$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B83E4D5D29270E88E2270FE148340CE15D5431E.cer File: 0B83E4D5D29270E88E2270FE148340CE15D5431E.cer (raw, json) Hash identifier: uscCrx5XF3xBsHkNPP7JbrgzVxN1hnaXzDfXxFEJ+YY= Subject key identifier: 0B:83:E4:D5:D2:92:70:E8:8E:22:70:FE:14:83:40:CE:15:D5:43:1E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2FC9A0503337E0F45E4BA0BAB6DB274BFD65BA59 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/583982C23C50B781FFD016C5F0FFA5E69BA224BB4D3FB378DC12A6AA13A4FA70/0/0B83E4D5D29270E88E2270FE148340CE15D5431E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/583982C23C50B781FFD016C5F0FFA5E69BA224BB4D3FB378DC12A6AA13A4FA70/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 05:20:05 +0000 Certificate not after: Wed 04 Feb 2026 05:25:05 +0000 Subordinate resources: AS: 272903 IP: 2803:3690::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2f:c9:a0:50:33:37:e0:f4:5e:4b:a0:ba:b6:db:27:4b:fd:65:ba:59 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 05:20:05 2025 GMT Not After : Feb 4 05:25:05 2026 GMT Subject: CN=0B83E4D5D29270E88E2270FE148340CE15D5431E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:d2:b9:59:3e:77:2f:3b:ac:cb:26:45:17:43:0a: cb:a8:d6:a1:e9:88:46:72:24:a9:b5:d2:7e:bd:bc: 52:f1:ac:d6:91:57:bb:4c:f0:20:c4:09:43:e4:07: d9:28:c3:52:4f:40:fc:1b:d7:56:6a:b5:98:ad:aa: dd:19:c7:03:39:f2:8b:b3:bd:66:5f:f3:ae:61:30: 9f:7c:1e:b5:32:f6:f4:2c:99:a1:57:e8:95:5b:ff: 89:61:ca:50:35:ba:f3:bb:bc:45:a2:84:0c:1e:ab: 9b:d3:9b:ff:15:aa:a8:c8:2d:38:49:01:6e:07:32: 88:c5:83:f2:96:24:d0:5b:41:7c:ef:40:70:74:f6: 32:c3:49:b0:8e:9c:e7:89:14:64:11:b0:b0:56:36: f4:a8:1e:e9:80:79:76:b7:cf:f7:81:c1:57:5c:23: 86:06:b5:19:4e:91:bf:e6:fa:0d:44:4c:2b:0f:91: 3a:2f:a8:77:94:75:59:bb:11:c9:47:f9:61:c7:16: 00:d0:c5:49:fd:36:27:3a:bf:32:e9:d1:ab:2b:d6: cf:da:fc:7a:99:f8:4d:9a:41:b3:3b:ba:e5:2a:c4: d9:19:4d:ba:74:8a:3f:47:cd:89:d2:d3:eb:03:24: 8e:fc:02:cb:41:44:ea:47:0a:0e:ab:0f:7f:04:9a: 9e:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:83:E4:D5:D2:92:70:E8:8E:22:70:FE:14:83:40:CE:15:D5:43:1E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/583982C23C50B781FFD016C5F0FFA5E69BA224BB4D3FB378DC12A6AA13A4FA70/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/583982C23C50B781FFD016C5F0FFA5E69BA224BB4D3FB378DC12A6AA13A4FA70/0/0B83E4D5D29270E88E2270FE148340CE15D5431E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:3690::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 