$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.cer File: 4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.cer (raw, json) Hash identifier: QLvnCTm2No3fKnnRwpKJ68KdaaZ4BOKzWqJb1674Ubg= Subject key identifier: 4E:62:43:32:9A:D8:C8:7B:DF:0F:CB:10:92:F7:B8:AA:F0:B1:A8:7D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2B82DA2474230781B7FF00CA46F974958A74E39B Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 08:59:22 +0000 Certificate not after: Wed 04 Feb 2026 09:04:22 +0000 Subordinate resources: AS: 263230 IP: 179.0.224.0/19 IP: 2803:f680::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2b:82:da:24:74:23:07:81:b7:ff:00:ca:46:f9:74:95:8a:74:e3:9b Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 08:59:22 2025 GMT Not After : Feb 4 09:04:22 2026 GMT Subject: CN=4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b8:f2:39:6c:e4:c3:92:f0:eb:51:f4:ae:10:3b: f3:e0:76:b2:9c:ec:69:b7:a8:c6:d6:f3:4c:00:dd: ba:91:21:32:32:08:19:03:e1:0e:fe:c6:52:30:9e: da:83:f2:03:ac:9b:b4:d3:53:a7:c3:51:5a:b8:e5: 35:24:8d:0c:56:2e:79:6a:40:2b:e2:ed:e3:7d:4a: 1f:26:ba:16:12:50:b7:9b:68:a3:80:14:a4:e1:30: 00:8b:47:7b:6c:19:5f:0b:72:b7:08:4a:63:48:0a: 7f:4b:6e:db:95:dd:67:f8:22:60:b6:53:8f:b5:32: 68:c3:93:b7:c7:30:3b:23:e9:68:08:68:eb:dd:8a: 1c:a0:57:01:02:9f:a7:2b:0a:5c:04:bb:15:1c:30: df:3c:c6:5f:34:f7:f5:9e:d9:02:c7:27:8b:7d:76: 70:fd:ce:75:66:c3:5d:26:93:c4:c5:13:3c:8a:ca: db:6b:4f:f1:e5:3a:ec:9f:ae:aa:3d:7c:1e:de:e5: 63:11:a0:34:06:b3:0b:9f:f2:7a:3f:40:7f:42:00: 9b:1d:d8:01:b7:7b:96:8c:5b:bb:60:a0:25:ab:eb: e4:3b:45:42:f9:e3:6d:e9:35:eb:ba:f8:03:2d:db: d5:78:48:e5:ed:5f:38:1e:88:d8:07:d1:97:c6:80: a6:97 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 4E:62:43:32:9A:D8:C8:7B:DF:0F:CB:10:92:F7:B8:AA:F0:B1:A8:7D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/FAA9796316E45217F61283050EF18555882BA1930EF28009725772056B84F74C/0/4E6243329AD8C87BDF0FCB1092F7B8AAF0B1A87D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 179.0.224.0/19 IPv6: 2803:f680::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263230 Signature Algorithm: sha256WithRSAEncryption 57:3a:05:b8:b1:bc:d0:8f:96:c1:aa:73:33:e8:f0:fa:08:68: f3:6f:da:ab:77:d2:da:e4:c9:3b:0c:ad:80:67:5e:a4:f9:bf: ee:45:c6:4b:8d:ae:a4:ec:4e:65:01:df:8d:1a:a4:ab:6b:ee: a7:60:13:23:a0:b3:7a:10:00:fe:c2:b9:65:59:1b:6f:98:f7: 83:e1:7b:f3:8b:27:fd:04:36:bc:48:fc:7d:9e:20:8e:47:be: 2f:8d:c9:72:5a:ce:5c:6e:60:c7:5c:5e:6d:d6:5c:0d:5b:45: 5d:eb:8e:fd:c7:e7:b6:67:24:3c:4e:ea:f2:3a:a4:45:88:fd: 26:7f:c6:ce:a5:61:a4:c6:e9:ad:49:c0:1f:be:af:e7:79:9f: cb:86:a3:72:d2:8f:b7:ba:2a:2d:19:b1:29:54:60:c3:71:a6: e9:44:68:d4:50:1b:37:94:14:19:3f:fd:08:7d:28:7b:15:6c: b8:8a:c5:d8:c5:2e:a5:ce:63:45:55:fa:9e:3e:4c:d7:bd:57: 0e:14:eb:ec:d1:a2:a4:d6:8e:c4:a9:d7:89:2f:af:27:86:ae: d1:d1:5f:99:b9:61:2d:98:4a:65:3e:65:2c:55:33:6b:06:97: 27:20:81:34:62:b6:bc:1e:fc:d5:92:fa:19:cf:48:1d:a6:39: 05:07:2b:80 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUK4LaJHQjB4G3/wDKRvl0lYp045swDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwODU5MjJaFw0yNjAyMDQwOTA0MjJaMDMxMTAvBgNV BAMTKDRFNjI0MzMyOUFEOEM4N0JERjBGQ0IxMDkyRjdCOEFBRjBCMUE4N0QwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC48jls5MOS8OtR9K4QO/PgdrKc 7Gm3qMbW80wA3bqRITIyCBkD4Q7+xlIwntqD8gOsm7TTU6fDUVq45TUkjQxWLnlq QCvi7eN9Sh8muhYSULebaKOAFKThMACLR3tsGV8LcrcISmNICn9LbtuV3Wf4ImC2 U4+1MmjDk7fHMDsj6WgIaOvdihygVwECn6crClwEuxUcMN88xl809/We2QLHJ4t9 dnD9znVmw10mk8TFEzyKyttrT/HlOuyfrqo9fB7e5WMRoDQGswuf8no/QH9CAJsd 2AG3e5aMW7tgoCWr6+Q7RUL5423pNeu6+AMt29V4SOXtXzgeiNgH0ZfGgKaXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBROYkMymtjIe98P yxCS97iq8LGofTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRkFBOTc5NjMxNkU0NTIxN0Y2MTI4MzA1 MEVGMTg1NTU4ODJCQTE5MzBFRjI4MDA5NzI1NzcyMDU2Qjg0Rjc0Qy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GQUE5Nzk2MzE2RTQ1MjE3RjYxMjgzMDUwRUYxODU1NTg4MkJBMTkzMEVG MjgwMDk3MjU3NzIwNTZCODRGNzRDLzAvNEU2MjQzMzI5QUQ4Qzg3QkRGMEZDQjEw OTJGN0I4QUFGMEIxQTg3RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQFswDgMA0EAgAC MAcDBQAoA/aAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQEPjANBgkqhkiG9w0B AQsFAAOCAQEAVzoFuLG80I+WwapzM+jw+gho82/aq3fS2uTJOwytgGdepPm/7kXG S42upOxOZQHfjRqkq2vup2ATI6CzehAA/sK5ZVkbb5j3g+F784sn/QQ2vEj8fZ4g jke+L43JclrOXG5gx1xebdZcDVtFXeuO/cfntmckPE7q8jqkRYj9Jn/GzqVhpMbp rUnAH76v53mfy4ajctKPt7oqLRmxKVRgw3Gm6URo1FAbN5QUGT/9CH0oexVsuIrF 2MUupc5jRVX6nj5M171XDhTr7NGipNaOxKnXiS+vJ4au0dFfmblhLZhKZT5lLFUz awaXJyCBNGK2vB781ZL6Gc9IHaY5BQcrgA== -----END CERTIFICATE-----Generated at Sun Feb 16 15:41:52 2025 by rpki-client