$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer File: 8AAF1C312C2411252C7F7763A25C975F58AA0BFF.cer (raw, json) Hash identifier: scZlbd+gZGjDodnGVSjOvf+IjL24Ni8gQu7lgCv4TJ8= Subject key identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 6B89BF67688DEB1E6B3458ADCFFAD13BFCF47A17 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Wed 05 Feb 2025 15:38:46 +0000 Certificate not after: Wed 04 Feb 2026 15:43:46 +0000 Subordinate resources: AS: 17072 AS: 22884 AS: 28414 IP: 138.186.28.0/22 IP: 148.230.128.0/17 IP: 186.96.0.0/18 IP: 186.96.128.0/18 IP: 187.188.0.0 -- 187.191.63.255 IP: 187.251.96.0 -- 187.251.159.255 IP: 187.251.192.0/18 IP: 189.201.0.0/17 IP: 189.203.0.0/16 IP: 200.34.221.0 -- 200.34.222.255 IP: 200.76.64.0/20 IP: 201.149.128.0/17 IP: 2806:2f0::/32 IP: 2806:380::/27 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 10 Apr 2025 04:49:38 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6b:89:bf:67:68:8d:eb:1e:6b:34:58:ad:cf:fa:d1:3b:fc:f4:7a:17 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Feb 5 15:38:46 2025 GMT Not After : Feb 4 15:43:46 2026 GMT Subject: CN=8AAF1C312C2411252C7F7763A25C975F58AA0BFF Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:a2:d9:c5:8f:76:47:3c:6e:d5:57:75:82:02:a0: bc:bc:9e:e6:d6:fb:7e:bc:12:6b:10:b4:9c:c1:8f: ca:7f:d8:9c:38:b7:49:55:fd:68:84:98:e4:8c:db: be:58:c3:1a:2a:ab:4a:96:4a:fc:70:e8:4a:a6:b8: 1e:2b:db:19:ae:89:ba:46:97:2c:a1:d5:63:66:b1: 4c:b5:61:00:28:0e:f2:6b:e3:86:1e:4f:dc:04:ab: 8b:17:04:35:53:43:e1:1c:ae:c7:b2:af:24:cc:e0: 06:3b:11:5c:df:84:c5:84:45:2a:1c:b2:13:a5:b1: 2d:6b:66:a3:83:b5:60:7e:73:7c:25:13:eb:7b:63: 9f:0e:e1:e0:9f:fa:4c:97:62:5a:0e:fe:ed:07:62: c6:06:66:2f:e5:f9:ef:aa:1a:e3:79:9b:cc:91:2b: 2b:7c:ac:f6:78:6c:35:0a:52:ba:8d:56:ce:17:92: 33:dc:af:73:ec:f4:bb:ef:fc:23:17:5b:c0:11:a0: da:e9:87:97:4c:f7:c8:17:8b:cd:f5:a5:f5:08:d2: b7:65:3e:5f:a0:e0:6c:74:70:f9:fb:a6:04:68:d7: 8d:0a:ca:42:20:3b:8a:95:6d:1a:d9:86:02:59:d5: 77:e1:25:8d:97:ae:22:2e:0c:a8:72:39:3b:8b:85: 62:5f Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8A:AF:1C:31:2C:24:11:25:2C:7F:77:63:A2:5C:97:5F:58:AA:0B:FF X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/A0BF9E063294C735B835AEAE15816DF07497621D2310409C57729AA68F773CB4/0/8AAF1C312C2411252C7F7763A25C975F58AA0BFF.