$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.cer File: A792140672C8F8E1F00F7A465B0394E9D2AAEC27.cer (raw, json) Hash identifier: Zf3TDD+aiYyHt5WUjW0rK/YteDcb2Ux9oPmYYW8wx2s= Subject key identifier: A7:92:14:06:72:C8:F8:E1:F0:0F:7A:46:5B:03:94:E9:D2:AA:EC:27 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4F9A0BFF64112488ACD1CD7A80B71599A6DC2142 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 04 Feb 2025 22:56:47 +0000 Certificate not after: Tue 03 Feb 2026 23:01:47 +0000 Subordinate resources: AS: 52401 IP: 200.124.184.0/22 IP: 2803:de00::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9a:0b:ff:64:11:24:88:ac:d1:cd:7a:80:b7:15:99:a6:dc:21:42 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 4 22:56:47 2025 GMT Not After : Feb 3 23:01:47 2026 GMT Subject: CN=A792140672C8F8E1F00F7A465B0394E9D2AAEC27 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b4:85:dd:07:93:a9:7a:c8:46:5b:9d:f0:5d:b0: 30:4e:92:d0:c3:dd:27:f5:b4:a7:84:9c:69:7e:9a: 78:7d:5e:e9:8e:07:01:77:fb:cd:e6:40:57:21:6d: f9:de:b0:43:8f:a2:82:16:26:bb:f3:1b:59:92:72: 0d:4b:87:d4:d4:4d:d2:5f:6d:fc:9d:e6:bd:bf:42: e3:ed:43:e9:dc:51:ad:0b:60:ef:6b:7f:7d:61:6a: ba:2f:45:21:96:96:d2:54:71:65:03:07:16:4b:2b: 0e:67:4d:48:e2:7e:f7:e9:0b:fb:39:ff:c3:8f:9e: 91:36:44:1b:77:e7:18:22:fc:98:31:3d:0d:37:06: 25:a0:ac:6c:e9:c8:d8:cd:e1:d7:5a:5e:ff:26:26: 5e:6b:a7:5f:bb:20:7d:f4:6b:88:f6:9e:5d:88:c1: af:ff:83:d5:3d:ef:67:21:17:d5:94:75:77:33:45: f5:d3:e5:05:4d:0b:df:ff:df:61:3e:1e:16:56:ae: 84:ee:c0:dc:3f:9e:2f:36:b9:0f:9b:24:d0:50:d5: 9b:59:b2:92:a5:08:ce:a7:83:97:21:9d:1f:5c:6f: 12:aa:81:90:10:74:83:a0:60:e3:da:0e:7e:82:02: 72:75:5d:df:8a:b9:d2:9b:6d:53:11:29:bf:a4:d6: 59:77 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A7:92:14:06:72:C8:F8:E1:F0:0F:7A:46:5B:03:94:E9:D2:AA:EC:27 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/DBC201383134FF199AC1CDCA1472718F8775AF18BE7D5CAD3BB147F006C7C901/0/A792140672C8F8E1F00F7A465B0394E9D2AAEC27.