272903 Signature Algorithm: sha256WithRSAEncryption c9:13:b7:a8:9e:7e:66:9c:87:7c:3d:9c:ae:da:11:08:6e:15: cf:ed:5a:32:f6:4e:13:7c:98:05:74:a8:a9:de:77:88:f5:78: b5:c0:78:6b:bc:78:2c:42:6a:e4:1e:21:ab:e7:3c:e2:b0:2e: e9:2d:be:0e:f5:18:e6:ef:01:5a:db:f4:33:36:85:3c:22:84: 94:9d:e7:f1:5e:31:49:cf:5c:ac:51:ad:a3:e1:87:75:bc:fa: 03:45:5a:67:c1:04:99:17:ed:e0:08:5e:f4:19:15:36:d4:41: ff:d7:c8:0f:3c:b4:f4:ca:f1:37:b4:14:dc:46:00:64:dc:de: 58:0b:43:2d:c5:4f:49:81:b8:4b:58:2d:6c:98:84:e8:0f:fb: db:87:d9:4b:f6:6b:a4:e4:5a:74:e0:3b:f3:8e:45:d0:ca:46: 82:01:39:95:ec:5f:d3:27:ab:19:9c:2b:98:0b:06:fc:8d:48: 18:73:bc:d3:92:9b:d5:49:9f:94:95:a9:e4:60:3a:c5:e3:fa: 83:34:c4:85:8b:da:78:b0:04:5c:43:b3:dd:8b:f5:0f:86:36: 05:33:05:47:38:b2:cd:a5:6f:86:b9:df:c5:b8:57:1d:9f:25: 2d:8b:e8:68:d7:25:c3:ca:63:41:0a:39:56:56:e4:0c:d2:6b: 6b:3b:53:4c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUL8mgUDM34PReS6C6ttsnS/1lulkwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNTIwMDVaFw0yNjAyMDQwNTI1MDVaMDMxMTAvBgNV BAMTKDBCODNFNEQ1RDI5MjcwRTg4RTIyNzBGRTE0ODM0MENFMTVENTQzMUUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDSuVk+dy87rMsmRRdDCsuo1qHp iEZyJKm10n69vFLxrNaRV7tM8CDECUPkB9kow1JPQPwb11ZqtZitqt0ZxwM58ouz vWZf865hMJ98HrUy9vQsmaFX6JVb/4lhylA1uvO7vEWihAweq5vTm/8VqqjILThJ AW4HMojFg/KWJNBbQXzvQHB09jLDSbCOnOeJFGQRsLBWNvSoHumAeXa3z/eBwVdc I4YGtRlOkb/m+g1ETCsPkTovqHeUdVm7EclH+WHHFgDQxUn9Nic6vzLp0asr1s/a /HqZ+E2aQbM7uuUqxNkZTbp0ij9HzYnS0+sDJI78AstBROpHCg6rD38Emp59AgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLg+TV0pJw6I4i cP4Ug0DOFdVDHjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTgzOTgyQzIzQzUwQjc4MUZGRDAxNkM1 RjBGRkE1RTY5QkEyMjRCQjREM0ZCMzc4REMxMkE2QUExM0E0RkE3MC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81ODM5ODJDMjNDNTBCNzgxRkZEMDE2QzVGMEZGQTVFNjlCQTIyNEJCNEQz RkIzNzhEQzEyQTZBQTEzQTRGQTcwLzAvMEI4M0U0RDVEMjkyNzBFODhFMjI3MEZF MTQ4MzQwQ0UxNUQ1NDMxRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAM2kDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKgcwDQYJKoZIhvcNAQELBQADggEBAMkTt6ie fmach3w9nK7aEQhuFc/tWjL2ThN8mAV0qKned4j1eLXAeGu8eCxCauQeIavnPOKw Luktvg71GObvAVrb9DM2hTwihJSd5/FeMUnPXKxRraPhh3W8+gNFWmfBBJkX7eAI XvQZFTbUQf/XyA88tPTK8Te0FNxGAGTc3lgLQy3FT0mBuEtYLWyYhOgP+9uH2Uv2 a6TkWnTgO/OORdDKRoIBOZXsX9MnqxmcK5gLBvyNSBhzvNOSm9VJn5SVqeRgOsXj +oM0xIWL2niwBFxDs92L9Q+GNgUzBUc4ss2lb4a538W4Vx2fJS2L6GjXJcPKY0EK OVZW5AzSa2s7U0w= -----END CERTIFICATE-----Generated at Sun Feb 16 15:47:52 2025 by rpki-client