$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer File: 34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.cer (raw, json) Hash identifier: H6BBEbRvKVDAOfJTmazYyIHDA9GjTva56nvQo8mThPU= Subject key identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 033F97AE1749F7B3DA34323B613D863FFA215ABD Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 03:37:46 +0000 Certificate not after: Wed 04 Feb 2026 03:42:46 +0000 Subordinate resources: AS: 267741 IP: 45.168.80.0/24 IP: 45.169.52.0/23 IP: 2803:9da0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 03:3f:97:ae:17:49:f7:b3:da:34:32:3b:61:3d:86:3f:fa:21:5a:bd Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 03:37:46 2025 GMT Not After : Feb 4 03:42:46 2026 GMT Subject: CN=34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9c:69:10:92:d9:45:bb:68:c3:c0:0a:c6:e2:5d: 2c:8e:82:a5:38:67:76:c2:da:c8:de:d2:fa:cd:ac: 5e:71:bb:5e:02:62:3f:9e:af:66:aa:3b:31:c2:b9: 5d:8b:48:8f:88:3d:12:96:1f:35:fd:1a:75:69:e5: 38:5f:42:97:e1:b7:c9:03:4f:f0:90:d1:fd:2d:1e: 72:b8:cf:80:09:2f:bb:ce:7c:98:f6:fb:61:f3:ac: d9:e1:e6:bc:ed:7e:09:8c:cb:be:06:e7:6e:28:22: 30:37:42:ae:a0:91:3f:dd:2e:44:b8:5b:16:6b:5e: f5:56:47:ab:71:cc:a2:32:46:12:34:3d:6a:84:6e: 4e:00:06:70:2f:c0:a3:88:a3:b1:01:8e:73:fa:6a: 44:35:7f:39:8b:cb:74:93:fb:4b:89:7f:8e:ac:45: 43:2a:cf:58:6d:9e:90:f3:0c:1a:29:36:73:81:81: 44:7b:95:dd:1e:39:fb:6f:20:66:a2:8f:38:2b:e4: 89:9e:e7:bc:72:0d:d6:4f:69:4b:e5:cf:6e:47:7e: 01:c9:f1:80:6f:48:a6:05:2a:d8:c7:e3:c4:30:dd: d9:cb:0d:5e:e4:0d:39:02:50:0f:c2:24:72:35:3e: ee:7e:d6:a5:cb:a9:f5:2b:15:b5:04:65:1b:fd:30: 1b:6f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 34:A3:5E:8B:BB:E1:76:F3:5E:A6:FD:0D:BF:54:6E:AF:6E:B8:A3:8F X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/684A163061B8B37E1E50DCE9A72B2D544752D9B62E8637772EBEC99045E71403/0/34A35E8BBBE176F35EA6FD0DBF546EAF6EB8A38F.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.168.80.0/24 45.169.52.0/23 IPv6: 2803:9da0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267741 Signature Algorithm: sha256WithRSAEncryption e2:b9:11:ee:73:80:fb:81:11:ad:18:1f:26:9e:2b:2a:fd:c8: f9:8e:bf:9d:43:e2:d1:59:86:22:9b:ce:81:cb:fc:46:ef:78: 15:d0:22:a2:1a:d7:34:56:47:9d:2b:35:85:47:44:99:1a:9a: 6b:9c:af:77:3c:95:82:7c:4f:35:11:86:62:1e:40:09:1f:24: 0b:f2:d3:1c:3d:22:ee:4a:79:24:81:cf:d2:a1:23:f2:cd:c9: 3e:17:2a:97:9e:fa:a8:56:d5:05:36:2a:a1:c7:4d:73:21:67: 97:17:81:0e:29:2a:c7:7f:d8:ff:56:7d:73:21:c5:6c:11:70: 83:fc:43:5f:82:4c:83:b0:52:bc:58:8f:15:bd:eb:87:fd:b9: bf:49:77:93:1b:a8:db:f3:9e:99:20:e5:ee:65:88:f1:49:be: 5e:2f:3e:e0:6d:df:e5:04:e6:09:07:57:7c:fd:99:d9:d2:85: 6e:34:96:5b:77:34:15:0d:cc:0c:a0:b2:66:0a:37:2e:cb:1a: f4:37:92:42:b9:c1:e3:3d:3e:99:7f:cc:a4:44:dd:8a:81:57: 50:3b:b4:c9:85:3f:dc:e6:4f:12:96:c6:2a:de:e6:f0:83:03: af:6b:da:e8:8b:c4:c5:de:f1:2c:f9:27:d0:b0:e4:0e:69:15: c5:2f:5b:2b -----BEGIN CERTIFICATE----- MIIGqzCCBZOgAwIBAgIUAz+XrhdJ97PaNDI7YT2GP/ohWr0wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMzM3NDZaFw0yNjAyMDQwMzQyNDZaMDMxMTAvBgNV BAMTKDM0QTM1RThCQkJFMTc2RjM1RUE2RkQwREJGNTQ2RUFGNkVCOEEzOEYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCcaRCS2UW7aMPACsbiXSyOgqU4 Z3bC2sje0vrNrF5xu14CYj+er2aqOzHCuV2LSI+IPRKWHzX9GnVp5ThfQpfht8kD T/CQ0f0tHnK4z4AJL7vOfJj2+2HzrNnh5rztfgmMy74G524oIjA3Qq6gkT/dLkS4 WxZrXvVWR6txzKIyRhI0PWqEbk4ABnAvwKOIo7EBjnP6akQ1fzmLy3ST+0uJf46s RUMqz1htnpDzDBopNnOBgUR7ld0eOftvIGaijzgr5Ime57xyDdZPaUvlz25HfgHJ 8YBvSKYFKtjH48Qw3dnLDV7kDTkCUA/CJHI1Pu5+1qXLqfUrFbUEZRv9MBtvAgMB AAGjggO1MIIDsTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ0o16Lu+F2816m /Q2/VG6vbrijjzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjg0QTE2MzA2MUI4QjM3RTFFNTBEQ0U5 QTcyQjJENTQ0NzUyRDlCNjJFODYzNzc3MkVCRUM5OTA0NUU3MTQwMy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy82ODRBMTYzMDYxQjhCMzdFMUU1MERDRTlBNzJCMkQ1NDQ3NTJEOUI2MkU4 NjM3NzcyRUJFQzk5MDQ1RTcxNDAzLzAvMzRBMzVFOEJCQkUxNzZGMzVFQTZGRDBE QkY1NDZFQUY2RUI4QTM4Ri5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQALahQAwQBLak0 MA0EAgACMAcDBQAoA52gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQV3TANBgkq hkiG9w0BAQsFAAOCAQEA4rkR7nOA+4ERrRgfJp4rKv3I+Y6/nUPi0VmGIpvOgcv8 Ru94FdAiohrXNFZHnSs1hUdEmRqaa5yvdzyVgnxPNRGGYh5ACR8kC/LTHD0i7kp5 JIHP0qEj8s3JPhcql576qFbVBTYqocdNcyFnlxeBDikqx3/Y/1Z9cyHFbBFwg/xD X4JMg7BSvFiPFb3rh/25v0l3kxuo2/OemSDl7mWI8Um+Xi8+4G3f5QTmCQdXfP2Z 2dKFbjSWW3c0FQ3MDKCyZgo3Lssa9DeSQrnB4z0+mX/MpETdioFXUDu0yYU/3OZP EpbGKt7m8IMDr2va6IvExd7xLPkn0LDkDmkVxS9bKw== -----END CERTIFICATE-----Generated at Sun Feb 16 15:09:41 2025 by rpki-client