$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer File: 5359D5652EB8B1C42FF1914CA8586A67AE35A163.cer (raw, json) Hash identifier: NS6ENQ9jBfnt1jiKaaxCd3dU/grdaf1BzA8bcze1RPs= Subject key identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 15DA6B3658855B8B90AB64E0F0672B1CFB8C06AA Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 06 Jun 2024 21:45:01 +0000 Certificate not after: Thu 05 Jun 2025 21:50:01 +0000 Subordinate resources: AS: 273143 IP: 2803:ac50::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Sun 11 May 2025 08:46:35 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 15:da:6b:36:58:85:5b:8b:90:ab:64:e0:f0:67:2b:1c:fb:8c:06:aa Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Jun 6 21:45:01 2024 GMT Not After : Jun 5 21:50:01 2025 GMT Subject: CN=5359D5652EB8B1C42FF1914CA8586A67AE35A163 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b5:a8:d4:fc:9e:44:6d:92:8a:01:e9:5d:6c:cc: 48:6e:6a:71:7d:0e:c1:83:0d:33:ca:53:34:c9:97: e4:e5:8b:56:bc:80:25:a1:bc:f3:82:7a:3c:18:ee: 40:8d:e5:6b:97:e1:8e:9a:43:f4:71:2f:2e:e7:76: 63:eb:be:c0:b2:78:66:a6:85:f9:61:5f:d6:ff:90: a4:1b:d8:0b:40:8e:48:f0:f8:64:5c:e7:07:ce:0a: 6d:ba:8e:31:16:10:f1:89:9f:70:22:21:3c:91:89: 15:b9:06:14:b3:ef:5d:30:d1:74:1d:18:23:10:1b: 8a:6d:10:fc:37:76:d2:54:0c:d1:0c:2d:12:e8:93: 6b:f7:1d:23:8a:05:cd:91:1c:f2:05:2c:e5:1c:4f: 90:41:f7:f6:bc:e4:f8:3d:e4:5f:83:f3:72:dc:c1: 81:b2:8b:62:f3:03:69:b8:e1:38:a2:9e:83:0a:83: 05:2c:80:59:da:5a:f6:e4:bb:53:5e:42:7e:11:f8: 83:bb:db:69:0b:2e:fa:5a:67:98:0b:30:c8:a8:51: 6b:6e:cf:7b:06:29:7b:d9:fd:9f:6a:ba:45:30:63: 06:0e:28:60:5f:3e:3d:c7:dd:cf:47:b5:57:09:a6: 1a:d2:a5:d2:39:00:49:cb:04:d5:15:3d:a1:fb:22: e2:c9 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 53:59:D5:65:2E:B8:B1:C4:2F:F1:91:4C:A8:58:6A:67:AE:35:A1:63 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2BE879972F4E90E8FDCB6500D36E6A4A9FF77B0274706A399C0923D38FFEF25B/0/5359D5652EB8B1C42FF1914CA8586A67AE35A163.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:ac50::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273143 Signature Algorithm: sha256WithRSAEncryption 10:4c:6e:23:b3:ff:9a:99:75:a6:c4:8f:53:33:57:fb:bb:7a: ec:49:9e:a2:49:7c:20:66:f6:42:1d:55:fc:3e:c6:ef:74:3f: 1f:75:78:1a:45:ac:49:4a:b0:0e:c9:9c:31:50:da:ef:1b:8f: 9a:e9:d5:ba:d0:cd:e1:ec:b6:0d:63:ac:5a:ea:f6:8d:4c:a6: a3:ae:aa:46:e9:8f:e5:e5:9c:e5:07:fb:1f:d0:69:11:53:e2: c3:64:5c:29:ab:f1:b4:db:79:60:6c:8b:6d:f8:74:c8:2c:e0: 88:9a:e5:bd:b0:35:db:1b:78:19:26:38:0b:7e:cf:bb:c6:65: 3d:e5:a9:36:13:33:da:bc:5b:67:f7:07:06:b4:d5:5e:e8:e7: b0:5f:4b:d0:fe:a9:44:9e:36:21:54:b5:f1:a9:7b:ed:7d:ae: 83:de:42:7e:9a:c5:0a:4a:6f:1d:4d:13:c5:78:cd:3b:69:86: b7:22:73:db:e7:ae:10:8f:d8:59:b1:9f:b4:1d:1a:8b:b2:74: 7a:1a:77:47:69:0d:93:86:94:9c:d9:fc:58:d2:3f:03:5e:b0: ed:b0:2a:20:6b:8e:01:27:4b:02:0b:8d:78:4a:28:22:06:c4: cd:15:7f:5b:e7:d9:0c:38:aa:0d:48:17:b7:bc:72:b6:b3:4c: 4b:81:14:2b -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUFdprNliFW4uQq2Tg8GcrHPuMBqowDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDA2MDYyMTQ1MDFaFw0yNTA2MDUyMTUwMDFaMDMxMTAvBgNV BAMTKDUzNTlENTY1MkVCOEIxQzQyRkYxOTE0Q0E4NTg2QTY3QUUzNUExNjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC1qNT8nkRtkooB6V1szEhuanF9 DsGDDTPKUzTJl+Tli1a8gCWhvPOCejwY7kCN5WuX4Y6aQ/RxLy7ndmPrvsCyeGam hflhX9b/kKQb2AtAjkjw+GRc5wfOCm26jjEWEPGJn3AiITyRiRW5BhSz710w0XQd GCMQG4ptEPw3dtJUDNEMLRLok2v3HSOKBc2RHPIFLOUcT5BB9/a85Pg95F+D83Lc wYGyi2LzA2m44TiinoMKgwUsgFnaWvbku1NeQn4R+IO722kLLvpaZ5gLMMioUWtu z3sGKXvZ/Z9qukUwYwYOKGBfPj3H3c9HtVcJphrSpdI5AEnLBNUVPaH7IuLJAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBRTWdVlLrixxC/x kUyoWGpnrjWhYzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMkJFODc5OTcyRjRFOTBFOEZEQ0I2NTAw RDM2RTZBNEE5RkY3N0IwMjc0NzA2QTM5OUMwOTIzRDM4RkZFRjI1Qi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yQkU4Nzk5NzJGNEU5MEU4RkRDQjY1MDBEMzZFNkE0QTlGRjc3QjAyNzQ3 MDZBMzk5QzA5MjNEMzhGRkVGMjVCLzAvNTM1OUQ1NjUyRUI4QjFDNDJGRjE5MTRD QTg1ODZBNjdBRTM1QTE2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAOsUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKvcwDQYJKoZIhvcNAQELBQADggEBABBMbiOz /5qZdabEj1MzV/u7euxJnqJJfCBm9kIdVfw+xu90Px91eBpFrElKsA7JnDFQ2u8b j5rp1brQzeHstg1jrFrq9o1MpqOuqkbpj+XlnOUH+x/QaRFT4sNkXCmr8bTbeWBs i234dMgs4Iia5b2wNdsbeBkmOAt+z7vGZT3lqTYTM9q8W2f3Bwa01V7o57BfS9D+ qUSeNiFUtfGpe+19roPeQn6axQpKbx1NE8V4zTtphrcic9vnrhCP2Fmxn7QdGouy dHoad0dpDZOGlJzZ/FjSPwNesO2wKiBrjgEnSwILjXhKKCIGxM0Vf1vn2Qw4qg1I F7e8crazTEuBFCs= -----END CERTIFICATE-----Generated at Thu May 8 06:28:06 2025 by rpki-client