$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer File: 662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.cer (raw, json) Hash identifier: hBcH8bAkseB3NWHjc8bn+mXloBSMCjZIdL9NukbyBj0= Subject key identifier: 66:2E:97:B5:B5:9D:F4:CF:DB:82:E5:FB:DA:D8:F3:EA:93:B2:C0:7B Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7B699A590DE2A73BA01FC2DE248C4FDF9491858E Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 23:51:12 +0000 Certificate not after: Tue 03 Feb 2026 23:56:12 +0000 Subordinate resources: AS: 266831 IP: 45.238.36.0/22 IP: 2803:ca0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7b:69:9a:59:0d:e2:a7:3b:a0:1f:c2:de:24:8c:4f:df:94:91:85:8e Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 23:51:12 2025 GMT Not After : Feb 3 23:56:12 2026 GMT Subject: CN=662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9e:42:16:52:c7:31:ad:a5:33:9c:82:9d:b3:12: 91:36:95:e9:53:6d:9f:85:8c:50:c9:91:a9:85:59: a2:57:cb:15:7e:95:d4:cc:43:58:ea:65:ef:38:3f: f6:ac:45:dd:80:bc:b6:4e:82:06:0c:94:9a:0f:b8: bb:5e:46:4a:80:c8:12:01:de:3f:65:e1:e9:d6:de: ac:47:da:7d:a7:f8:82:5e:b1:8f:7e:7d:6e:62:fc: 86:2a:ef:ba:31:ac:60:f6:15:0b:b0:b9:dd:91:47: 73:d5:c8:9b:62:e3:84:62:91:8c:47:e0:38:bd:18: bf:1e:ec:a0:e0:11:31:0c:22:f0:c3:c1:3a:9b:3d: 9c:fd:ee:38:4a:ad:5d:df:8a:83:1e:9b:d7:3e:a0: de:7a:ff:e6:74:5b:24:9c:ba:ff:86:63:eb:ec:1b: 80:b7:7e:3c:d0:f7:b1:8d:53:f9:c9:a4:ca:35:d2: d8:a0:ac:a8:57:74:63:03:78:16:4e:3b:29:29:e4: da:40:95:e9:47:18:0d:2e:ac:16:b9:e5:99:83:28: f8:9d:50:59:c1:a7:bd:e0:9e:f8:ed:49:5e:31:8d: 3f:39:93:47:eb:70:de:fc:66:ea:29:4e:03:44:fc: f1:01:22:36:a1:16:27:e7:11:d7:2e:bc:dd:fa:aa: be:a5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:2E:97:B5:B5:9D:F4:CF:DB:82:E5:FB:DA:D8:F3:EA:93:B2:C0:7B X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/26C57CA1C217289E60B0A1DCE9FE2CCAA07ECD64B705BF2DC7353D5DCB22E41D/0/662E97B5B59DF4CFDB82E5FBDAD8F3EA93B2C07B.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.238.36.0/22 IPv6: 2803:ca0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266831 Signature Algorithm: sha256WithRSAEncryption 9b:74:0b:af:99:7e:4b:21:6f:21:ce:94:90:96:1c:f1:31:16: a1:6c:cd:4f:a4:8e:c5:82:9e:98:5a:8c:3d:6a:7e:59:a9:e1: 47:58:06:4d:84:84:bf:fe:4d:e8:ab:43:33:5c:64:f4:75:9f: d3:77:c5:af:58:ff:cf:90:46:e2:f9:4e:64:d6:ce:8c:ce:16: cf:45:c0:85:22:7a:a7:e4:e6:d9:0b:55:49:55:a1:e2:6f:52: 91:5c:24:fd:f7:88:ee:34:45:70:a3:69:5a:01:07:09:97:2c: c6:73:90:f1:47:a6:43:da:42:e1:55:90:42:a6:f7:5b:3a:e9: 88:6d:dc:f6:52:cf:81:8c:a5:bd:ce:7f:68:9b:36:86:2d:3c: 17:e3:6b:b1:e1:8a:17:ef:c0:71:39:f6:26:8e:9c:b7:b5:6d: 52:95:f5:d2:2e:de:47:00:22:b6:54:43:60:48:09:45:f7:3b: 18:ee:1f:06:20:8e:95:7f:d1:50:c0:78:9a:b1:f9:4c:45:70: 7d:53:7c:41:fe:9f:f4:8e:81:cd:17:2b:8d:57:64:1c:a7:2f: 8e:26:e5:fe:a8:56:d6:12:64:96:24:1d:81:ee:f7:61:66:0d: e7:59:63:f9:e0:33:89:34:d8:2b:64:b8:e5:15:dd:ba:f2:a1: 4e:bd:e7:d0 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUe2maWQ3ipzugH8LeJIxP35SRhY4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMzUxMTJaFw0yNjAyMDMyMzU2MTJaMDMxMTAvBgNV BAMTKDY2MkU5N0I1QjU5REY0Q0ZEQjgyRTVGQkRBRDhGM0VBOTNCMkMwN0IwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCeQhZSxzGtpTOcgp2zEpE2lelT bZ+FjFDJkamFWaJXyxV+ldTMQ1jqZe84P/asRd2AvLZOggYMlJoPuLteRkqAyBIB 3j9l4enW3qxH2n2n+IJesY9+fW5i/IYq77oxrGD2FQuwud2RR3PVyJti44RikYxH 4Di9GL8e7KDgETEMIvDDwTqbPZz97jhKrV3fioMem9c+oN56/+Z0WyScuv+GY+vs G4C3fjzQ97GNU/nJpMo10tigrKhXdGMDeBZOOykp5NpAlelHGA0urBa55ZmDKPid UFnBp73gnvjtSV4xjT85k0frcN78ZuopTgNE/PEBIjahFifnEdcuvN36qr6lAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmLpe1tZ30z9uC 5fva2PPqk7LAezAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjZDNTdDQTFDMjE3Mjg5RTYwQjBBMURD RTlGRTJDQ0FBMDdFQ0Q2NEI3MDVCRjJEQzczNTNENURDQjIyRTQxRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yNkM1N0NBMUMyMTcyODlFNjBCMEExRENFOUZFMkNDQUEwN0VDRDY0Qjcw NUJGMkRDNzM1M0Q1RENCMjJFNDFELzAvNjYyRTk3QjVCNTlERjRDRkRCODJFNUZC REFEOEYzRUE5M0IyQzA3Qi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLe4kMA0EAgAC MAcDBQAoAwygMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSTzANBgkqhkiG9w0B AQsFAAOCAQEAm3QLr5l+SyFvIc6UkJYc8TEWoWzNT6SOxYKemFqMPWp+WanhR1gG TYSEv/5N6KtDM1xk9HWf03fFr1j/z5BG4vlOZNbOjM4Wz0XAhSJ6p+Tm2QtVSVWh 4m9SkVwk/feI7jRFcKNpWgEHCZcsxnOQ8UemQ9pC4VWQQqb3WzrpiG3c9lLPgYyl vc5/aJs2hi08F+NrseGKF+/AcTn2Jo6ct7VtUpX10i7eRwAitlRDYEgJRfc7GO4f BiCOlX/RUMB4mrH5TEVwfVN8Qf6f9I6BzRcrjVdkHKcvjibl/qhW1hJkliQdge73 YWYN51lj+eAziTTYK2S45RXduvKhTr3n0A== -----END CERTIFICATE-----Generated at Mon Apr 7 01:55:33 2025 by rpki-client