$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer File: C064CAB0573C537227553A8B5C14EC1C4B4511F9.cer (raw, json) Hash identifier: l0gDMXBs0uLK7ohzXiRGzKDGs7yR4y1Fcy4c0M5+bl8= Subject key identifier: C0:64:CA:B0:57:3C:53:72:27:55:3A:8B:5C:14:EC:1C:4B:45:11:F9 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2226973D30BD58F0290E84B02F31944744AD574A Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Fri 28 Mar 2025 19:06:16 +0000 Certificate not after: Fri 27 Mar 2026 19:11:16 +0000 Subordinate resources: AS: 273155 IP: 2803:250::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 08 May 2025 10:53:01 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 22:26:97:3d:30:bd:58:f0:29:0e:84:b0:2f:31:94:47:44:ad:57:4a Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 28 19:06:16 2025 GMT Not After : Mar 27 19:11:16 2026 GMT Subject: CN=C064CAB0573C537227553A8B5C14EC1C4B4511F9 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:9a:7b:d2:5c:9a:82:be:a1:f7:37:aa:70:74:10: fd:fa:22:a0:2e:96:56:10:64:4c:e4:58:af:e1:0f: 59:58:07:b1:22:83:f5:01:40:2c:74:d9:51:0a:4f: 0c:b2:25:87:f1:26:b2:8a:7a:ec:9c:1b:fe:95:44: 08:6c:02:6d:b0:de:7e:02:97:7e:30:8d:fb:5c:01: 36:53:a2:cc:f9:4f:24:02:18:69:1c:03:69:6e:23: 62:79:33:d8:60:1c:ed:8a:e6:f1:87:5a:24:e4:71: 7b:0a:17:7b:6e:04:ad:61:83:4d:ac:6e:ee:16:1b: 48:72:98:a6:c1:47:48:24:95:c0:d4:33:18:52:24: 4a:b4:f5:a8:2c:f2:a1:09:51:1e:71:dc:67:53:dc: 1b:38:83:80:16:47:22:d2:ea:4f:bb:54:52:3a:ba: 69:13:8a:3d:53:ab:c7:1e:fb:4d:83:b6:1e:2a:21: bf:3e:e2:78:9f:4d:e4:82:9e:f7:6b:a5:80:c0:0f: ec:3c:2f:9c:8f:46:11:f8:46:2f:0d:f5:a3:cf:4f: f6:10:da:8c:0d:73:b2:3d:4a:83:76:03:00:d2:32: 7e:ba:64:1d:f3:4d:ae:d5:30:a5:bf:8c:f9:50:21: 15:58:2c:19:8b:4e:be:2c:16:fd:7b:23:d2:e5:ae: 04:13 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: C0:64:CA:B0:57:3C:53:72:27:55:3A:8B:5C:14:EC:1C:4B:45:11:F9 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0716C9BE287A5CF96DEA5B68FA15482CFC9E3FA09ED4C37D7D0FB4D5D1440405/0/C064CAB0573C537227553A8B5C14EC1C4B4511F9.