$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.cer File: B2866080BB7E2072C6871B23409ACE82D8A3551A.cer (raw, json) Hash identifier: L0cStrlCuzsMOtdGGJqxalmBBuBctVb1Ui5SYxSiFPg= Subject key identifier: B2:86:60:80:BB:7E:20:72:C6:87:1B:23:40:9A:CE:82:D8:A3:55:1A Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2ED4F2B15752D1F670D7988DA24843C3A2E4EC2C Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 06:12:09 +0000 Certificate not after: Wed 04 Feb 2026 06:17:09 +0000 Subordinate resources: AS: 28009 IP: 190.93.192.0/19 IP: 200.85.176.0/21 IP: 2803:4440::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 16 Apr 2025 04:52:06 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:d4:f2:b1:57:52:d1:f6:70:d7:98:8d:a2:48:43:c3:a2:e4:ec:2c Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 06:12:09 2025 GMT Not After : Feb 4 06:17:09 2026 GMT Subject: CN=B2866080BB7E2072C6871B23409ACE82D8A3551A Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:e2:03:18:23:fd:b9:66:8e:b7:8a:6a:78:83:5e: 8e:5f:2a:9a:bf:7d:a3:50:f3:38:4d:74:3a:0a:70: 12:dd:88:96:7f:3c:90:15:bb:e2:f8:1f:dd:5c:57: 9f:63:38:a7:98:10:16:77:96:fd:28:42:08:7e:34: 38:98:f9:13:bb:0a:e6:ab:dd:b1:7a:76:ce:94:a6: 0f:07:60:ef:25:3f:9e:dc:c6:49:39:9f:9e:81:b4: 2b:2a:f7:15:c2:f9:c7:d4:a8:0a:c2:10:17:57:14: 3a:a8:f7:03:28:b9:9a:eb:0e:30:24:77:3b:45:66: 89:9b:ec:e3:9b:79:85:1c:5d:a2:3e:20:b3:e5:10: 77:30:60:b1:ce:0d:15:96:dd:6b:7c:2d:37:0b:d8: 0a:70:dd:de:19:4c:08:f0:f6:2d:ce:99:28:58:cb: 02:64:8f:4c:da:e4:3c:a4:1e:ab:b8:70:57:0e:86: cd:7c:65:16:af:f8:65:3a:db:8c:85:4f:f7:68:86: f4:93:f9:dc:02:bf:7f:2d:dc:3a:f4:01:0a:d4:e3: 0b:34:6a:2a:17:c5:5a:88:4d:a3:d7:2a:a3:3f:e3: 49:49:53:b2:51:3b:25:1d:55:c0:09:3e:52:7b:c6: 6f:e9:f0:e8:2e:a5:50:d5:63:a1:a8:22:6a:95:df: c4:45 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: B2:86:60:80:BB:7E:20:72:C6:87:1B:23:40:9A:CE:82:D8:A3:55:1A X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/490B4CE30BADF2521157A75B6CB77848B87AB75EFF8B826DB0FF813BC6429982/0/B2866080BB7E2072C6871B23409ACE82D8A3551A.