$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer File: 0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.cer (raw, json) Hash identifier: mCcXKO337Wkaq0Kl9eLvTr7/axHJ5XK2u4D/N0S8nnE= Subject key identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 02DF59509E53408867D521ECD624AFD1EC06D201 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:36:41 +0000 Certificate not after: Tue 04 Mar 2025 17:41:41 +0000 Subordinate resources: AS: 264750 IP: 143.137.80.0/22 IP: 168.232.108.0/22 IP: 170.82.24.0/22 IP: 170.239.164.0/22 IP: 170.244.80.0/22 IP: 2803:3640::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Mon 09 Sep 2024 07:27:19 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 02:df:59:50:9e:53:40:88:67:d5:21:ec:d6:24:af:d1:ec:06:d2:01 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:36:41 2024 GMT Not After : Mar 4 17:41:41 2025 GMT Subject: CN=0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a4:7a:d3:f3:34:f0:2c:b1:e4:c9:ab:6b:22:dc: 83:b6:7b:e0:cb:86:63:87:39:ad:c7:cb:88:58:ce: a0:40:da:18:a8:4f:33:5a:4e:47:06:22:67:9d:54: 02:50:34:67:dc:2c:40:7f:28:c8:60:03:76:72:5e: ff:2e:64:84:67:61:a3:e5:5a:c9:60:e6:43:78:25: f4:cd:e8:b5:83:08:fb:54:5d:3c:1c:44:72:fa:2b: 92:86:c1:8c:17:fb:67:e1:4b:e5:60:b7:35:a7:0e: 32:ff:93:b1:50:7e:65:4b:4f:b8:66:a1:ec:96:7b: b3:d0:25:8e:8c:3a:83:cf:78:f5:9a:77:d9:b9:51: 56:05:77:fb:f5:30:c2:c3:5d:6a:1c:1b:34:70:96: 0e:60:28:27:3e:57:f2:03:e0:6f:d5:a1:bf:25:7f: 2c:e0:ed:bc:c4:10:d4:d5:4a:0b:a6:b4:98:f9:6e: 60:6e:0d:e3:84:d2:18:6e:25:24:e5:9c:d2:3c:e8: c0:b9:5a:01:75:2a:4f:59:5b:b9:0a:a7:6f:03:62: a5:ec:c0:eb:c9:4c:c1:cf:c3:06:99:c9:3e:7b:34: a4:c2:40:ca:59:ac:fa:3f:92:a8:0b:e8:04:62:49: 8f:89:8a:fa:b8:0d:81:ec:6f:f2:a5:8c:42:67:f0: 53:7d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 0B:8A:C9:2C:FB:A0:AF:5A:DE:74:58:7F:B6:77:74:AA:B8:2C:44:63 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2353C53CD7C88C7D1437D00591FF34FC1DC1E219737B14E6386A048F7C7FD43F/0/0B8AC92CFBA0AF5ADE74587FB67774AAB82C4463.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 143.137.80.0/22 168.232.108.0/22 170.82.24.0/22 170.239.164.0/22 170.244.80.0/22 IPv6: 2803:3640::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 264750 Signature Algorithm: sha256WithRSAEncryption 1b:5c:02:ff:fe:47:47:02:63:ef:f3:ba:b1:45:99:83:03:93: 6e:13:fe:a4:bf:b0:d0:61:9f:94:c0:99:e0:3b:35:d5:5a:ad: