$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/244A8750A93B99A9DD76D16C557F7E6415151B49.cer File: 244A8750A93B99A9DD76D16C557F7E6415151B49.cer (raw, json) Hash identifier: 4EiRCzPq9dXRUI8pF99j91TC7/zaQQ6U4L9h0ZfgaO0= Subject key identifier: 24:4A:87:50:A9:3B:99:A9:DD:76:D1:6C:55:7F:7E:64:15:15:1B:49 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 03F9D843EEAC5375CABA16BCD8B3776632374A3E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/6F17D336111CD6EDDD642066CB2EB6228EAE87F734A13BDD57F7FEB814EFA9E1/0/244A8750A93B99A9DD76D16C557F7E6415151B49.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/6F17D336111CD6EDDD642066CB2EB6228EAE87F734A13BDD57F7FEB814EFA9E1/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 20:06:10 +0000 Certificate not after: Tue 03 Feb 2026 20:11:10 +0000 Subordinate resources: AS: 266747 IP: 45.228.66.0/24 IP: 2803:9250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:f9:d8:43:ee:ac:53:75:ca:ba:16:bc:d8:b3:77:66:32:37:4a:3e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 20:06:10 2025 GMT Not After : Feb 3 20:11:10 2026 GMT Subject: CN=244A8750A93B99A9DD76D16C557F7E6415151B49 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e5:81:31:98:58:55:10:95:31:49:de:7a:13:fa: eb:6b:e5:d2:22:a3:9f:e2:ce:f9:54:42:3c:e1:47: 61:c6:9c:74:e1:12:ae:3a:7a:b1:8d:b6:9e:b2:7b: ab:a2:73:bd:05:f1:63:2b:1a:4e:c2:c4:e6:f0:55: 6e:f4:ec:59:83:08:0f:1e:2a:ee:bd:e7:06:db:cc: 65:63:08:17:42:6c:aa:1f:f3:ef:3e:b8:f7:26:fc: a3:e7:ec:d6:02:26:fd:cb:03:48:5d:08:0b:87:f6: 26:3b:b9:05:20:0e:d8:c8:f9:f3:45:47:2e:55:f4: 87:a7:32:60:4f:45:e4:52:dc:52:7b:62:a0:78:39: ed:ed:c5:0a:d5:19:50:25:82:97:b3:d3:6d:35:97: a3:0b:12:1e:1c:e0:d6:cf:f7:a9:a7:b1:92:9b:af: ea:4e:f5:9a:40:d7:66:82:9f:b1:db:4d:96:e7:79: 8b:f8:8c:80:5d:5a:1a:5a:51:5d:b6:81:08:b7:6c: ea:cd:26:42:2c:85:df:f2:3e:09:cf:c7:2e:9d:54: 05:bb:b0:86:5a:da:00:aa:54:2b:f2:2c:cb:57:1e: 0f:6f:bc:4f:fa:22:67:3c:63:63:7f:f6:75:3e:28: 0d:69:5b:81:81:89:d0:d9:6a:64:6e:87:0a:0f:3e: f2:1b Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 24:4A:87:50:A9:3B:99:A9:DD:76:D1:6C:55:7F:7E:64:15:15:1B:49 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6F17D336111CD6EDDD642066CB2EB6228EAE87F734A13BDD57F7FEB814EFA9E1/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6F17D336111CD6EDDD642066CB2EB6228EAE87F734A13BDD57F7FEB814EFA9E1/0/244A8750A93B99A9DD76D16C557F7E6415151B49.