$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.cer File: D5154E1B17B2EB9E5AFA353723C449668FE65093.cer (raw, json) Hash identifier: 1lCZMBzKT7qpn5xCGL6O8gl/O0dEkiZDqPlYonwypQ8= Subject key identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 5EEDCCB763701DF38D38974C3EB2B1B8CB555D37 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 04:23:50 +0000 Certificate not after: Wed 04 Feb 2026 04:28:50 +0000 Subordinate resources: AS: 270105 IP: 177.73.156.0/22 IP: 2801:17a::/44 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sat 12 Apr 2025 00:47:02 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 5e:ed:cc:b7:63:70:1d:f3:8d:38:97:4c:3e:b2:b1:b8:cb:55:5d:37 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 04:23:50 2025 GMT Not After : Feb 4 04:28:50 2026 GMT Subject: CN=D5154E1B17B2EB9E5AFA353723C449668FE65093 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:dd:42:07:0a:4a:32:b6:90:2e:2f:c5:dd:08:46: 83:40:41:98:ab:77:9d:af:63:56:78:40:52:7e:14: 44:68:12:32:61:89:cf:9c:0b:da:66:c5:33:f7:a1: 06:c7:68:1f:7c:09:13:45:e2:c2:50:ed:12:14:d3: 5d:40:2d:4c:e3:3c:66:ac:3d:e9:46:43:cc:e7:a1: e6:61:58:7c:0c:79:a9:95:f0:c3:b9:f8:2e:47:06: ad:c9:ac:46:c8:4b:ed:cb:49:7e:f1:0d:52:34:8e: 27:84:17:8a:01:d9:65:4e:2e:24:60:db:aa:60:a8: db:3f:85:24:3a:b5:9a:70:0e:ea:51:ad:dd:41:2c: ec:e9:13:51:45:c7:af:f1:dc:45:0b:87:83:4a:02: 94:b1:61:bb:7b:e9:ae:c7:bb:50:2c:9b:b1:d5:ca: 41:5a:53:df:f8:5e:3f:24:08:4a:60:0b:bf:22:dc: 60:1b:11:30:76:45:94:7f:5a:f8:de:1b:20:9f:8a: ad:c8:14:1a:28:e0:46:8f:d8:d6:55:92:0f:68:5f: 0b:1d:5a:cc:42:eb:6d:03:63:57:50:39:16:28:9d: f5:0e:9e:63:80:87:9c:98:3c:7b:8f:bc:93:74:6a: bc:e5:b0:e5:f0:6d:e4:72:8f:5b:ae:51:91:12:68: cd:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: D5:15:4E:1B:17:B2:EB:9E:5A:FA:35:37:23:C4:49:66:8F:E6:50:93 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/F0586478AF176890BA873A5563EEBC48665866C940EB0B6C64AD0AF89EAF7619/0/D5154E1B17B2EB9E5AFA353723C449668FE65093.