$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.cer File: 3A400B3A5D53E4EA3825ED69A583478D86023E84.cer (raw, json) Hash identifier: 3wGekKVjNNuhyHUfuueRag3NIY3Xx137VwF521e7nuY= Subject key identifier: 3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 46D35A63B3AA5E3A79FB6D13A3D80E46825D176E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Sat 22 Mar 2025 10:54:45 +0000 Certificate not after: Sat 21 Mar 2026 10:59:45 +0000 Subordinate resources: AS: 266701 IP: 45.230.72.0/22 IP: 2803:2d20::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 46:d3:5a:63:b3:aa:5e:3a:79:fb:6d:13:a3:d8:0e:46:82:5d:17:6e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 22 10:54:45 2025 GMT Not After : Mar 21 10:59:45 2026 GMT Subject: CN=3A400B3A5D53E4EA3825ED69A583478D86023E84 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:93:14:a7:54:fc:99:25:3b:28:52:83:60:df:60: 26:bd:f0:a5:d8:62:1c:b9:c3:8d:12:a3:f9:c0:03: b6:4f:ff:c3:bd:6f:30:5f:ff:bb:ab:a9:b3:9d:15: e0:94:2d:a1:ec:fc:db:7f:52:04:39:8f:dc:bd:58: 92:bc:12:8f:8d:1c:f2:23:90:54:b2:00:f8:5e:64: c3:41:91:17:fc:6e:96:03:e0:ae:5c:de:e8:ac:ca: 06:68:29:26:b7:92:58:9e:83:f9:bc:ad:05:48:1f: e0:80:4d:ef:5d:4d:8c:39:ed:67:ab:15:ee:30:23: 84:91:3e:5e:2b:86:00:32:1d:12:f6:f0:1b:a2:e4: b9:f2:ea:62:26:81:3d:cc:da:9a:c7:81:03:82:f2: d6:4e:4b:2f:dd:ef:e4:57:f5:be:97:df:6f:10:47: ed:ab:c6:08:bc:b3:50:39:34:54:9d:6d:ba:c7:0f: 73:86:4e:d1:15:0d:77:de:18:a5:28:36:23:96:da: bd:65:44:b1:74:3d:6f:80:3e:d4:67:df:24:53:6c: 7c:fa:b9:54:e5:2b:3d:78:48:90:4d:e2:24:ed:32: b4:ea:6e:3e:10:3f:98:3e:0e:ae:17:a5:70:ee:bb: 25:7d:84:1f:af:a0:ee:33:91:56:a3:51:d9:20:e4: d9:55 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 3A:40:0B:3A:5D:53:E4:EA:38:25:ED:69:A5:83:47:8D:86:02:3E:84 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/AC49E14D3C04C0D8D252D00F4ED7F3B4B97DEC9FFD0080F34A6AE2EF360DEF29/0/3A400B3A5D53E4EA3825ED69A583478D86023E84.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.230.72.0/22 IPv6: 2803:2d20::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266701 Signature Algorithm: sha256WithRSAEncryption cc:97:cf:4f:9d:e2:e9:d1:9f:bd:7c:5f:68:ee:b2:7a:a7:e8: 3e:8b:bc:59:e6:ed:22:88:eb:ec:b5:68:10:04:e9:7e:19:f0: 89:77:3d:a3:0d:47:5d:61:1c:be:30:96:b8:92:4b:d4:0e:38: 00:73:92:19:4c:7f:98:b3:7a:94:47:c0:22:d6:39:83:18:a9: a1:fd:35:93:77:89:8a:a9:94:47:e5:df:8b:c2:f2:d4:c6:fa: 67:08:82:76:e1:f2:fb:5d:01:c3:33:ec:bc:09:76:07:7d:9b: 45:92:88:6f:dc:42:dc:cb:85:e6:5f:bb:70:35:a1:ad:9c:18: 24:9c:29:3d:2c:51:8d:a9:dd:6c:8f:5c:31:f2:66:44:d6:32: 4e:66:4c:fd:95:1f:77:ff:6f:d8:13:b9:3a:34:fc:d6:7b:b7: 21:88:bf:20:4d:a5:77:52:5f:17:78:74:2d:78:c3:8f:1d:25: b3:aa:55:52:9d:7a:5a:ac:d9:3c:05:b0:a7:a6:ea:e9:10:dc: 3b:73:35:10:41:6e:e2:f6:df:5f:7b:e2:f5:99:e1:2d:29:9a: 5e:8b:69:4a:9b:97:73:92:5b:90:1f:e0:2a:5f:47:1a:f1:e4: 23:94:60:84:27:b1:e4:fd:f8:ea:bd:13:40:20:af:90:22:72: 6d:30:ec:f5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIURtNaY7OqXjp5+20To9gORoJdF24wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAzMjIxMDU0NDVaFw0yNjAzMjExMDU5NDVaMDMxMTAvBgNV BAMTKDNBNDAwQjNBNUQ1M0U0RUEzODI1RUQ2OUE1ODM0NzhEODYwMjNFODQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCTFKdU/JklOyhSg2DfYCa98KXY Yhy5w40So/nAA7ZP/8O9bzBf/7urqbOdFeCULaHs/Nt/UgQ5j9y9WJK8Eo+NHPIj kFSyAPheZMNBkRf8bpYD4K5c3uisygZoKSa3klieg/m8rQVIH+CATe9dTYw57Wer Fe4wI4SRPl4rhgAyHRL28Bui5Lny6mImgT3M2prHgQOC8tZOSy/d7+RX9b6X328Q R+2rxgi8s1A5NFSdbbrHD3OGTtEVDXfeGKUoNiOW2r1lRLF0PW+APtRn3yRTbHz6 uVTlKz14SJBN4iTtMrTqbj4QP5g+Dq4XpXDuuyV9hB+voO4zkVajUdkg5NlVAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQ6QAs6XVPk6jgl 7Wmlg0eNhgI+hDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQUM0OUUxNEQzQzA0QzBEOEQyNTJEMDBG NEVEN0YzQjRCOTdERUM5RkZEMDA4MEYzNEE2QUUyRUYzNjBERUYyOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BQzQ5RTE0RDNDMDRDMEQ4RDI1MkQwMEY0RUQ3RjNCNEI5N0RFQzlGRkQw MDgwRjM0QTZBRTJFRjM2MERFRjI5LzAvM0E0MDBCM0E1RDUzRTRFQTM4MjVFRDY5 QTU4MzQ3OEQ4NjAyM0U4NC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeZIMA0EAgAC MAcDBQAoAy0gMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQRzTANBgkqhkiG9w0B AQsFAAOCAQEAzJfPT53i6dGfvXxfaO6yeqfoPou8WebtIojr7LVoEATpfhnwiXc9 ow1HXWEcvjCWuJJL1A44AHOSGUx/mLN6lEfAItY5gxipof01k3eJiqmUR+Xfi8Ly 1Mb6ZwiCduHy+10BwzPsvAl2B32bRZKIb9xC3MuF5l+7cDWhrZwYJJwpPSxRjand bI9cMfJmRNYyTmZM/ZUfd/9v2BO5OjT81nu3IYi/IE2ld1JfF3h0LXjDjx0ls6pV Up16WqzZPAWwp6bq6RDcO3M1EEFu4vbfX3vi9ZnhLSmaXotpSpuXc5JbkB/gKl9H GvHkI5RghCex5P346r0TQCCvkCJybTDs9Q== -----END CERTIFICATE-----Generated at Sat Apr 12 10:01:48 2025 by rpki-client