$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer File: B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.cer (raw, json) Hash identifier: swISv+Mq128WAqH8zO9tuLXAWKa1emff/RrVAmq85jU= Subject key identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 222F4379784A3059EC91F4901B1D394EE397EDB8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:07:13 +0000 Certificate not after: Wed 04 Feb 2026 02:12:13 +0000 Subordinate resources: AS: 266880 IP: 45.225.44.0/22 IP: 2803:d220::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 09 Apr 2025 06:41:53 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:2f:43:79:78:4a:30:59:ec:91:f4:90:1b:1d:39:4e:e3:97:ed:b8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:07:13 2025 GMT Not After : Feb 4 02:12:13 2026 GMT Subject: CN=B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cf:9c:68:41:23:6b:0d:7c:27:84:50:2c:50:f6: b3:bf:58:9f:20:46:15:71:ab:14:24:3a:1a:2c:74: a4:5f:3e:c7:29:a8:d1:2a:19:85:c8:0c:26:d9:87: 57:94:fe:fe:52:e3:93:48:51:c9:ac:03:15:8e:dd: 74:4f:84:2e:6e:94:5c:a5:4d:0b:6c:4a:fc:ba:08: 7a:7a:48:6d:ca:33:a9:74:db:3b:92:be:44:3e:26: ab:0a:83:45:df:0c:4b:20:20:25:45:d4:c7:89:a7: b6:3c:16:40:d5:a9:07:2b:82:f8:0f:05:6a:7a:9a: c3:dc:1b:2e:95:e0:5d:3a:67:ff:90:0f:08:c1:7a: b5:9e:a7:51:7e:90:4c:49:32:8b:ab:25:84:8c:4d: 1f:5b:a3:67:c3:f0:c0:ef:d7:b1:7e:ce:1a:4d:93: 22:ba:5e:8b:12:6e:11:1f:26:ff:8c:9b:8e:5e:58: 46:f1:55:5f:d9:eb:38:96:d0:1a:02:01:b9:bd:59: f5:91:33:7b:81:17:25:e7:f7:94:2d:38:5f:84:91: 68:6a:34:42:6f:b7:b5:5c:c4:1b:90:f1:34:18:14: 44:02:61:37:a5:0b:fe:e7:d1:36:8b:ab:10:6f:fe: 24:bd:6b:a6:84:55:58:82:6a:fd:22:9c:2f:62:2b: 71:17 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B1:AF:8A:D0:EB:D3:07:77:29:78:AE:5E:FF:E0:CB:D7:07:FC:AE:66 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/CD853A84FEB5402EC59B5520155508D45AF1642FC41720AD772D816942485E07/0/B1AF8AD0EBD307772978AE5EFFE0CBD707FCAE66.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.225.44.0/22 IPv6: 2803:d220::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 266880 Signature Algorithm: sha256WithRSAEncryption ab:b2:6f:8c:5f:2c:95:4b:ef:8c:3d:84:af:12:f4:2e:02:22: 06:1f:e7:35:a3:6c:2b:ce:65:f4:3d:91:b6:97:1f:b6:1c:10: c4:40:38:a1:55:99:b8:10:a0:69:1d:15:1f:aa:e1:87:f0:bf: e3:f5:97:09:a9:70:6c:75:dc:d6:a6:59:2a:c1:a3:41:73:64: 42:d0:58:61:d3:df:30:69:03:33:e9:67:dc:cb:14:b7:32:e5: 08:ba:ad:a6:ca:d7:20:76:83:b8:61:a3:ca:76:8d:db:d5:60: 8e:dc:f1:11:94:7d:e1:08:28:f6:d0:8f:33:3c:4a:d3:67:1b: c9:6c:04:5e:f9:c4:d8:fe:69:76:59:3a:1c:5d:1e:37:ca:86: 1b:c2:f8:19:63:1c:d7:d7:cf:ed:22:4c:49:e7:d6:90:f1:a2: f8:a2:c1:ce:77:76:51:19:98:ff:82:dd:07:f2:62:df:41:42: 6a:bb:3b:a9:28:ba:59:6a:69:61:bc:5a:ec:61:17:6e:27:c9: c6:25:3c:39:ed:21:6f:7d:1c:e8:3e:20:ba:56:d5:37:10:c6: 6c:a3:a5:82:ee:15:3e:ce:60:3c:43:f6:e5:25:a3:03:a0:b0: bf:7e:9d:d7:06:9d:69:51:13:af:d7:64:ce:c1:27:e6:49:9f: 0c:92:64:70 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUIi9DeXhKMFnskfSQGx05TuOX7bgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjA3MTNaFw0yNjAyMDQwMjEyMTNaMDMxMTAvBgNV BAMTKEIxQUY4QUQwRUJEMzA3NzcyOTc4QUU1RUZGRTBDQkQ3MDdGQ0FFNjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDPnGhBI2sNfCeEUCxQ9rO/WJ8g RhVxqxQkOhosdKRfPscpqNEqGYXIDCbZh1eU/v5S45NIUcmsAxWO3XRPhC5ulFyl TQtsSvy6CHp6SG3KM6l02zuSvkQ+JqsKg0XfDEsgICVF1MeJp7Y8FkDVqQcrgvgP BWp6msPcGy6V4F06Z/+QDwjBerWep1F+kExJMourJYSMTR9bo2fD8MDv17F+zhpN kyK6XosSbhEfJv+Mm45eWEbxVV/Z6ziW0BoCAbm9WfWRM3uBFyXn95QtOF+EkWhq NEJvt7VcxBuQ8TQYFEQCYTelC/7n0TaLqxBv/iS9a6aEVViCav0inC9iK3EXAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSxr4rQ69MHdyl4 rl7/4MvXB/yuZjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQ0Q4NTNBODRGRUI1NDAyRUM1OUI1NTIw MTU1NTA4RDQ1QUYxNjQyRkM0MTcyMEFENzcyRDgxNjk0MjQ4NUUwNy8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9DRDg1M0E4NEZFQjU0MDJFQzU5QjU1MjAxNTU1MDhENDVBRjE2NDJGQzQx NzIwQUQ3NzJEODE2OTQyNDg1RTA3LzAvQjFBRjhBRDBFQkQzMDc3NzI5NzhBRTVF RkZFMENCRDcwN0ZDQUU2Ni5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLeEsMA0EAgAC MAcDBQAoA9IgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQSgDANBgkqhkiG9w0B AQsFAAOCAQEAq7JvjF8slUvvjD2ErxL0LgIiBh/nNaNsK85l9D2RtpcfthwQxEA4 oVWZuBCgaR0VH6rhh/C/4/WXCalwbHXc1qZZKsGjQXNkQtBYYdPfMGkDM+ln3MsU tzLlCLqtpsrXIHaDuGGjynaN29VgjtzxEZR94Qgo9tCPMzxK02cbyWwEXvnE2P5p dlk6HF0eN8qGG8L4GWMc19fP7SJMSefWkPGi+KLBznd2URmY/4LdB/Ji30FCars7 qSi6WWppYbxa7GEXbifJxiU8Oe0hb30c6D4gulbVNxDGbKOlgu4VPs5gPEP25SWj A6Cwv36d1wadaVETr9dkzsEn5kmfDJJkcA== -----END CERTIFICATE-----Generated at Sat Apr 5 23:57:33 2025 by rpki-client