$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer File: AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.cer (raw, json) Hash identifier: t8DIpyv+FmOwiEgYIY64U/OAiDawsp1TfrbrQK+a9xA= Subject key identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 7CFD17DC3AA491306F7AFE56A88D6E88BEE5C3A9 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:59:17 +0000 Certificate not after: Tue 04 Mar 2025 18:04:17 +0000 Subordinate resources: AS: 269750 IP: 138.186.176.0/22 IP: 168.194.108.0/22 IP: 190.8.168.0/22 IP: 2800:bd0::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 03 Jul 2024 17:06:28 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 7c:fd:17:dc:3a:a4:91:30:6f:7a:fe:56:a8:8d:6e:88:be:e5:c3:a9 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:59:17 2024 GMT Not After : Mar 4 18:04:17 2025 GMT Subject: CN=AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bc:30:35:e3:07:95:c9:48:61:89:76:42:9f:7b: c8:31:76:15:c5:56:36:45:3c:03:5a:23:cb:b8:f4: 1d:c1:d2:f8:43:fb:03:e6:f9:e9:3c:88:60:fb:d0: 26:c5:da:45:36:ad:48:51:ed:e5:e6:3e:54:e4:18: 44:e1:0f:63:09:b6:b8:fa:60:60:5b:ee:ac:80:a5: f7:cf:04:2d:ec:2c:8e:72:27:88:b2:ff:30:80:62: 45:b6:e9:9c:bc:cc:99:18:49:77:28:d4:6a:b0:a1: bf:f3:cd:03:30:ed:75:89:e0:cf:6b:38:4f:85:33: d2:9a:63:2f:e2:52:99:fc:17:77:34:6b:f5:3e:1d: bb:f9:63:4e:13:d6:19:73:43:3c:a6:e9:84:9c:a3: 3b:df:1b:7a:39:52:26:89:9d:24:13:e8:3a:20:94: b9:b1:f1:17:f2:c8:8b:a3:dd:44:36:4d:7c:17:f6: 29:f0:5b:7b:2d:26:f5:d1:e9:45:51:f8:85:1b:ad: 36:c6:f9:32:c9:61:58:32:77:8f:19:15:d1:7c:27: 4e:be:b3:5e:14:ce:04:aa:03:97:40:82:03:23:4b: 86:e9:0c:28:fc:18:6b:00:54:d7:80:ee:46:86:e4: d9:f4:81:84:47:ad:69:6f:0f:a4:1b:55:14:cd:01: af:3d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: AA:EF:A3:2E:9B:07:7F:00:45:F6:6A:8C:6B:2E:E5:82:0F:AB:04:C5 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4DBBE1A56FFD61AF1DF26A3F4F4079B8A5611EC5115BBDC795701DC1445582BE/0/AAEFA32E9B077F0045F66A8C6B2EE5820FAB04C5.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.176.0/22 168.194.108.0/22 190.8.168.0/22 IPv6: 2800:bd0::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 269750 Signature Algorithm: sha256WithRSAEncryption 74:9d:36:d3:13:7e:f9:fc:f6:d2:94:fc:7e:cc:8e:25:86:ff: 21:f8:18:94:72:e8:e7:86:ae:4c:1d:59:a6:a1:05:26:bb:65: 18:2c:dc:4d:27:e9:13:13:79:de:cd:da:5c:a5:18:ee:1d:15: