$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.cer File: 208A6A9014A4D9F040F76110276AD236D1F5C14E.cer (raw, json) Hash identifier: FtOOtiq0jC3JHt2x3ybY+2LWXmgMKg6UFJRWz1ZEZ6k= Subject key identifier: 20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 038A96E9C1CCCFC845497A4EF3BE61CD7F927BAE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:33:54 +0000 Certificate not after: Wed 04 Feb 2026 04:38:54 +0000 Subordinate resources: AS: 270187 IP: 2806:3f5::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:8a:96:e9:c1:cc:cf:c8:45:49:7a:4e:f3:be:61:cd:7f:92:7b:ae Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:33:54 2025 GMT Not After : Feb 4 04:38:54 2026 GMT Subject: CN=208A6A9014A4D9F040F76110276AD236D1F5C14E Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ed:58:ad:10:9c:b9:95:42:d2:98:cc:dd:90:72: fe:ac:e4:fe:5b:c3:89:30:d7:1f:d8:36:90:03:e3: 0c:ad:0c:6f:7d:3b:16:30:1e:2f:e3:8c:05:d7:b8: 3a:e2:1e:0d:78:b2:cd:f7:e7:46:b2:5d:83:99:e6: e7:21:74:fe:e0:76:5d:71:64:31:48:5c:65:dd:5b: 02:38:30:9f:1e:d7:9a:69:c4:76:ce:cf:64:f0:55: e7:9b:d7:1e:08:22:9d:aa:a6:92:dc:5f:f0:1d:e0: 24:e9:86:17:31:44:89:88:95:5f:bb:b4:d8:30:b7: d9:cb:e4:b7:de:3a:db:f6:c4:76:b9:fe:2c:ae:56: 6c:93:26:02:63:ef:84:90:96:c6:3d:6a:0e:9d:03: 33:bd:40:58:61:14:29:70:47:cc:07:cd:e4:c2:ef: 32:d2:b0:e1:9d:c1:de:8e:78:e7:3b:31:a8:bc:6b: 3a:c2:b0:78:35:45:8b:e1:78:73:b2:b5:e2:5e:1c: ff:69:58:6c:21:fb:90:8c:6c:6d:d2:37:e0:b2:59: 97:56:ca:45:90:7b:ec:21:55:3e:30:f9:5f:0c:4b: 78:c9:f6:62:61:5a:6a:eb:e2:1d:a6:e1:bc:09:05: a3:0c:ff:38:31:b7:2d:a6:b2:cb:a9:ba:dd:c3:e9: 6f:93 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 20:8A:6A:90:14:A4:D9:F0:40:F7:61:10:27:6A:D2:36:D1:F5:C1:4E X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/56FE1BD38F0FC9F1AC272CADE81EEA0189D57AACCABBBB80FDCA7E258AC04363/0/208A6A9014A4D9F040F76110276AD236D1F5C14E.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2806:3f5::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270187 Signature Algorithm: sha256WithRSAEncryption 13:8d:42:36:c0:95:d3:2a:2a:a6:70:53:e8:13:be:dd:c2:4b: bf:fd:7e:d7:2f:b1:65:ca:22:34:88:45:8d:90:3a:d2:fd:8c: 73:39:e5:8a:08:61:4d:dd:33:84:01:0f:ac:5b:a6:9a:e1:2b: 8d:5b:14:04:c2:40:9d:af:b1:90:f5:00:87:cd:a9:c8:62:8d: ef:8b:7d:ac:e4:e1:22:6e:24:41:94:0b:88:da:82:fe:a5:68: cb:81:6a:23:39:e9:23:c4:e4:fc:dd:88:48:95:24:08:28:9d: 88:2c:af:cb:0f:f9:9e:a7:91:34:dd:51:04:55:9e:95:10:69: df:51:a8:b0:c4:6b:0d:cf:9d:4f:5c:0d:3d:31:33:bf:69:b9: 2f:fc:bf:db:cc:a3:e9:1c:93:1d:2a:81:88:8b:5c:36:45:64: 10:c4:9d:1f:27:71:22:a4:8e:af:01:c8:ef:88:bc:48:7d:07: 5b:0b:e2:71:78:f4:5f:de:a1:ae:5b:8c:ad:0a:fe:36:3d:0e: b1:f4:e1:ec:fb:72:cf:cf:16:97:50:54:0c:07:b5:81:27:e3: b0:14:2b:4b:9d:55:4c:a6:41:46:6a:a1:28:bd:e2:cf:eb:d1: 70:c3:28:fa:88:b6:f0:7a:c7:36:4e:c0:b6:11:5e:5f:bd:ba: c9:7d:a2:dc -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUA4qW6cHMz8hFSXpO875hzX+Se64wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDMzNTRaFw0yNjAyMDQwNDM4NTRaMDMxMTAvBgNV BAMTKDIwOEE2QTkwMTRBNEQ5RjA0MEY3NjExMDI3NkFEMjM2RDFGNUMxNEUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDtWK0QnLmVQtKYzN2Qcv6s5P5b w4kw1x/YNpAD4wytDG99OxYwHi/jjAXXuDriHg14ss3350ayXYOZ5uchdP7gdl1x ZDFIXGXdWwI4MJ8e15ppxHbOz2TwVeeb1x4IIp2qppLcX/Ad4CTphhcxRImIlV+7 tNgwt9nL5LfeOtv2xHa5/iyuVmyTJgJj74SQlsY9ag6dAzO9QFhhFClwR8wHzeTC 7zLSsOGdwd6OeOc7Mai8azrCsHg1RYvheHOyteJeHP9pWGwh+5CMbG3SN+CyWZdW ykWQe+whVT4w+V8MS3jJ9mJhWmrr4h2m4bwJBaMM/zgxty2mssuput3D6W+TAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQgimqQFKTZ8ED3 YRAnatI20fXBTjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTZGRTFCRDM4RjBGQzlGMUFDMjcyQ0FE RTgxRUVBMDE4OUQ1N0FBQ0NBQkJCQjgwRkRDQTdFMjU4QUMwNDM2My8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81NkZFMUJEMzhGMEZDOUYxQUMyNzJDQURFODFFRUEwMTg5RDU3QUFDQ0FC QkJCODBGRENBN0UyNThBQzA0MzYzLzAvMjA4QTZBOTAxNEE0RDlGMDQwRjc2MTEw Mjc2QUQyMzZEMUY1QzE0RS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAYD9TAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEH2swDQYJKoZIhvcNAQELBQADggEBABONQjbA ldMqKqZwU+gTvt3CS7/9ftcvsWXKIjSIRY2QOtL9jHM55YoIYU3dM4QBD6xbpprh K41bFATCQJ2vsZD1AIfNqchije+Lfazk4SJuJEGUC4jagv6laMuBaiM56SPE5Pzd iEiVJAgonYgsr8sP+Z6nkTTdUQRVnpUQad9RqLDEaw3PnU9cDT0xM79puS/8v9vM o+kckx0qgYiLXDZFZBDEnR8ncSKkjq8ByO+IvEh9B1sL4nF49F/eoa5bjK0K/jY9 DrH04ez7cs/PFpdQVAwHtYEn47AUK0udVUymQUZqoSi94s/r0XDDKPqItvB6xzZO wLYRXl+9usl9otw= -----END CERTIFICATE-----Generated at Sat Apr 12 09:57:16 2025 by rpki-client