:dc:d1:1b:27:d6:d1:05:77:91:ab:36:d8: a2:34:a6:f2:54:21:b2:58:35:a4:16:ca:25:21:4f: 70:6a:b3:07:39:36:44:08:24:7f:0d:55:52:4b:1c: 92:99:84:a2:7c:8b:a4:b6:4d:56:78:8b:39:2d:57: d7:11 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 04:06:6F:33:21:E4:D3:02:96:71:6F:0B:C0:C9:6F:60:BA:79:A6:E3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE30248DEB42234B16A54E3F9E8897FCC5C61DBF3DFE437311E515E730CCD4/0/04066F3321E4D30296716F0BC0C96F60BA79A6E3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.184.88.0/22 IPv6: 2803:b010::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 271811 Signature Algorithm: sha256WithRSAEncryption de:b3:84:91:14:55:01:ea:55:5b:0b:df:d0:53:11:c3:c4:be: 37:83:03:78:54:79:a3:d5:6b:9b:9b:4e:0b:80:47:95:88:9d: 45:0f:af:73:e6:2e:8c:40:76:c7:1a:ea:f6:9a:c5:7e:b8:2a: 30:4d:38:29:2e:c1:79:6d:bc:21:7e:b0:d6:75:ed:76:63:de: c2:d8:e7:91:60:ae:5c:68:0c:ff:4f:8f:d0:29:56:82:7c:ff: c2:5f:b7:97:47:5a:82:a9:7f:89:2f:86:12:ac:fa:24:e0:26: cd:6b:4c:26:98:9c:97:35:e2:52:4b:16:37:4e:c6:73:3d:8b: 2b:de:04:e6:e5:21:7e:58:1b:a6:30:13:14:bf:10:1a:15:6b: ca:2f:53:b2:c9:a9:59:cb:ca:38:92:e9:40:d0:4f:2b:9c:30: 31:cb:07:66:aa:6b:8b:af:99:7b:e4:53:4d:21:5c:07:6e:ad: 0f:fa:6e:42:8f:d8:a4:5b:d7:79:ac:4f:4d:11:9c:86:14:1b: 36:bd:ee:17:6a:ee:4c:85:55:d2:6e:2c:a7:9d:41:d3:03:de: 5f:d6:27:72:fb:4f:5b:65:b4:8e:e8:be:ec:ba:e6:1a:da:a5: 00:2c:64:ac:3d:b9:8c:5c:e3:aa:d5:54:2f:20:16:5b:54:72: 27:76:c6:ad -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUP2cnJtXbT6j6XR5+qBmThzuvES8wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMzE5MTNaFw0yNjAyMDQyMzI0MTNaMDMxMTAvBgNV BAMTKDA0MDY2RjMzMjFFNEQzMDI5NjcxNkYwQkMwQzk2RjYwQkE3OUE2RTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCnF1EhP+wUqArLWcrNY8fBlGXn oHPEqfDtMxWDt9sJdOBL4iXBuu6+0XtYyeRGNbvHyUyiU9gaZx6WaR01XEVt0J+Z i3kehQ96c155d1agydojv175d5aYyVaQqjAAfXC2VcHfbrRfKThsyhRJ2hZ61o8e 8XEPuj+F64NHPCuXgtiBgu1fhAGTVrRPQ8PMRFJ1a2K/qtX+xyXhQKHQHRvCA7iG N6bZwR+bgLV7tu859cCLnyHnmR/Rhm3lK1Zn//hMaUAdEdzRGyfW0QV3kas22KI0 pvJUIbJYNaQWyiUhT3Bqswc5NkQIJH8NVVJLHJKZhKJ8i6S2TVZ4izktV9cRAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQEBm8zIeTTApZx bwvAyW9gunmm4zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTZGRTMwMjQ4REVCNDIyMzRCMTZBNTRF M0Y5RTg4OTdGQ0M1QzYxREJGM0RGRTQzNzMxMUU1MTVFNzMwQ0NENC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NkZFMzAyNDhERUI0MjIzNEIxNkE1NEUzRjlFODg5N0ZDQzVDNjFEQkYz REZFNDM3MzExRTUxNUU3MzBDQ0Q0LzAvMDQwNjZGMzMyMUU0RDMwMjk2NzE2RjBC QzBDOTZGNjBCQTc5QTZFMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCsbhYMA0EAgAC MAcDBQAoA7AQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQlwzANBgkqhkiG9w0B AQsFAAOCAQEA3rOEkRRVAepVWwvf0FMRw8S+N4MDeFR5o9Vrm5tOC4BHlYidRQ+v c+YujEB2xxrq9prFfrgqME04KS7BeW28IX6w1nXtdmPewtjnkWCuXGgM/0+P0ClW gnz/wl+3l0dagql/iS+GEqz6JOAmzWtMJpiclzXiUksWN07Gcz2LK94E5uUhflgb pjATFL8QGhVryi9TssmpWcvKOJLpQNBPK5wwMcsHZqpri6+Ze+RTTSFcB26tD/pu Qo/YpFvXeaxPTRGchhQbNr3uF2ruTIVV0m4sp51B0wPeX9YncvtPW2W0jui+7Lrm GtqlACxkrD25jFzjqtVULyAWW1RyJ3bGrQ== -----END CERTIFICATE-----Generated at Sat Apr 12 09:51:57 2025 by rpki-client