$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer (raw, json) Hash identifier: 9acILE7TfHnY/B+wKsICrkJnL5FDikzWz3bWH5OhsVg= Subject key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 60C7DA4EF9F53679083BBC806BC9B9804064D4B3 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 18:04:39 +0000 Certificate not after: Tue 04 Mar 2025 18:09:39 +0000 Subordinate resources: AS: 17072 AS: 22884 AS: 28414 IP: 138.186.28.0/22 IP: 148.230.128.0/17 IP: 186.96.0.0/18 IP: 186.96.128.0/18 IP: 187.188.0.0 -- 187.191.63.255 IP: 187.251.96.0 -- 187.251.159.255 IP: 187.251.192.0/18 IP: 189.201.0.0/17 IP: 189.203.0.0/16 IP: 200.34.221.0 -- 200.34.222.255 IP: 200.76.64.0/20 IP: 201.149.128.0/17 IP: 2806:2f0::/32 IP: 2806:380::/27 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 60:c7:da:4e:f9:f5:36:79:08:3b:bc:80:6b:c9:b9:80:40:64:d4:b3 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 18:04:39 2024 GMT Not After : Mar 4 18:09:39 2025 GMT Subject: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:c5:8f:76:47:3c:6e:d5:57:75:82:02:a0: bc:bc:9e:e6:d6:fb:7e:bc:12:6b:10:b4:9c:c1:8f: ca:7f:d8:9c:38:b7:49:55:fd:68:84:98:e4:8c:db: be:58:c3:1a:2a:ab:4a:96:4a:fc:70:e8:4a:a6:b8: 1e:2b:db:19:ae:89:ba:46:97:2c:a1:d5:63:66:b1: 4c:b5:61:00:28:0e:f2:6b:e3:86:1e:4f:dc:04:ab: 8b:17:04:35:53:43:e1:1c:ae:c7:b2:af:24:cc:e0: 06:3b:11:5c:df:84:c5:84:45:2a:1c:b2:13:a5:b1: 2d:6b:66:a3:83:b5:60:7e:73:7c:25:13:eb:7b:63: 9f:0e:e1:e0:9f:fa:4c:97:62:5a:0e:fe:ed:07:62: c6:06:66:2f:e5:f9:ef:aa:1a:e3:79:9b:cc:91:2b: 2b:7c:ac:f6:78:6c:35:0a:52:ba:8d:56:ce:17:92: 33:dc:af:73:ec:f4:bb:ef:fc:23:17:5b:c0:11:a0: da:e9:87:97:4c:f7:c8:17:8b:cd:f5:a5:f5:08:d2: b7:65:3e:5f:a0:e0:6c:74:70:f9:fb:a6:04:68:d7: 8d:0a:ca:42:20:3b:8a:95:6d:1a:d9:86:02:59:d5: 77:e1:25:8d:97:ae:22:2e:0c:a8:72:39:3b:8b:85: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.28.0/22 148.230.128.0/17 186.96.0.0/18 186.96.128.0/18 187.188.0.0-187.191.63.255 187.251.96.0-187.251.159.255 187.251.192.0/18 189.201.0.0/17 189.203.0.0/16 200.34.221.0-200.34.222.255 200.76.64.0/20 201.149.128.0/17 IPv6: 2806:2f0::/32 2806:380::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17072 22884 28414 Signature Algorithm: sha256WithRSAEncryption e1:a8:0a:15:8c:c6:8c:9e:2a:c8:19:ac:4a:08:bc:c6:39:92: df:65:1e:47:ff:93:d8:f1:56:73:a2:3c:aa:ad:89:c5:74:86: 03:70:d7:7f:d5:e8:88:c1:85:9f:eb:c7:82:ca:03:69:02:87: 