$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/A2B7697124E3E04C84077E519A3633A382D4378C.cer File: A2B7697124E3E04C84077E519A3633A382D4378C.cer (raw, json) Hash identifier: spF5uToMSuvePNk0M4DtrMEoB6+Ze6Ov80E1PSXM1wE= Subject key identifier: A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 1BCC7819269A5AF93670663943CA985CE1AE87D7 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Thu 21 Aug 2025 17:07:57 +0000 Certificate not after: Thu 20 Aug 2026 17:12:57 +0000 Subordinate resources: AS: 267807 IP: 45.173.68.0/22 IP: 2803:a060::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 26 Aug 2025 06:12:50 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 1b:cc:78:19:26:9a:5a:f9:36:70:66:39:43:ca:98:5c:e1:ae:87:d7 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Aug 21 17:07:57 2025 GMT Not After : Aug 20 17:12:57 2026 GMT Subject: CN=A2B7697124E3E04C84077E519A3633A382D4378C Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a7:dd:5a:96:63:b9:48:21:02:a5:f6:c6:14:ab: 2d:43:9f:7e:aa:c1:04:5f:e4:c1:8d:5f:90:bd:a3: ba:9d:26:d3:dc:58:1e:4a:11:86:7b:83:4c:82:e2: 38:1f:cc:fa:70:89:92:27:b9:d4:4a:d5:1f:db:eb: c8:b6:6d:96:70:95:fe:69:34:d3:64:1a:e9:2b:49: 3f:1a:74:c1:0f:11:10:1f:8e:f7:99:17:5c:f2:79: 21:22:0e:33:a5:73:e1:fd:33:2e:24:b7:8b:fa:f6: c9:c4:ad:4a:49:0a:ba:6b:26:b9:de:d7:83:7f:b2: 7b:0e:21:44:66:67:e4:3d:3d:f9:0a:7c:88:a0:30: 90:fa:70:7a:8f:8f:06:ce:93:6d:69:1a:63:e8:df: 0c:20:ce:32:7e:73:76:4f:88:10:3c:43:1d:f8:0a: e0:7b:73:d3:9e:71:42:fa:4c:f0:47:f7:d6:41:ac: a0:20:1f:5a:db:d0:03:df:39:01:77:5e:4d:8a:a6: 7b:63:5b:74:24:d2:09:fe:66:96:3e:18:dd:b4:9f: 47:6a:1f:ee:09:ec:34:46:68:ad:c2:a1:6a:09:da: 7f:c6:f9:35:67:7a:40:ca:2b:36:f1:92:87:e0:8b: b5:86:f0:b2:ae:58:55:76:4e:3e:83:bd:67:25:3d: 60:e7 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: A2:B7:69:71:24:E3:E0:4C:84:07:7E:51:9A:36:33:A3:82:D4:37:8C X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0BF32D37C176895B417F0761457ED6DC6757C94E3F1B8A7F2B755CB755B5DA8D/0/A2B7697124E3E04C84077E519A3633A382D4378C.