$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer File: 669067DB1387B4BF8A246E94B03A0308DCCF3C6D.cer (raw, json) Hash identifier: eQBS3qE2tKiDebBIppOdIepBGU9fIyDLb0EJMdvcd7E= Subject key identifier: 66:90:67:DB:13:87:B4:BF:8A:24:6E:94:B0:3A:03:08:DC:CF:3C:6D Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4EE1B62D11EB1894731AFAEFD9BD313D4883AB37 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 23:44:16 +0000 Certificate not after: Wed 04 Feb 2026 23:49:16 +0000 Subordinate resources: AS: 266756 IP: 45.233.92.0/22 IP: 2803:c720::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4e:e1:b6:2d:11:eb:18:94:73:1a:fa:ef:d9:bd:31:3d:48:83:ab:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 23:44:16 2025 GMT Not After : Feb 4 23:49:16 2026 GMT Subject: CN=669067DB1387B4BF8A246E94B03A0308DCCF3C6D Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:db:90:05:da:3c:a0:fb:f6:45:92:97:4f:5b: fe:ff:6a:62:3d:27:96:0b:e4:85:98:e7:2e:fc:82: 6e:29:99:fa:ac:f5:bb:05:28:f1:37:78:b5:42:7c: 7c:df:39:b2:e0:5a:e9:c3:aa:bd:c5:98:55:8f:c6: 6e:f5:25:6e:aa:55:9e:0c:b4:90:57:6f:a9:05:4f: 8d:9b:5d:45:56:17:65:11:eb:b5:13:eb:18:42:1a: ce:94:8c:98:35:95:62:03:4a:dc:8a:28:e4:d1:7d: fc:62:16:89:18:99:f4:dd:8e:69:a7:df:de:c0:2a: 92:60:11:c1:5f:b1:64:ae:99:67:80:6e:69:02:05: 79:9f:af:43:9b:8f:ba:68:83:24:75:c5:40:23:13: 8d:e0:23:76:04:dd:22:f3:d6:db:4e:7e:38:4a:30: 6a:cb:b6:96:31:a0:5b:e8:7c:60:ed:08:ab:05:49: 73:84:55:7b:be:6b:5d:1e:d3:4e:63:4f:20:16:c7: c1:5d:15:e6:b7:80:5a:b4:aa:da:37:80:be:57:3e: 47:32:45:1e:10:b3:74:96:98:3b:51:25:9e:aa:76: 2e:19:76:a2:31:e0:aa:e6:92:42:4f:45:7b:ab:f6: 1a:8d:e3:09:b2:42:38:97:4d:82:bb:fa:75:63:95: 23:6d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 66:90:67:DB:13:87:B4:BF:8A:24:6E:94:B0:3A:03:08:DC:CF:3C:6D X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/C807CF0B4CE6F86AFE2E2BCC4558592073A054D8004756AD53D69E594095D57B/0/669067DB1387B4BF8A246E94B03A0308DCCF3C6D.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.233.92.0/22 IPv6: 2803:c720::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266756 Signature Algorithm: sha256WithRSAEncryption 5c:2e:64:4d:06:08:e7:32:56:6b:f6:d3:5b:b1:c9:4e:3d:66: fe:80:26:c6:6b:68:6b:e3:b2:14:d0:cd:23:b1:6d:85:bd:e2: 4a:15:01:0d:b6:a1:a0:5a:23:77:d2:ba:d7:f0:0a:f0:d4:94: 8e:19:97:f4:24:fb:09:25:ab:9a:ac:0e:55:9d:89:0a:3a:e2: 29:1b:d4:8d:9f:c0:b4:af:48:4b:f5:9a:30:24:a9:4d:f9:d8: 54:37:b9:c4:0b:c7:0a:82:1e:66:96:99:fc:0f:37:73:36:bc: 97:ed:9e:fa:19:ec:b6:c4:01:36:f1:e0:d1:89:8a:21:67:4e: c1:98:c6:7a:fe:c9:f0:82:d1:97:c2:a2:f8:57:66:4f:16:0c: a2:30:1a:21:2d:e8:93:67:67:72:b8:0b:96:e5:0b:76:d5:27: 60:c8:3b:e2:7b:ea:92:47:17:62:5e:74:27:67:69:39:de:66: dc:0f:25:c7:c5:99:0a:3f:ae:70:1e:c9:5f:9f:97:c6:7e:ae: e5:d1:f4:86:c7:3d:b9:4a:1d:76:b9:9b:ed:05:df:b5:e8:50: f9:26:b0:cb:d3:6c:c5:c4:0f:00:a1:c7:17:87:8a:bf:da:c2: 34:2a:7e:67:3e:b3:3a:ba:7d:94:25:ac:f6:39:07:f9:18:ee: 7a:de:2f:f5 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUTuG2LRHrGJRzGvrv2b0xPUiDqzcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUyMzQ0MTZaFw0yNjAyMDQyMzQ5MTZaMDMxMTAvBgNV BAMTKDY2OTA2N0RCMTM4N0I0QkY4QTI0NkU5NEIwM0EwMzA4RENDRjNDNkQwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC525AF2jyg+/ZFkpdPW/7/amI9 J5YL5IWY5y78gm4pmfqs9bsFKPE3eLVCfHzfObLgWunDqr3FmFWPxm71JW6qVZ4M tJBXb6kFT42bXUVWF2UR67UT6xhCGs6UjJg1lWIDStyKKOTRffxiFokYmfTdjmmn 397AKpJgEcFfsWSumWeAbmkCBXmfr0Obj7pogyR1xUAjE43gI3YE3SLz1ttOfjhK MGrLtpYxoFvofGDtCKsFSXOEVXu+a10e005jTyAWx8FdFea3gFq0qto3gL5XPkcy RR4Qs3SWmDtRJZ6qdi4ZdqIx4KrmkkJPRXur9hqN4wmyQjiXTYK7+nVjlSNtAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRmkGfbE4e0v4ok bpSwOgMI3M88bTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQzgwN0NGMEI0Q0U2Rjg2QUZFMkUyQkND NDU1ODU5MjA3M0EwNTREODAwNDc1NkFENTNENjlFNTk0MDk1RDU3Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DODA3Q0YwQjRDRTZGODZBRkUyRTJCQ0M0NTU4NTkyMDczQTA1NEQ4MDA0 NzU2QUQ1M0Q2OUU1OTQwOTVENTdCLzAvNjY5MDY3REIxMzg3QjRCRjhBMjQ2RTk0 QjAzQTAzMDhEQ0NGM0M2RC5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLelcMA0EAgAC MAcDBQAoA8cgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSBDANBgkqhkiG9w0B AQsFAAOCAQEAXC5kTQYI5zJWa/bTW7HJTj1m/oAmxmtoa+OyFNDNI7Fthb3iShUB DbahoFojd9K61/AK8NSUjhmX9CT7CSWrmqwOVZ2JCjriKRvUjZ/AtK9IS/WaMCSp TfnYVDe5xAvHCoIeZpaZ/A83cza8l+2e+hnstsQBNvHg0YmKIWdOwZjGev7J8ILR l8Ki+FdmTxYMojAaIS3ok2dncrgLluULdtUnYMg74nvqkkcXYl50J2dpOd5m3A8l x8WZCj+ucB7JX5+Xxn6u5dH0hsc9uUoddrmb7QXftehQ+Sawy9NsxcQPAKHHF4eK v9rCNCp+Zz6zOrp9lCWs9jkH+Rjuet4v9Q== -----END CERTIFICATE-----Generated at Sun Apr 6 19:59:28 2025 by rpki-client