57:17:d5:b6:3b:cf:9b:1c:97:0f:70:b3:12:54:4f:d5:36:f2: 1a:a6:20:a2:fa:4d:45:3f:c3:f5:46:b3:1f:a3:8c:88:16:b8: 93:37:67:23:4c:17:c3:a1:3f:5d:96:b7:6d:b3:db:b0:97:30: 2a:ce:d5:10:b5:cf:36:53:7c:5a:db:29:85:cd:f2:85:d9:5c: 09:62:50:c3:7a:61:f9:b2:ab:a8:ec:a1:b9:66:c9:53:10:5e: d6:da:6e:84:5a:33:82:5e:5a:63:17:35:bc:c4:de:1b:4b:dd: e3:88:2b:07:bc:3f:52:dc:be:18:31:2a:43:dd:87:a3:4b:36: 90:73:02:0c:3f:5a:ea:f5:e3:01:f0:7e:5f:34:74:3c:bc:71: bc:73:df:bf:23:70:7a:45:c5:a7:15:c6:46:1b:2d:5f:b4:58: bc:42:72:f6:bf:c3:36:b8:21:a4:5e:a9:8f:2c:0d:e9:4a:c3: 48:51:48:55:43:5b:8f:ee:1e:99:5d:d5:8e:8d:48:fb:20:07: 5e:c9:9c:27 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUYMfaTvn1NnkIO7yAa8m5gEBk1LMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxODA0MzlaFw0yNTAzMDQxODA5MzlaMDMxMTAvBgNV BAMTKDhBQUYxQzMxMkMyNDExMjUyQzdGNzc2M0EyNUM5NzVGNThBQTBCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2cWPdkc8btVXdYICoLy8nubW +368EmsQtJzBj8p/2Jw4t0lV/WiEmOSM275Ywxoqq0qWSvxw6EqmuB4r2xmuibpG lyyh1WNmsUy1YQAoDvJr44YeT9wEq4sXBDVTQ+EcrseyryTM4AY7EVzfhMWERSoc shOlsS1rZqODtWB+c3wlE+t7Y58O4eCf+kyXYloO/u0HYsYGZi/l+e+qGuN5m8yR Kyt8rPZ4bDUKUrqNVs4XkjPcr3Ps9Lvv/CMXW8ARoNrph5dM98gXi831pfUI0rdl Pl+g4Gx0cPn7pgRo140KykIgO4qVbRrZhgJZ1XfhJY2XriIuDKhyOTuLhWJfAgMB AAGjggQWMIIEEjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKrxwxLCQRJSx/ d2OiXJdfWKoL/zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFF MTU4MTZERjA3NDk3NjIxRDIzMTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0OTc2MjFEMjMx MDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYz QTI1Qzk3NUY1OEFBMEJGRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwZAQCAAEwXgMEAoq6HAMEB5Tm gAMEBrpgAAMEBrpggDALAwMCu7wDBAa7vwAwDAMEBbv7YAMEBbv7gAMEBrv7wAME B73JAAMDAL3LMAwDBADIIt0DBADIIt4DBATITEADBAfJlYAwFAQCAAIwDgMFACgG AvADBQUoBgOAMCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwCAkKwAgJZZAICbv4wDQYJ KoZIhvcNAQELBQADggEBAOGoChWMxoyeKsgZrEoIvMY5kt9lHkf/k9jxVnOiPKqt icV0hgNw13/V6IjBhZ/rx4LKA2kCh1cX1bY7z5sclw9wsxJUT9U28hqmIKL6TUU/ w/VGsx+jjIgWuJM3ZyNMF8OhP12Wt22z27CXMCrO1RC1zzZTfFrbKYXN8oXZXAli UMN6Yfmyq6jsoblmyVMQXtbaboRaM4JeWmMXNbzE3htL3eOIKwe8P1LcvhgxKkPd h6NLNpBzAgw/Wur14wHwfl80dDy8cbxz378jcHpFxacVxkYbLV+0WLxCcva/wza4 IaReqY8sDelKw0hRSFVDW4/uHpld1Y6NSPsgB17JnCc= -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:57 2024 by rpki-client on console-fra.rpki-client.org