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 45.173.68.0/22 IPv6: 2803:a060::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 267807 Signature Algorithm: sha256WithRSAEncryption 23:34:ff:2b:62:3e:15:63:e3:5d:c1:71:85:26:81:5e:92:0a: c7:d7:b0:3c:4a:c1:ef:a2:c4:90:4c:19:45:3a:0a:a1:d3:ce: e4:db:90:0b:1f:72:98:b3:18:0e:68:98:51:c9:87:87:4e:4a: 4b:12:5b:49:0a:6f:51:bf:45:58:e4:7d:63:3f:d8:e5:5f:b6: 5f:c8:2c:b2:0a:6b:58:c2:bc:1f:d4:fc:57:d8:87:c3:e0:1e: 3b:bc:37:d7:62:2d:82:ac:e7:c4:ac:fa:20:83:de:65:74:3e: 6f:b4:72:e7:72:45:cf:7a:31:30:20:ed:6f:51:42:78:86:cf: 43:7e:1b:20:1a:65:eb:1f:0a:95:e5:f3:9d:fe:c5:68:7f:7a: 9f:af:5b:82:9a:04:8e:24:67:10:ab:6d:7f:31:28:38:0a:82: 88:b7:82:5d:f8:bf:ad:06:db:de:bb:5c:14:53:ee:de:60:f2: 96:ee:07:0a:c6:a7:d5:40:bf:85:e9:dc:92:7b:f2:e8:bb:4c: fa:cf:56:24:05:bb:dc:12:1a:bd:5a:8b:57:7d:24:ed:ce:d9: f6:97:98:da:27:56:e1:8b:a3:2d:b1:d7:b8:f7:05:0f:ad:d6: 26:8b:21:03:d9:3e:84:82:83:5e:16:0d:71:a6:6c:59:e5:85: df:53:4f:21 -----BEGIN CERTIFICATE----- MIIGpTCCBY2gAwIBAgIUG8x4GSaaWvk2cGY5Q8qYXOGuh9cwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTA4MjExNzA3NTdaFw0yNjA4MjAxNzEyNTdaMDMxMTAvBgNV BAMTKEEyQjc2OTcxMjRFM0UwNEM4NDA3N0U1MTlBMzYzM0EzODJENDM3OEMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCn3VqWY7lIIQKl9sYUqy1Dn36q wQRf5MGNX5C9o7qdJtPcWB5KEYZ7g0yC4jgfzPpwiZInudRK1R/b68i2bZZwlf5p NNNkGukrST8adMEPERAfjveZF1zyeSEiDjOlc+H9My4kt4v69snErUpJCrprJrne 14N/snsOIURmZ+Q9PfkKfIigMJD6cHqPjwbOk21pGmPo3wwgzjJ+c3ZPiBA8Qx34 CuB7c9OecUL6TPBH99ZBrKAgH1rb0APfOQF3Xk2KpntjW3Qk0gn+ZpY+GN20n0dq H+4J7DRGaK3CoWoJ2n/G+TVnekDKKzbxkofgi7WG8LKuWFV2Tj6DvWclPWDnAgMB AAGjggOvMIIDqzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSit2lxJOPgTIQH flGaNjOjgtQ3jDAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMEJGMzJEMzdDMTc2ODk1QjQxN0YwNzYx NDU3RUQ2REM2NzU3Qzk0RTNGMUI4QTdGMkI3NTVDQjc1NUI1REE4RC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8wQkYzMkQzN0MxNzY4OTVCNDE3RjA3NjE0NTdFRDZEQzY3NTdDOTRFM0Yx QjhBN0YyQjc1NUNCNzU1QjVEQThELzAvQTJCNzY5NzEyNEUzRTA0Qzg0MDc3RTUx OUEzNjMzQTM4MkQ0Mzc4Qy5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMC4GCCsGAQUFBwEHAQH/BB8wHTAMBAIAATAGAwQCLa1EMA0EAgAC MAcDBQAoA6BgMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQWHzANBgkqhkiG9w0B AQsFAAOCAQEAIzT/K2I+FWPjXcFxhSaBXpIKx9ewPErB76LEkEwZRToKodPO5NuQ Cx9ymLMYDmiYUcmHh05KSxJbSQpvUb9FWOR9Yz/Y5V+2X8gssgprWMK8H9T8V9iH w+AeO7w312ItgqznxKz6IIPeZXQ+b7Ry53JFz3oxMCDtb1FCeIbPQ34bIBpl6x8K leXznf7FaH96n69bgpoEjiRnEKttfzEoOAqCiLeCXfi/rQbb3rtcFFPu3mDylu4H Csan1UC/hencknvy6LtM+s9WJAW73BIavVqLV30k7c7Z9peY2idW4YujLbHXuPcF D63WJoshA9k+hIKDXhYNcaZsWeWF31NPIQ== -----END CERTIFICATE-----Generated at Sat Aug 23 07:46:00 2025 by rpki-client