c0:b1:7f:48:ce:c4:47:bd:7c:55:1c:ec:46:84:74:fb:f3:c1: 8d:d6:68:77:cf:ec:b3:52:c7:57:6c:b3:5c:4b:40:74:3f:47: 93:de:cd:24:41:cd:ba:a0:71:f5:7f:07:f1:77:e5:0c:e9:8c: 17:cf:4a:87:e0:85:25:4e:bd:d5:3a:ae:ad:9f:88:76:63:24: 90:63:4a:7e:d4:84:1a:06:11:66:ec:e8:37:48:68:20:69:cb: a9:89:a5:6b:44:ad:a6:6c:a1:dd:0f:4d:a2:7f:e9:a8:00:c8: 0b:74:46:36:2a:00:ae:d9:59:35:8a:dd:0f:24:24:94:1d:e6: 70:e9:52:75:fe:08:48:fa:ca:fb:c7:da:fe:e0:f1:f7:2e:b1: 47:a2:19:67:63:8d:cd:ab:97:2d:8e:43:f1:37:ce:37:e0:39: a3:0b:3f:80:14:f3:63:5b:55:5e:39:d6:96:0a:45:94:65:1d: 0c:23:9c:31:6d:fc:96:8d:09:fc:3f:04:2c:8d:e4:00:f1:98: 3f:c2:cd:c8 -----BEGIN CERTIFICATE----- MIIGsTCCBZmgAwIBAgIUfP0X3DqkkTBvev5WqI1uiL7lw6kwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU5MTdaFw0yNTAzMDQxODA0MTdaMDMxMTAvBgNV BAMTKEFBRUZBMzJFOUIwNzdGMDA0NUY2NkE4QzZCMkVFNTgyMEZBQjA0QzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC8MDXjB5XJSGGJdkKfe8gxdhXF VjZFPANaI8u49B3B0vhD+wPm+ek8iGD70CbF2kU2rUhR7eXmPlTkGEThD2MJtrj6 YGBb7qyApffPBC3sLI5yJ4iy/zCAYkW26Zy8zJkYSXco1Gqwob/zzQMw7XWJ4M9r OE+FM9KaYy/iUpn8F3c0a/U+Hbv5Y04T1hlzQzym6YScozvfG3o5UiaJnSQT6Dog lLmx8RfyyIuj3UQ2TXwX9inwW3stJvXR6UVR+IUbrTbG+TLJYVgyd48ZFdF8J06+ s14UzgSqA5dAggMjS4bpDCj8GGsAVNeA7kaG5Nn0gYRHrWlvD6QbVRTNAa89AgMB AAGjggO7MIIDtzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSq76Mumwd/AEX2 aoxrLuWCD6sExTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNERCQkUxQTU2RkZENjFBRjFERjI2QTNG NEY0MDc5QjhBNTYxMUVDNTExNUJCREM3OTU3MDFEQzE0NDU1ODJCRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy80REJCRTFBNTZGRkQ2MUFGMURGMjZBM0Y0RjQwNzlCOEE1NjExRUM1MTE1 QkJEQzc5NTcwMURDMTQ0NTU4MkJFLzAvQUFFRkEzMkU5QjA3N0YwMDQ1RjY2QThD NkIyRUU1ODIwRkFCMDRDNS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMDoGCCsGAQUFBwEHAQH/BCswKTAYBAIAATASAwQCirqwAwQCqMJs AwQCvgioMA0EAgACMAcDBQAoAAvQMBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwQd tjANBgkqhkiG9w0BAQsFAAOCAQEAdJ020xN++fz20pT8fsyOJYb/IfgYlHLo54au TB1ZpqEFJrtlGCzcTSfpExN53s3aXKUY7h0VwLF/SM7ER718VRzsRoR0+/PBjdZo d8/ss1LHV2yzXEtAdD9Hk97NJEHNuqBx9X8H8XflDOmMF89Kh+CFJU691TqurZ+I dmMkkGNKftSEGgYRZuzoN0hoIGnLqYmla0Stpmyh3Q9Non/pqADIC3RGNioArtlZ NYrdDyQklB3mcOlSdf4ISPrK+8fa/uDx9y6xR6IZZ2ONzauXLY5D8TfON+A5ows/ gBTzY1tVXjnWlgpFlGUdDCOcMW38lo0J/D8ELI3kAPGYP8LNyA== -----END CERTIFICATE-----Generated at Sat Jun 29 07:19:05 2024 by rpki-client on console-ams.rpki-client.org