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 200.124.184.0/22 IPv6: 2803:de00::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52401 Signature Algorithm: sha256WithRSAEncryption 25:6a:94:1d:4e:7c:87:aa:04:0c:57:96:07:ff:24:ec:e5:ee: 4a:0c:3a:24:e6:62:a0:f7:6e:e5:ea:b9:3c:1f:e3:30:3d:94: d8:57:3b:c1:db:95:25:0f:42:a0:1c:48:11:09:ef:0f:31:48: 1a:05:a2:2f:ed:4d:9c:e5:47:c9:18:02:1c:62:2a:e7:cf:b7: d7:0a:7c:e2:31:be:f6:52:2e:b0:79:70:98:d6:5a:db:63:b2: ee:20:87:e8:a8:74:80:3a:9c:a1:43:22:8b:c6:e5:1b:c5:8a: 4b:5c:a0:45:15:5a:23:e7:90:8d:11:2b:16:8f:42:3f:05:13: 00:cf:77:87:90:68:69:5f:d8:7f:8d:e7:68:43:63:ac:45:b5: a3:05:09:2b:cc:9b:4b:a8:e8:8e:9f:a7:55:12:c8:2b:79:ff: 67:f3:89:bb:50:1e:1c:64:da:d7:e6:7f:ab:56:6e:55:1b:1d: cf:39:fe:13:49:03:f9:c7:8b:d1:b9:b4:b3:d6:2c:04:93:e6: b3:37:c8:87:2c:3a:18:74:d2:83:ad:4c:74:78:80:4a:77:19: 93:42:8f:42:97:2d:fa:86:09:cc:39:8b:36:ce:7d:6c:94:dc: f4:97:9f:e0:5e:33:31:3d:bd:d8:ea:b0:f1:4b:8e:07:65:ca: c9:ef:c6:ff -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUT5oL/2QRJIis0c16gLcVmabcIUIwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDQyMjU2NDdaFw0yNjAyMDMyMzAxNDdaMDMxMTAvBgNV BAMTKEE3OTIxNDA2NzJDOEY4RTFGMDBGN0E0NjVCMDM5NEU5RDJBQUVDMjcwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC0hd0Hk6l6yEZbnfBdsDBOktDD 3Sf1tKeEnGl+mnh9XumOBwF3+83mQFchbfnesEOPooIWJrvzG1mScg1Lh9TUTdJf bfyd5r2/QuPtQ+ncUa0LYO9rf31harovRSGWltJUcWUDBxZLKw5nTUjifvfpC/s5 /8OPnpE2RBt35xgi/JgxPQ03BiWgrGzpyNjN4ddaXv8mJl5rp1+7IH30a4j2nl2I wa//g9U972chF9WUdXczRfXT5QVNC9//32E+HhZWroTuwNw/ni82uQ+bJNBQ1ZtZ spKlCM6ng5chnR9cbxKqgZAQdIOgYOPaDn6CAnJ1Xd+KudKbbVMRKb+k1ll3AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSnkhQGcsj44fAP ekZbA5Tp0qrsJzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvREJDMjAxMzgzMTM0RkYxOTlBQzFDRENB MTQ3MjcxOEY4Nzc1QUYxOEJFN0Q1Q0FEM0JCMTQ3RjAwNkM3QzkwMS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9EQkMyMDEzODMxMzRGRjE5OUFDMUNEQ0ExNDcyNzE4Rjg3NzVBRjE4QkU3 RDVDQUQzQkIxNDdGMDA2QzdDOTAxLzAvQTc5MjE0MDY3MkM4RjhFMUYwMEY3QTQ2 NUIwMzk0RTlEMkFBRUMyNy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCyHy4MA0EAgAC MAcDBQAoA94AMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDMsTANBgkqhkiG9w0B AQsFAAOCAQEAJWqUHU58h6oEDFeWB/8k7OXuSgw6JOZioPdu5eq5PB/jMD2U2Fc7 wduVJQ9CoBxIEQnvDzFIGgWiL+1NnOVHyRgCHGIq58+31wp84jG+9lIusHlwmNZa 22Oy7iCH6Kh0gDqcoUMii8blG8WKS1ygRRVaI+eQjRErFo9CPwUTAM93h5BoaV/Y f43naENjrEW1owUJK8ybS6jojp+nVRLIK3n/Z/OJu1AeHGTa1+Z/q1ZuVRsdzzn+ E0kD+ceL0bm0s9YsBJPmszfIhyw6GHTSg61MdHiASncZk0KPQpct+oYJzDmLNs59 bJTc9Jef4F4zMT292Oqw8UuOB2XKye/G/w== -----END CERTIFICATE-----Generated at Sat Apr 12 09:57:11 2025 by rpki-client