$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer File: B073DE428A660B4914AC48ECC20D3E70EE2C2B92.cer (raw, json) Hash identifier: /0NOavXALBvOK73atWL4LKuzUGdsoeulNVj7+UD97l8= Subject key identifier: B0:73:DE:42:8A:66:0B:49:14:AC:48:EC:C2:0D:3E:70:EE:2C:2B:92 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 4F9B12D0951AFC0DDE9DC33DD555E6C65633DBE4 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 11:59:40 +0000 Certificate not after: Wed 04 Feb 2026 12:04:40 +0000 Subordinate resources: AS: 265610 IP: 45.189.156.0/22 IP: 2806:367::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 4f:9b:12:d0:95:1a:fc:0d:de:9d:c3:3d:d5:55:e6:c6:56:33:db:e4 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 11:59:40 2025 GMT Not After : Feb 4 12:04:40 2026 GMT Subject: CN=B073DE428A660B4914AC48ECC20D3E70EE2C2B92 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cc:a8:96:e4:80:01:83:83:57:e2:fa:b5:a3:b8: ae:20:c4:e6:25:a2:2e:4b:c9:b2:7e:e3:cb:b6:e5: 88:d7:8d:06:5c:29:fb:36:36:f6:e6:f4:e3:3e:ba: b9:a2:7e:5e:66:a4:99:71:f9:96:71:79:1d:70:e0: 63:5a:0c:4b:34:b4:86:8e:44:f6:e7:27:d1:1d:16: e9:35:65:0e:fa:64:26:99:47:f7:a2:92:0f:61:a2: c1:b6:c1:16:1d:cd:43:54:e6:9d:b0:a1:e6:47:74: 3e:7a:82:5f:0b:f1:62:d1:e6:be:29:f3:a6:98:f5: aa:8d:ba:40:84:73:8b:79:8e:c4:f5:2d:a8:a0:91: 86:94:60:b8:fd:ab:a9:d7:0a:6f:e2:96:47:ac:8c: c6:ec:76:d0:1c:ce:42:fc:39:4c:6e:6d:43:05:f3: b8:1c:c9:a7:e0:0e:11:28:d3:cc:58:c5:80:28:5a: 04:a1:39:88:29:9c:60:2a:3d:83:54:5d:a0:9a:86: f5:9e:cb:a6:55:c1:32:73:6c:cc:a6:50:8f:95:f0: f0:7a:12:3c:b7:b5:91:36:a9:7a:21:14:57:bf:c0: 19:bc:1d:8c:9f:47:ad:bb:44:81:50:56:b2:cc:36: 79:8f:3f:36:e9:ae:13:d8:39:02:6c:cc:d6:e6:72: f7:39 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B0:73:DE:42:8A:66:0B:49:14:AC:48:EC:C2:0D:3E:70:EE:2C:2B:92 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CC3744871B08B8A517C504156046C05A4EE392EFFC32DC71768581C3F8B0EE9B/0/B073DE428A660B4914AC48ECC20D3E70EE2C2B92.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.189.156.0/22 IPv6: 2806:367::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 265610 Signature Algorithm: sha256WithRSAEncryption d0:dd:07:4e:c0:c6:f1:20:23:ec:18:d7:7b:38:f5:bc:ac:fe: 73:13:27:11:9e:68:a1:24:d9:34:d7:49:87:bb:b5:e8:17:a2: df:e2:b1:18:6a:80:5e:bf:9c:71:dc:a2:46:ad:bf:da:de:cf: 95:bc:c7:54:a8:ba:33:8e:21:bc:7d:b8:6e:5d:d1:1a:ea:b6: 3c:f3:cd:3f:e0:03:30:c0:9c:df:a7:58:6c:16:31:60:09:49: 6d:10:2a:c4:73:9d:8a:58:c6:3e:92:20:f1:36:53:da:c2:c8: 52:f3:73:89:07:1f:c1:2f:54:0c:6f:ab:c2:9f:3f:40:08:a7: c6:a7:d5:be:73:78:78:04:0c:82:8e:45:82:81:4a:4c:8f:05: fa:40:2c:aa:8b:7a:95:92:21:76:12:46:ec:01:f6:51:2f:a4: 0e:c8:92:0d:e6:b9:67:7b:55:88:d4:40:46:33:d8:aa:3c:6f: bd:9d:e2:84:1c:3f:ad:d3:40:c4:e4:e3:4f:0f:f5:d6:d8:02: 6a:ab:70:36:85:20:dd:98:44:07:52:ab:9d:48:70:a6:cf:46: 96:69:2b:96:85:26:a5:45:17:ae:49:7c:53:8b:f8:15:19:05: dc:1e:f7:5d:e1:3f:74:cf:45:86:44:94:74:1a:fb:45:a4:a0: cf:46:03:de -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUT5sS0JUa/A3encM91VXmxlYz2+QwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxMTU5NDBaFw0yNjAyMDQxMjA0NDBaMDMxMTAvBgNV BAMTKEIwNzNERTQyOEE2NjBCNDkxNEFDNDhFQ0MyMEQzRTcwRUUyQzJCOTIwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDMqJbkgAGDg1fi+rWjuK4gxOYl oi5LybJ+48u25YjXjQZcKfs2Nvbm9OM+urmifl5mpJlx+ZZxeR1w4GNaDEs0tIaO RPbnJ9EdFuk1ZQ76ZCaZR/eikg9hosG2wRYdzUNU5p2woeZHdD56gl8L8WLR5r4p 86aY9aqNukCEc4t5jsT1LaigkYaUYLj9q6nXCm/ilkesjMbsdtAczkL8OUxubUMF 87gcyafgDhEo08xYxYAoWgShOYgpnGAqPYNUXaCahvWey6ZVwTJzbMymUI+V8PB6 Ejy3tZE2qXohFFe/wBm8HYyfR627RIFQVrLMNnmPPzbprhPYOQJszNbmcvc5AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSwc95CimYLSRSs SOzCDT5w7iwrkjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0MzNzQ0ODcxQjA4QjhBNTE3QzUwNDE1 NjA0NkMwNUE0RUUzOTJFRkZDMzJEQzcxNzY4NTgxQzNGOEIwRUU5Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DQzM3NDQ4NzFCMDhCOEE1MTdDNTA0MTU2MDQ2QzA1QTRFRTM5MkVGRkMz MkRDNzE3Njg1ODFDM0Y4QjBFRTlCLzAvQjA3M0RFNDI4QTY2MEI0OTE0QUM0OEVD QzIwRDNFNzBFRTJDMkI5Mi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLb2cMA0EAgAC MAcDBQAoBgNnMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQNijANBgkqhkiG9w0B AQsFAAOCAQEA0N0HTsDG8SAj7BjXezj1vKz+cxMnEZ5ooSTZNNdJh7u16Bei3+Kx GGqAXr+ccdyiRq2/2t7PlbzHVKi6M44hvH24bl3RGuq2PPPNP+ADMMCc36dYbBYx YAlJbRAqxHOdiljGPpIg8TZT2sLIUvNziQcfwS9UDG+rwp8/QAinxqfVvnN4eAQM go5FgoFKTI8F+kAsqot6lZIhdhJG7AH2US+kDsiSDea5Z3tViNRARjPYqjxvvZ3i hBw/rdNAxOTjTw/11tgCaqtwNoUg3ZhEB1KrnUhwps9GlmkrloUmpUUXrkl8U4v4 FRkF3B73XeE/dM9FhkSUdBr7RaSgz0YD3g== -----END CERTIFICATE-----Generated at Sat Apr 12 09:54:15 2025 by rpki-client