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.228.66.0/24 IPv6: 2803:9250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266747 Signature Algorithm: sha256WithRSAEncryption b6:b2:0b:01:a3:88:5c:f6:66:59:b2:95:6b:e3:a1:3b:5b:bd: eb:4a:18:1a:66:44:52:00:22:e3:0b:42:99:f3:97:ed:97:6e: 8b:bc:4c:11:27:ed:c5:7f:f1:b8:16:b4:55:16:f7:3c:b6:ea: 2f:73:e9:5c:d0:a4:27:95:af:0f:d6:00:ac:57:9d:dc:1d:ad: 4b:d5:bf:39:47:c4:8a:c4:2f:ee:9a:8b:11:6c:5d:cb:b6:f9: 83:89:d3:78:f9:55:09:90:09:be:b6:01:71:ef:14:f1:7d:f6: a9:00:47:43:8d:b5:f0:bf:98:ae:04:c0:b1:81:4f:0b:89:5a: 04:40:a9:33:7b:d6:31:b9:63:f9:21:8f:84:39:03:df:65:b5: 79:99:47:ad:ce:91:e2:72:0e:1b:c9:48:d5:1d:bb:75:34:b7: 3d:1a:36:c3:cb:76:ee:5a:c5:0c:86:73:80:22:44:44:5c:52: 82:18:97:93:90:a6:2d:9a:20:c0:d6:a9:50:48:7e:c5:e6:21: 9d:80:f3:60:48:c7:4a:4b:c1:00:9c:56:fd:10:95:9f:af:80: 88:9e:10:99:7c:11:f1:0e:04:7a:39:33:11:28:58:ab:44:93: 45:30:83:16:7f:a7:53:9b:a2:e8:ca:56:c4:13:db:34:f5:0a: b1:86:56:0a -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUA/nYQ+6sU3XKuha82LN3ZjI3Sj4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMDA2MTBaFw0yNjAyMDMyMDExMTBaMDMxMTAvBgNV BAMTKDI0NEE4NzUwQTkzQjk5QTlERDc2RDE2QzU1N0Y3RTY0MTUxNTFCNDkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDlgTGYWFUQlTFJ3noT+utr5dIi o5/izvlUQjzhR2HGnHThEq46erGNtp6ye6uic70F8WMrGk7CxObwVW707FmDCA8e Ku695wbbzGVjCBdCbKof8+8+uPcm/KPn7NYCJv3LA0hdCAuH9iY7uQUgDtjI+fNF Ry5V9IenMmBPReRS3FJ7YqB4Oe3txQrVGVAlgpez0201l6MLEh4c4NbP96mnsZKb r+pO9ZpA12aCn7HbTZbneYv4jIBdWhpaUV22gQi3bOrNJkIshd/yPgnPxy6dVAW7 sIZa2gCqVCvyLMtXHg9vvE/6Imc8Y2N/9nU+KA1pW4GBidDZamRuhwoPPvIbAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQkSodQqTuZqd12 0WxVf35kFRUbSTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNkYxN0QzMzYxMTFDRDZFRERENjQyMDY2 Q0IyRUI2MjI4RUFFODdGNzM0QTEzQkRENTdGN0ZFQjgxNEVGQTlFMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82RjE3RDMzNjExMUNENkVEREQ2NDIwNjZDQjJFQjYyMjhFQUU4N0Y3MzRB MTNCREQ1N0Y3RkVCODE0RUZBOUUxLzAvMjQ0QTg3NTBBOTNCOTlBOURENzZEMTZD NTU3RjdFNjQxNTE1MUI0OS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQALeRCMA0EAgAC MAcDBQAoA5JQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQR+zANBgkqhkiG9w0B AQsFAAOCAQEAtrILAaOIXPZmWbKVa+OhO1u960oYGmZEUgAi4wtCmfOX7Zdui7xM ESftxX/xuBa0VRb3PLbqL3PpXNCkJ5WvD9YArFed3B2tS9W/OUfEisQv7pqLEWxd y7b5g4nTePlVCZAJvrYBce8U8X32qQBHQ4218L+YrgTAsYFPC4laBECpM3vWMblj +SGPhDkD32W1eZlHrc6R4nIOG8lI1R27dTS3PRo2w8t27lrFDIZzgCJERFxSghiX k5CmLZogwNapUEh+xeYhnYDzYEjHSkvBAJxW/RCVn6+AiJ4QmXwR8Q4EejkzEShY q0STRTCDFn+nU5ui6MpWxBPbNPUKsYZWCg== -----END CERTIFICATE-----Generated at Sat Apr 12 09:59:28 2025 by rpki-client