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 190.93.192.0/19 200.85.176.0/21 IPv6: 2803:4440::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 28009 Signature Algorithm: sha256WithRSAEncryption 80:89:37:1d:1e:d9:d8:21:06:ab:08:3c:0b:65:0a:19:05:d9: dc:15:a8:86:94:d9:56:55:61:3e:8b:1b:80:93:05:52:3e:36: f3:61:34:4d:1d:1e:7b:af:72:1c:b4:c9:8d:b5:c6:4b:02:8e: 02:35:ef:3b:c4:97:bf:87:6f:f4:cd:43:ce:89:10:da:02:d8: 77:f6:3d:ba:bf:b2:9b:38:2e:93:a4:58:ae:7b:67:09:84:8e: 93:c5:1d:4c:6d:4c:07:07:43:e1:4f:ce:d5:3a:40:4c:c2:d9: c7:7b:e2:35:cc:ec:b7:b7:0b:c1:1e:31:ec:4e:6b:65:a7:eb: f1:59:66:fe:13:22:a1:99:d6:af:2f:b9:88:40:22:2e:2a:aa: f3:fa:f7:bc:1c:c6:e9:68:92:3c:bf:55:43:0e:67:d0:09:cc: dc:03:8a:26:ee:5e:9a:c5:fa:57:b3:75:39:cc:7a:1e:12:f2: 67:0e:9b:51:e6:99:ec:15:50:52:2d:42:ca:ec:81:e5:2a:1b: e9:ea:d8:a7:a4:02:88:b5:61:77:91:06:b0:14:e3:80:7f:c5: 63:a9:72:a1:f0:02:bf:70:f7:ff:88:8e:b6:71:c3:55:78:3d: 2c:20:1a:ab:e3:45:39:d1:48:4f:59:84:4e:22:ff:6d:98:a4: 8d:5a:dc:32 -----BEGIN CERTIFICATE----- MIIGqjCCBZKgAwIBAgIULtTysVdS0fZw15iNokhDw6Lk7CwwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNjEyMDlaFw0yNjAyMDQwNjE3MDlaMDMxMTAvBgNV BAMTKEIyODY2MDgwQkI3RTIwNzJDNjg3MUIyMzQwOUFDRTgyRDhBMzU1MUEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDiAxgj/blmjreKaniDXo5fKpq/ faNQ8zhNdDoKcBLdiJZ/PJAVu+L4H91cV59jOKeYEBZ3lv0oQgh+NDiY+RO7Cuar 3bF6ds6Upg8HYO8lP57cxkk5n56BtCsq9xXC+cfUqArCEBdXFDqo9wMouZrrDjAk dztFZomb7OObeYUcXaI+ILPlEHcwYLHODRWW3Wt8LTcL2Apw3d4ZTAjw9i3OmShY ywJkj0za5DykHqu4cFcOhs18ZRav+GU624yFT/dohvST+dwCv38t3Dr0AQrU4ws0 aioXxVqITaPXKqM/40lJU7JROyUdVcAJPlJ7xm/p8OgupVDVY6GoImqV38RFAgMB AAGjggO0MIIDsDAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSyhmCAu34gcsaH GyNAms6C2KNVGjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDkwQjRDRTMwQkFERjI1MjExNTdBNzVC NkNCNzc4NDhCODdBQjc1RUZGOEI4MjZEQjBGRjgxM0JDNjQyOTk4Mi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80OTBCNENFMzBCQURGMjUyMTE1N0E3NUI2Q0I3Nzg0OEI4N0FCNzVFRkY4 QjgyNkRCMEZGODEzQkM2NDI5OTgyLzAvQjI4NjYwODBCQjdFMjA3MkM2ODcxQjIz NDA5QUNFODJEOEEzNTUxQS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDQGCCsGAQUFBwEHAQH/BCUwIzASBAIAATAMAwQFvl3AAwQDyFWw MA0EAgACMAcDBQAoA0RAMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAm1pMA0GCSqG SIb3DQEBCwUAA4IBAQCAiTcdHtnYIQarCDwLZQoZBdncFaiGlNlWVWE+ixuAkwVS PjbzYTRNHR57r3IctMmNtcZLAo4CNe87xJe/h2/0zUPOiRDaAth39j26v7KbOC6T pFiue2cJhI6TxR1MbUwHB0PhT87VOkBMwtnHe+I1zOy3twvBHjHsTmtlp+vxWWb+ EyKhmdavL7mIQCIuKqrz+ve8HMbpaJI8v1VDDmfQCczcA4om7l6axfpXs3U5zHoe EvJnDptR5pnsFVBSLULK7IHlKhvp6tinpAKItWF3kQawFOOAf8VjqXKh8AK/cPf/ iI62ccNVeD0sIBqr40U50UhPWYROIv9tmKSNWtwy -----END CERTIFICATE-----Generated at Sat Apr 12 09:49:37 2025 by rpki-client