$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer File: 834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.cer (raw, json) Hash identifier: J5PM0oy6sdBrugGrgeTFiouiQ7q3DkvonOFjMIi86dg= Subject key identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5830B96CD6284882BC2841E7C44344ED0D2344EE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 17 Jan 2025 04:10:01 +0000 Certificate not after: Fri 16 Jan 2026 04:15:01 +0000 Subordinate resources: AS: 28399 IP: 200.33.20.0/24 IP: 201.131.20.0/22 IP: 2806:2e0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 58:30:b9:6c:d6:28:48:82:bc:28:41:e7:c4:43:44:ed:0d:23:44:ee Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jan 17 04:10:01 2025 GMT Not After : Jan 16 04:15:01 2026 GMT Subject: CN=834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:8c:48:a8:4b:1b:1d:3f:7c:ce:45:c0:8c:ba:cb: b6:6c:f4:ba:c2:80:a9:9f:c7:b9:7d:e0:e8:bc:73: 4e:81:4c:66:c6:4f:bb:59:0d:6b:22:3f:18:7f:67: 53:62:e7:6e:15:a4:02:d6:29:a1:25:6e:bf:1a:dd: 29:0b:c7:ed:52:70:51:db:fe:44:39:81:72:52:a6: 9c:a5:bd:82:ca:42:f3:ab:2c:b6:39:dd:7e:74:6e: ac:4e:04:9a:19:5c:43:c5:b6:d9:63:8a:e4:95:cf: ac:4e:d5:a4:85:a8:f0:32:2a:03:35:44:f0:2f:69: 61:e8:dd:02:a9:5b:61:bf:2e:76:62:c0:95:fd:14: 2f:fa:e5:38:ea:93:d6:05:bc:19:56:1c:cf:06:34: a4:25:3b:b0:c7:94:b5:8e:e9:b7:7c:e5:86:41:a0: e5:b1:96:d5:ac:6e:4c:10:e6:c8:ff:e1:8d:a9:d4: 49:92:54:92:5a:e3:93:4b:f6:cb:41:3d:8d:19:e7: b9:03:42:79:76:ad:b6:3a:04:25:29:44:0b:40:0e: 22:81:df:2e:b1:6b:6b:c0:5a:7f:af:4e:92:f7:a8: 04:41:6f:82:43:2e:69:14:2f:5e:9c:95:f2:23:c1: d8:14:e9:51:c9:85:b3:4f:6a:62:cd:7f:5e:d3:09: d8:2d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 83:4E:4A:3D:5B:36:F5:03:CC:79:93:D9:D1:53:DA:A9:9A:7A:9D:AC X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DC75DB0A2F51172106FA1CE7765FCBA9E6DAE6D90A8F11B5F9A698476680E277/0/834E4A3D5B36F503CC7993D9D153DAA99A7A9DAC.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.33.20.0/24 201.131.20.0/22 IPv6: 2806:2e0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28399 Signature Algorithm: sha256WithRSAEncryption 76:ae:f7:19:36:2c:37:2f:8d:31:13:f9:ce:ec:a1:ea:a4:aa: bf:ab:d9:f3:b9:e8:7c:c3:52:c4:cf:97:7e:a9:fd:68:29:47: 93:00:64:38:60:52:31:fb:2f:6c:f9:ef:89:22:d9:83:53:cc: c2:a5:58:fb:06:c9:c2:83:91:d4:3f:07:1b:fa:e6:5b:b9:6a: 7c:fd:32:4e:48:5c:81:be:37:fd:fb:4c:e7:a2:c2:b0:f9:e2: b4:21:44:39:c2:3a:ef:1c:7b:cf:8d:c9:4e:5b:e9:c4:ff:54: b3:0d:91:a1:1f:07:3a:0b:c8:51:2e:ab:ab:db:fe:2f:5a:cc: 33:2a:22:c4:d2:d7:8c:f8:c2:00:bd:fc:c3:a6:c5:19:76:21: 82:01:4b:60:ae:62:41:01:c1:0a:f1:76:af:6d:96:a3:4f:b1: 93:f8:e3:24:dd:23:4a:07:43:b4:06:6d:10:8a:fa:11:33:9c: 74:fe:61:e0:a7:d6:b5:cc:07:20:3c:21:11:11:81:37:9e:12: 50:30:8f:3a:70:3c:cf:31:af:fc:da:a1:33:bd:13:a7:ca:29: 3b:5a:67:d7:8a:59:3b:bd:74:30:ce:6e:66:18:f7:52:47:53: 73:3f:87:3b:06:0d:24:2c:1b:d2:f5:3d:dd:40:fe:ed:98:64: a8:ee:41:f1 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIUWDC5bNYoSIK8KEHnxENE7Q0jRO4wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAxMTcwNDEwMDFaFw0yNjAxMTYwNDE1MDFaMDMxMTAvBgNV BAMTKDgzNEU0QTNENUIzNkY1MDNDQzc5OTNEOUQxNTNEQUE5OUE3QTlEQUMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCMSKhLGx0/fM5FwIy6y7Zs9LrC gKmfx7l94Oi8c06BTGbGT7tZDWsiPxh/Z1Ni524VpALWKaElbr8a3SkLx+1ScFHb /kQ5gXJSppylvYLKQvOrLLY53X50bqxOBJoZXEPFttljiuSVz6xO1aSFqPAyKgM1 RPAvaWHo3QKpW2G/LnZiwJX9FC/65Tjqk9YFvBlWHM8GNKQlO7DHlLWO6bd85YZB oOWxltWsbkwQ5sj/4Y2p1EmSVJJa45NL9stBPY0Z57kDQnl2rbY6BCUpRAtADiKB 3y6xa2vAWn+vTpL3qARBb4JDLmkUL16clfIjwdgU6VHJhbNPamLNf17TCdgtAgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSDTko9Wzb1A8x5 k9nRU9qpmnqdrDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREM3NURCMEEyRjUxMTcyMTA2RkExQ0U3 NzY1RkNCQTlFNkRBRTZEOTBBOEYxMUI1RjlBNjk4NDc2NjgwRTI3Ny8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQzc1REIwQTJGNTExNzIxMDZGQTFDRTc3NjVGQ0JBOUU2REFFNkQ5MEE4 RjExQjVGOUE2OTg0NzY2ODBFMjc3LzAvODM0RTRBM0Q1QjM2RjUwM0NDNzk5M0Q5 RDE1M0RBQTk5QTdBOURBQy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQAyCEUAwQCyYMU MA0EAgACMAcDBQAoBgLgMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm7vMA0GCSqG SIb3DQEBCwUAA4IBAQB2rvcZNiw3L40xE/nO7KHqpKq/q9nzueh8w1LEz5d+qf1o KUeTAGQ4YFIx+y9s+e+JItmDU8zCpVj7BsnCg5HUPwcb+uZbuWp8/TJOSFyBvjf9 +0znosKw+eK0IUQ5wjrvHHvPjclOW+nE/1SzDZGhHwc6C8hRLqur2/4vWswzKiLE 0teM+MIAvfzDpsUZdiGCAUtgrmJBAcEK8XavbZajT7GT+OMk3SNKB0O0Bm0QivoR M5x0/mHgp9a1zAcgPCEREYE3nhJQMI86cDzPMa/82qEzvROnyik7WmfXilk7vXQw zm5mGPdSR1NzP4c7Bg0kLBvS9T3dQP7tmGSo7kHx -----END CERTIFICATE-----Generated at Sat Apr 5 23:57:10 2025 by rpki-client