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 177.73.156.0/22 IPv6: 2801:17a::/44 sbgp-autonomousSysNum: critical Autonomous System Numbers: 270105 Signature Algorithm: sha256WithRSAEncryption 5e:29:62:a3:85:c5:e8:d2:94:64:7d:5d:8d:1e:63:a7:31:98: 4b:c2:b1:22:49:da:20:8d:3d:5f:30:d3:f8:9f:bf:c5:c6:57: db:52:35:1a:e0:4d:54:69:4c:0d:88:ae:e8:e4:97:fe:b0:b6: da:3b:d6:68:8e:37:bd:29:81:1e:94:b4:4e:ff:fa:bd:34:ff: 95:31:20:a6:ba:3d:83:99:c1:91:2a:61:34:57:ff:5f:5c:64: bc:0a:e4:1e:0d:03:cd:70:eb:07:56:07:cb:3b:3c:5a:3f:ef: 60:d5:33:29:0a:3a:3f:c8:ef:71:45:b2:70:36:09:a7:68:f8: 19:6a:d3:87:4d:a3:94:74:6a:ad:7b:b6:1f:52:71:d5:1a:08: 4c:cd:26:c0:bc:e7:f7:0d:4f:af:72:e6:68:3a:8a:39:d3:d7: 72:c6:43:eb:66:7c:88:ec:36:1c:8a:89:af:b0:51:c0:cf:a0: f6:9c:38:11:92:1e:2b:29:3c:9a:54:7f:71:fc:77:3f:3e:d1: 39:1e:22:bd:65:5e:42:d4:9d:be:a5:00:5c:0d:81:e3:8c:af: 9b:82:e5:fd:b3:8d:07:83:98:cc:c4:be:f9:d5:b9:74:eb:7a: ee:c7:15:1d:ee:76:a9:35:83:b8:f4:55:0e:e7:2f:34:da:9a: 66:e7:d6:10 -----BEGIN CERTIFICATE----- MIIGpzCCBY+gAwIBAgIUXu3Mt2NwHfONOJdMPrKxuMtVXTcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUwNDIzNTBaFw0yNjAyMDQwNDI4NTBaMDMxMTAvBgNV BAMTKEQ1MTU0RTFCMTdCMkVCOUU1QUZBMzUzNzIzQzQ0OTY2OEZFNjUwOTMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDdQgcKSjK2kC4vxd0IRoNAQZir d52vY1Z4QFJ+FERoEjJhic+cC9pmxTP3oQbHaB98CRNF4sJQ7RIU011ALUzjPGas PelGQ8znoeZhWHwMeamV8MO5+C5HBq3JrEbIS+3LSX7xDVI0jieEF4oB2WVOLiRg 26pgqNs/hSQ6tZpwDupRrd1BLOzpE1FFx6/x3EULh4NKApSxYbt76a7Hu1Asm7HV ykFaU9/4Xj8kCEpgC78i3GAbETB2RZR/WvjeGyCfiq3IFBoo4EaP2NZVkg9oXwsd WsxC620DY1dQORYonfUOnmOAh5yYPHuPvJN0arzlsOXwbeRyj1uuUZESaM2/AgMB AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTVFU4bF7Lrnlr6 NTcjxElmj+ZQkzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRjA1ODY0NzhBRjE3Njg5MEJBODczQTU1 NjNFRUJDNDg2NjU4NjZDOTQwRUIwQjZDNjRBRDBBRjg5RUFGNzYxOS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9GMDU4NjQ3OEFGMTc2ODkwQkE4NzNBNTU2M0VFQkM0ODY2NTg2NkM5NDBF QjBCNkM2NEFEMEFGODlFQUY3NjE5LzAvRDUxNTRFMUIxN0IyRUI5RTVBRkEzNTM3 MjNDNDQ5NjY4RkU2NTA5My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQCsUmcMA8EAgAC MAkDBwQoAQF6AAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBB8ZMA0GCSqGSIb3 DQEBCwUAA4IBAQBeKWKjhcXo0pRkfV2NHmOnMZhLwrEiSdogjT1fMNP4n7/Fxlfb UjUa4E1UaUwNiK7o5Jf+sLbaO9Zojje9KYEelLRO//q9NP+VMSCmuj2DmcGRKmE0 V/9fXGS8CuQeDQPNcOsHVgfLOzxaP+9g1TMpCjo/yO9xRbJwNgmnaPgZatOHTaOU dGqte7YfUnHVGghMzSbAvOf3DU+vcuZoOoo509dyxkPrZnyI7DYciomvsFHAz6D2 nDgRkh4rKTyaVH9x/Hc/PtE5HiK9ZV5C1J2+pQBcDYHjjK+bguX9s40Hg5jMxL75 1bl063ruxxUd7napNYO49FUO5y802ppm59YQ -----END CERTIFICATE-----Generated at Tue Apr 8 01:37:50 2025 by rpki-client