$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer File: 72B53BA6E0BEF80076D9A16F66DA927965BC5585.cer (raw, json) Hash identifier: TPfXl2ietQq8s+2ta8uAUj4GBH5kQxrnJaCcIFoVKpE= Subject key identifier: 72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3D19D64046D65C3DF473C12A85E9A72065D7A478 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 18 Dec 2024 14:50:01 +0000 Certificate not after: Wed 17 Dec 2025 14:55:01 +0000 Subordinate resources: AS: 273057 IP: 2803:4790::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 10 Feb 2025 03:47:42 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3d:19:d6:40:46:d6:5c:3d:f4:73:c1:2a:85:e9:a7:20:65:d7:a4:78 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Dec 18 14:50:01 2024 GMT Not After : Dec 17 14:55:01 2025 GMT Subject: CN=72B53BA6E0BEF80076D9A16F66DA927965BC5585 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a9:45:ea:dc:e9:bf:c5:8f:e5:89:2c:e6:95:77: 37:99:63:82:4a:81:27:6b:df:fa:96:59:5c:84:d3: d0:21:cb:9a:fc:cb:73:43:ed:ec:d6:d9:4f:48:10: 8a:56:f0:a7:63:1a:3c:51:65:d1:91:f1:f9:15:00: 1d:95:81:d1:7e:4a:56:45:97:18:b5:81:6e:40:fc: ab:c5:48:8a:6d:d0:f3:ef:10:db:53:a1:47:b7:31: 5b:20:8b:68:36:3a:8b:e1:2e:af:a3:1c:23:5a:8c: cc:d1:c2:9f:68:66:a1:c2:15:92:61:ca:7a:cd:78: 48:4f:88:eb:51:17:d9:e9:0a:63:c1:b0:9c:e3:70: fa:9b:ca:01:e8:60:e7:6d:21:ce:cb:c5:5d:e7:c1: 55:1f:45:f5:56:d6:ba:d2:9f:e1:a1:72:9b:98:e0: f4:fa:f0:7d:22:7c:f2:9a:60:46:11:e5:76:ba:88: 25:31:c9:dd:71:b2:a8:90:2f:47:bc:0e:ac:34:a7: 93:4d:be:93:f4:f0:5b:35:a2:e3:63:94:b0:5d:a8: 20:95:81:95:49:d2:9b:6d:fe:b8:71:0f:4e:cf:b9: d1:6b:cb:b2:0b:31:ad:5a:93:d8:ac:d9:1d:f0:81: 8e:0a:21:8d:6a:77:0c:2c:60:9d:b6:44:91:97:40: ea:05 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 72:B5:3B:A6:E0:BE:F8:00:76:D9:A1:6F:66:DA:92:79:65:BC:55:85 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5208EA4E8F019B8A55E7B5D3B5675FB5C0B070440DED2C5E9F74CB49F979D48F/0/72B53BA6E0BEF80076D9A16F66DA927965BC5585.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:4790::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273057 Signature Algorithm: sha256WithRSAEncryption 82:fd:b2:f4:18:75:40:0f:e3:39:74:66:2e:9f:9f:b1:d7:8e: e8:a0:27:f7:38:84:a4:cf:5d:1a:9c:11:8a:36:6c:be:bb:95: d6:96:be:30:be:fe:a2:09:1c:e2:8b:2a:c2:a2:d9:e3:f7:2f: 1a:6d:01:b6:27:92:fc:71:4d:4c:11:dc:e4:ab:91:5a:99:c4: e4:f7:4e:bb:0e:2c:28:ab:97:07:8f:21:07:6c:81:84:fb:ef: 34:5a:c5:a3:24:bb:e1:f0:a3:39:15:fc:d2:e7:8b:42:19:f9: 4a:97:d8:a5:71:f6:1f:f9:e3:b8:53:81:b9:7f:32:d0:ee:df: b9:24:7d:98:b0:78:5b:83:10:75:ea:af:93:19:91:b8:13:98: 12:48:4e:f6:55:a0:41:cb:a8:97:2b:3b:e6:20:36:24:ed:64: f4:f6:33:39:a4:05:16:30:ab:6b:53:a1:75:67:72:f9:71:5f: a8:94:d9:70:29:64:2d:dc:c5:b9:7f:d9:97:0c:55:01:de:9b: c1:bc:4f:cd:8e:17:2a:fe:ca:f5:59:3b:6c:9d:62:3a:de:e9: 64:f4:be:91:84:a7:1f:f7:06:5a:cd:53:f9:d3:a4:45:49:eb: 71:ca:d1:b9:5c:da:2c:15:63:28:7c:78:80:14:e7:d5:f7:02: b9:91:1a:f6 -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUPRnWQEbWXD30c8EqhemnIGXXpHgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDEyMTgxNDUwMDFaFw0yNTEyMTcxNDU1MDFaMDMxMTAvBgNV BAMTKDcyQjUzQkE2RTBCRUY4MDA3NkQ5QTE2RjY2REE5Mjc5NjVCQzU1ODUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCpRerc6b/Fj+WJLOaVdzeZY4JK gSdr3/qWWVyE09Ahy5r8y3ND7ezW2U9IEIpW8KdjGjxRZdGR8fkVAB2VgdF+SlZF lxi1gW5A/KvFSIpt0PPvENtToUe3MVsgi2g2OovhLq+jHCNajMzRwp9oZqHCFZJh ynrNeEhPiOtRF9npCmPBsJzjcPqbygHoYOdtIc7LxV3nwVUfRfVW1rrSn+GhcpuY 4PT68H0ifPKaYEYR5Xa6iCUxyd1xsqiQL0e8Dqw0p5NNvpP08Fs1ouNjlLBdqCCV gZVJ0ptt/rhxD07PudFry7ILMa1ak9is2R3wgY4KIY1qdwwsYJ22RJGXQOoFAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRytTum4L74AHbZ oW9m2pJ5ZbxVhTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTIwOEVBNEU4RjAxOUI4QTU1RTdCNUQz QjU2NzVGQjVDMEIwNzA0NDBERUQyQzVFOUY3NENCNDlGOTc5RDQ4Ri8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy81MjA4RUE0RThGMDE5QjhBNTVFN0I1RDNCNTY3NUZCNUMwQjA3MDQ0MERF RDJDNUU5Rjc0Q0I0OUY5NzlENDhGLzAvNzJCNTNCQTZFMEJFRjgwMDc2RDlBMTZG NjZEQTkyNzk2NUJDNTU4NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKANHkDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKqEwDQYJKoZIhvcNAQELBQADggEBAIL9svQY dUAP4zl0Zi6fn7HXjuigJ/c4hKTPXRqcEYo2bL67ldaWvjC+/qIJHOKLKsKi2eP3 LxptAbYnkvxxTUwR3OSrkVqZxOT3TrsOLCirlwePIQdsgYT77zRaxaMku+HwozkV /NLni0IZ+UqX2KVx9h/547hTgbl/MtDu37kkfZiweFuDEHXqr5MZkbgTmBJITvZV oEHLqJcrO+YgNiTtZPT2MzmkBRYwq2tToXVncvlxX6iU2XApZC3cxbl/2ZcMVQHe m8G8T82OFyr+yvVZO2ydYjre6WT0vpGEpx/3BlrNU/nTpEVJ63HK0blc2iwVYyh8 eIAU59X3ArmRGvY= -----END CERTIFICATE-----Generated at Wed Feb 5 10:53:38 2025 by rpki-client