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv6: 2803:250::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 273155 Signature Algorithm: sha256WithRSAEncryption c1:22:70:2a:52:0c:c3:7a:84:bf:3c:b4:02:58:f4:9c:d2:7a: 12:9f:69:75:57:94:58:d3:22:4e:95:55:b0:f4:41:b8:38:e3: 1a:0d:50:f6:d9:81:2e:7b:21:93:76:ae:a2:87:59:e8:da:52: 0b:90:95:c7:dc:85:15:55:58:fd:eb:25:0a:e6:b6:af:6e:5c: db:fa:21:e3:3f:30:5e:d3:9f:fa:c1:bd:31:c9:42:4c:1e:39: 33:c7:31:d9:27:78:df:3b:22:71:f8:f2:c4:9d:ec:4d:95:d6: 28:8e:7d:55:b3:22:a6:29:1a:c2:f8:57:d4:73:c8:07:a0:71: 34:39:2f:87:d2:ad:53:9d:22:0b:2a:d2:af:23:cf:7f:de:19: ce:0d:a3:21:9b:7c:07:09:09:24:d4:ad:e7:2c:4c:25:eb:0e: 5d:6b:95:5c:fe:c0:20:68:79:2b:99:ce:81:e4:5a:67:7a:76: 60:98:b8:c1:fd:a5:cd:9b:d4:23:cb:6e:54:08:04:a6:b9:29: dd:08:ca:02:50:03:cf:0f:a9:41:00:4e:2f:9a:4e:d4:56:da: c7:2a:ae:f3:0a:1d:d5:bc:1d:7c:a0:e6:04:3b:13:28:7e:f3: 52:ae:7f:41:19:eb:ba:42:f5:b5:dd:07:dd:7b:31:40:a7:b2: 9e:f3:d6:6c -----BEGIN CERTIFICATE----- MIIGlzCCBX+gAwIBAgIUIiaXPTC9WPApDoSwLzGUR0StV0owDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAzMjgxOTA2MTZaFw0yNjAzMjcxOTExMTZaMDMxMTAvBgNV BAMTKEMwNjRDQUIwNTczQzUzNzIyNzU1M0E4QjVDMTRFQzFDNEI0NTExRjkwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCae9JcmoK+ofc3qnB0EP36IqAu llYQZEzkWK/hD1lYB7Eig/UBQCx02VEKTwyyJYfxJrKKeuycG/6VRAhsAm2w3n4C l34wjftcATZTosz5TyQCGGkcA2luI2J5M9hgHO2K5vGHWiTkcXsKF3tuBK1hg02s bu4WG0hymKbBR0gklcDUMxhSJEq09ags8qEJUR5x3GdT3Bs4g4AWRyLS6k+7VFI6 umkTij1Tq8ce+02Dth4qIb8+4nifTeSCnvdrpYDAD+w8L5yPRhH4Ri8N9aPPT/YQ 2owNc7I9SoN2AwDSMn66ZB3zTa7VMKW/jPlQIRVYLBmLTr4sFv17I9LlrgQTAgMB AAGjggOhMIIDnTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBTAZMqwVzxTcidV OotcFOwcS0UR+TAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDcxNkM5QkUyODdBNUNGOTZERUE1QjY4 RkExNTQ4MkNGQzlFM0ZBMDlFRDRDMzdEN0QwRkI0RDVEMTQ0MDQwNS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wNzE2QzlCRTI4N0E1Q0Y5NkRFQTVCNjhGQTE1NDgyQ0ZDOUUzRkEwOUVE NEMzN0Q3RDBGQjRENUQxNDQwNDA1LzAvQzA2NENBQjA1NzNDNTM3MjI3NTUzQThC NUMxNEVDMUM0QjQ1MTFGOS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMCAGCCsGAQUFBwEHAQH/BBEwDzANBAIAAjAHAwUAKAMCUDAaBggr BgEFBQcBCAEB/wQLMAmgBzAFAgMEKwMwDQYJKoZIhvcNAQELBQADggEBAMEicCpS DMN6hL88tAJY9JzSehKfaXVXlFjTIk6VVbD0Qbg44xoNUPbZgS57IZN2rqKHWeja UguQlcfchRVVWP3rJQrmtq9uXNv6IeM/MF7Tn/rBvTHJQkweOTPHMdkneN87InH4 8sSd7E2V1iiOfVWzIqYpGsL4V9RzyAegcTQ5L4fSrVOdIgsq0q8jz3/eGc4NoyGb fAcJCSTUrecsTCXrDl1rlVz+wCBoeSuZzoHkWmd6dmCYuMH9pc2b1CPLblQIBKa5 Kd0IygJQA88PqUEATi+aTtRW2scqrvMKHdW8HXyg5gQ7Eyh+81Kuf0EZ67pC9bXd B917MUCnsp7z1mw= -----END CERTIFICATE-----Generated at Sat May 3 23:16:55 2025 by rpki-client