ea:6c:79:ce:38:f8:4a:03:54:88:88:14:7b:62:c2:22:6f:a8: b4:a4:1e:29:e3:59:fb:6b:b7:1b:76:6d:0f:b6:20:9f:31:40: c7:99:c3:35:b9:3f:68:a4:42:20:c4:0d:4c:1d:3d:65:b2:88: e7:14:56:7e:24:29:cf:ce:50:0f:76:c1:bc:82:a3:c4:88:ea: 75:09:18:1d:33:e6:10:1d:01:e1:c0:6b:cb:0f:b0:23:eb:46: 25:78:02:26:16:3f:8b:4a:7d:d7:2a:0e:dc:34:5e:10:2b:95: 8e:d6:a8:29:91:d6:5f:de:fc:9b:24:d0:9d:d8:fd:c0:bc:72: 9c:0e:78:4f:e4:3b:43:45:5b:b7:e4:3e:53:eb:ed:3f:55:44: d1:9c:47:a9:66:96:68:1b:6d:d9:2f:34:31:77:dc:67:d9:54: 63:17:ef:56:b1:7d:e6:ef:31:1a:1e:1a:db:53:06:a6:f4:18: 7b:1a:4b:b5:98:48:a1:de:0c:66:fb:c9:48:67:eb:57:4a:d2: fb:38:0f:ed:ee:9e:44:e6:ba:ac:1b:d3:59:99:ea:91:67:6a: b9:29:f1:6e -----BEGIN CERTIFICATE----- MIIGvTCCBaWgAwIBAgIUAt9ZUJ5TQIhn1SHs1iSv0ewG0gEwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM2NDFaFw0yNTAzMDQxNzQxNDFaMDMxMTAvBgNV BAMTKDBCOEFDOTJDRkJBMEFGNUFERTc0NTg3RkI2Nzc3NEFBQjgyQzQ0NjMwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCketPzNPAsseTJq2si3IO2e+DL hmOHOa3Hy4hYzqBA2hioTzNaTkcGImedVAJQNGfcLEB/KMhgA3ZyXv8uZIRnYaPl Wslg5kN4JfTN6LWDCPtUXTwcRHL6K5KGwYwX+2fhS+VgtzWnDjL/k7FQfmVLT7hm oeyWe7PQJY6MOoPPePWad9m5UVYFd/v1MMLDXWocGzRwlg5gKCc+V/ID4G/Vob8l fyzg7bzEENTVSgumtJj5bmBuDeOE0hhuJSTlnNI86MC5WgF1Kk9ZW7kKp28DYqXs wOvJTMHPwwaZyT57NKTCQMpZrPo/kqgL6ARiSY+Jivq4DYHsb/KljEJn8FN9AgMB AAGjggPHMIIDwzAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBQLisks+6CvWt50 WH+2d3SquCxEYzAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjM1M0M1M0NEN0M4OEM3RDE0MzdEMDA1 OTFGRjM0RkMxREMxRTIxOTczN0IxNEU2Mzg2QTA0OEY3QzdGRDQzRi8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMzUzQzUzQ0Q3Qzg4QzdEMTQzN0QwMDU5MUZGMzRGQzFEQzFFMjE5NzM3 QjE0RTYzODZBMDQ4RjdDN0ZENDNGLzAvMEI4QUM5MkNGQkEwQUY1QURFNzQ1ODdG QjY3Nzc0QUFCODJDNDQ2My5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCj4lQAwQCqOhs AwQCqlIYAwQCqu+kAwQCqvRQMA0EAgACMAcDBQAoAzZAMBoGCCsGAQUFBwEIAQH/ BAswCaAHMAUCAwQKLjANBgkqhkiG9w0BAQsFAAOCAQEAG1wC//5HRwJj7/O6sUWZ gwOTbhP+pL+w0GGflMCZ4Ds11Vqt6mx5zjj4SgNUiIgUe2LCIm+otKQeKeNZ+2u3 G3ZtD7YgnzFAx5nDNbk/aKRCIMQNTB09ZbKI5xRWfiQpz85QD3bBvIKjxIjqdQkY HTPmEB0B4cBryw+wI+tGJXgCJhY/i0p91yoO3DReECuVjtaoKZHWX978myTQndj9 wLxynA54T+Q7Q0Vbt+Q+U+vtP1VE0ZxHqWaWaBtt2S80MXfcZ9lUYxfvVrF95u8x Gh4a21MGpvQYexpLtZhIod4MZvvJSGfrV0rS+zgP7e6eROa6rBvTWZnqkWdquSnx bg== -----END CERTIFICATE-----Generated at Thu Sep 5 15:47:39 2024 by rpki-client on console-ams.rpki-client.org