$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer File: BE7683A0995880FB51F3BF98293EDECD286AF6A3.cer (raw, json) Hash identifier: jV+bHsRWi2KOG5o6XReHTZk1o2n8J8WD5usoDsXtjVQ= Subject key identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 3C5E97658F3878A18385A4C67046127C513F70D1 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 02:35:36 +0000 Certificate not after: Wed 04 Feb 2026 02:40:36 +0000 Subordinate resources: AS: 263817 IP: 138.185.28.0/22 IP: 2803:a40::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 20 Feb 2025 17:49:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 3c:5e:97:65:8f:38:78:a1:83:85:a4:c6:70:46:12:7c:51:3f:70:d1 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 02:35:36 2025 GMT Not After : Feb 4 02:40:36 2026 GMT Subject: CN=BE7683A0995880FB51F3BF98293EDECD286AF6A3 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9f:88:c5:d3:a2:38:50:c4:c8:bc:14:04:ec:21: c3:18:ff:0b:27:eb:c5:e7:0b:f0:b1:ff:f6:51:e1: cd:55:67:6a:d1:9b:4c:e1:f6:3b:bd:cd:3d:d3:12: 80:39:78:5e:05:66:3e:28:bc:9d:b1:ed:b0:a6:e8: 5c:21:36:dd:52:32:2c:59:42:e0:89:e5:73:b1:b8: ae:fc:6a:fc:b8:cc:37:48:cb:f2:95:2b:86:1f:80: b3:72:8a:7c:07:9d:b6:72:3a:d7:9c:f8:34:01:a6: 75:6f:03:8e:59:22:5d:33:8d:d0:bb:a8:48:a3:39: a4:8e:3f:c0:7f:31:dc:48:14:f6:da:3f:f2:73:4e: b7:8c:9b:8b:ab:9c:dc:1b:37:03:ee:02:fb:a5:a7: c4:48:d9:59:d6:4f:e6:45:45:40:78:97:9b:39:dd: bc:9c:27:a1:03:c0:ad:ca:90:64:c0:fd:ff:d4:a7: 14:33:0c:c5:b9:b6:06:1b:5c:8d:71:c1:7d:d0:76: 05:17:00:ba:d7:91:fc:e4:1a:9a:15:5c:c7:8e:12: 31:55:a6:ba:0f:21:16:c3:d6:d4:02:8f:76:0a:5c: 64:32:0f:56:f4:97:52:e3:4b:5e:48:57:e2:2a:10: 73:a6:64:82:04:36:61:b9:02:c0:35:ca:be:b8:05: aa:fd Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BE:76:83:A0:99:58:80:FB:51:F3:BF:98:29:3E:DE:CD:28:6A:F6:A3 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/288024DE8736033154151253525598CEC89B9A0DE075117B13A60C8B7128E2D0/0/BE7683A0995880FB51F3BF98293EDECD286AF6A3.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.185.28.0/22 IPv6: 2803:a40::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 263817 Signature Algorithm: sha256WithRSAEncryption 86:bd:9d:37:c8:b6:34:bc:20:76:fa:32:57:98:f0:2f:9d:b8: 07:04:dd:bd:4e:c7:02:d5:4d:09:70:03:95:6b:a4:aa:be:07: 13:f7:07:e9:fd:92:8d:a0:ce:a9:76:0c:ba:ec:84:79:e6:c1: 87:d5:10:09:77:72:08:15:c1:b7:4a:57:0e:4e:7d:ae:36:3f: ed:a8:09:39:9c:92:a4:9c:76:fc:c0:0d:97:5b:1b:9b:96:f2: 02:19:27:bd:e9:d6:3d:13:d7:4c:4f:2c:e6:b6:a1:11:b1:43: bb:7a:f8:e0:a4:5e:24:45:7e:0a:fd:fd:51:41:ac:36:a9:7a: 43:f2:df:c2:e5:8b:48:8c:c8:ad:4f:3e:76:bd:94:e6:22:da: ea:b5:5c:57:47:a2:49:f5:6b:58:23:5e:ac:4f:9d:7a:ce:ca: 2e:3c:3c:0a:98:2b:42:e4:92:92:55:1a:10:43:15:18:fe:5d: cd:85:cc:1b:6a:a7:83:e7:0f:ee:69:30:42:92:ee:58:1e:7d: 8f:cf:3b:2f:a9:b2:b8:2b:e7:91:bb:36:f5:32:bf:0c:55:15: e8:5e:f9:f7:3f:3c:a6:39:2d:db:e1:6f:ad:30:aa:2c:bd:7a: 27:21:ba:49:e2:da:cd:20:e6:74:f8:aa:90:9a:1d:2d:a2:24: 81:3d:5c:01 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUPF6XZY84eKGDhaTGcEYSfFE/cNEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwMjM1MzZaFw0yNjAyMDQwMjQwMzZaMDMxMTAvBgNV BAMTKEJFNzY4M0EwOTk1ODgwRkI1MUYzQkY5ODI5M0VERUNEMjg2QUY2QTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCfiMXTojhQxMi8FATsIcMY/wsn 68XnC/Cx//ZR4c1VZ2rRm0zh9ju9zT3TEoA5eF4FZj4ovJ2x7bCm6FwhNt1SMixZ QuCJ5XOxuK78avy4zDdIy/KVK4YfgLNyinwHnbZyOtec+DQBpnVvA45ZIl0zjdC7 qEijOaSOP8B/MdxIFPbaP/JzTreMm4urnNwbNwPuAvulp8RI2VnWT+ZFRUB4l5s5 3bycJ6EDwK3KkGTA/f/UpxQzDMW5tgYbXI1xwX3QdgUXALrXkfzkGpoVXMeOEjFV proPIRbD1tQCj3YKXGQyD1b0l1LjS15IV+IqEHOmZIIENmG5AsA1yr64Bar9AgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS+doOgmViA+1Hz v5gpPt7NKGr2ozAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjg4MDI0REU4NzM2MDMzMTU0MTUxMjUz NTI1NTk4Q0VDODlCOUEwREUwNzUxMTdCMTNBNjBDOEI3MTI4RTJEMC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yODgwMjRERTg3MzYwMzMxNTQxNTEyNTM1MjU1OThDRUM4OUI5QTBERTA3 NTExN0IxM0E2MEM4QjcxMjhFMkQwLzAvQkU3NjgzQTA5OTU4ODBGQjUxRjNCRjk4 MjkzRURFQ0QyODZBRjZBMy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCirkcMA0EAgAC MAcDBQAoAwpAMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQGiTANBgkqhkiG9w0B AQsFAAOCAQEAhr2dN8i2NLwgdvoyV5jwL524BwTdvU7HAtVNCXADlWukqr4HE/cH 6f2SjaDOqXYMuuyEeebBh9UQCXdyCBXBt0pXDk59rjY/7agJOZySpJx2/MANl1sb m5byAhknvenWPRPXTE8s5rahEbFDu3r44KReJEV+Cv39UUGsNql6Q/LfwuWLSIzI rU8+dr2U5iLa6rVcV0eiSfVrWCNerE+des7KLjw8CpgrQuSSklUaEEMVGP5dzYXM G2qng+cP7mkwQpLuWB59j887L6myuCvnkbs29TK/DFUV6F759z88pjkt2+FvrTCq LL16JyG6SeLazSDmdPiqkJodLaIkgT1cAQ== -----END CERTIFICATE-----Generated at Sun Feb 16 15:55:42 2025 by rpki-client