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.186.28.0/22 148.230.128.0/17 186.96.0.0/18 186.96.128.0/18 187.188.0.0-187.191.63.255 187.251.96.0-187.251.159.255 187.251.192.0/18 189.201.0.0/17 189.203.0.0/16 200.34.221.0-200.34.222.255 200.76.64.0/20 201.149.128.0/17 IPv6: 2806:2f0::/32 2806:380::/27 sbgp-autonomousSysNum: critical Autonomous System Numbers: 17072 22884 28414 Signature Algorithm: sha256WithRSAEncryption 01:a8:d3:d3:82:5e:ea:5c:04:17:05:b0:77:4b:41:0a:19:35: dc:a4:d7:01:72:65:15:14:ac:96:9d:eb:ca:46:96:c2:2e:16: 48:93:b9:49:3e:b1:89:a2:68:b3:21:27:48:66:7e:5c:a7:40: 39:fe:1e:5b:2c:df:e0:76:b9:50:f9:74:3c:3e:d4:26:6d:e7: 69:01:47:66:d9:9a:6e:39:5e:ef:18:e4:16:3b:ac:52:cb:6b: 30:7c:2e:fb:15:c4:34:a4:25:a0:d5:07:89:54:8e:46:19:66: 10:7b:e4:13:cc:42:20:08:30:a9:eb:ee:57:43:e0:fa:49:10: ad:d0:cb:67:96:ab:ae:d5:5b:6a:e0:66:7a:b0:0f:17:35:b5: 5c:df:5b:a6:86:69:f0:65:a5:04:b9:f0:3d:28:76:70:f0:31: b4:b4:8d:c5:8d:33:da:30:5c:ce:d1:e9:3a:ba:62:7a:7b:65: 08:58:a0:bc:a9:3b:c1:9c:d2:49:1c:bf:94:d6:1f:5a:59:fd: de:fa:6a:8f:17:23:34:68:7a:9c:98:e1:72:fc:d0:45:b7:ae: 31:3d:20:4e:3c:a3:11:bd:80:d5:72:93:bf:6c:ef:c5:0a:10: d8:f8:2b:39:9f:fc:d4:24:9a:bd:4a:88:ff:c8:51:4a:49:ff: 33:f3:18:15 -----BEGIN CERTIFICATE----- MIIHDDCCBfSgAwIBAgIUa4m/Z2iN6x5rNFitz/rRO/z0ehcwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNTAyMDUxNTM4NDZaFw0yNjAyMDQxNTQzNDZaMDMxMTAvBgNV BAMTKDhBQUYxQzMxMkMyNDExMjUyQzdGNzc2M0EyNUM5NzVGNThBQTBCRkYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQCi2cWPdkc8btVXdYICoLy8nubW +368EmsQtJzBj8p/2Jw4t0lV/WiEmOSM275Ywxoqq0qWSvxw6EqmuB4r2xmuibpG lyyh1WNmsUy1YQAoDvJr44YeT9wEq4sXBDVTQ+EcrseyryTM4AY7EVzfhMWERSoc shOlsS1rZqODtWB+c3wlE+t7Y58O4eCf+kyXYloO/u0HYsYGZi/l+e+qGuN5m8yR Kyt8rPZ4bDUKUrqNVs4XkjPcr3Ps9Lvv/CMXW8ARoNrph5dM98gXi831pfUI0rdl Pl+g4Gx0cPn7pgRo140KykIgO4qVbRrZhgJZ1XfhJY2XriIuDKhyOTuLhWJfAgMB AAGjggQWMIIEEjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSKrxwxLCQRJSx/ d2OiXJdfWKoL/zAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvQTBCRjlFMDYzMjk0QzczNUI4MzVBRUFF MTU4MTZERjA3NDk3NjIxRDIzMTA0MDlDNTc3MjlBQTY4Rjc3M0NCNC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy9BMEJGOUUwNjMyOTRDNzM1QjgzNUFFQUUxNTgxNkRGMDc0OTc2MjFEMjMx MDQwOUM1NzcyOUFBNjhGNzczQ0I0LzAvOEFBRjFDMzEyQzI0MTEyNTJDN0Y3NzYz QTI1Qzk3NUY1OEFBMEJGRi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMIGNBggrBgEFBQcBBwEB/wR+MHwwZAQCAAEwXgMEAoq6HAMEB5Tm gAMEBrpgAAMEBrpggDALAwMCu7wDBAa7vwAwDAMEBbv7YAMEBbv7gAMEBrv7wAME B73JAAMDAL3LMAwDBADIIt0DBADIIt4DBATITEADBAfJlYAwFAQCAAIwDgMFACgG AvADBQUoBgOAMCEGCCsGAQUFBwEIAQH/BBIwEKAOMAwCAkKwAgJZZAICbv4wDQYJ KoZIhvcNAQELBQADggEBAAGo09OCXupcBBcFsHdLQQoZNdyk1wFyZRUUrJad68pG lsIuFkiTuUk+sYmiaLMhJ0hmflynQDn+Hlss3+B2uVD5dDw+1CZt52kBR2bZmm45 Xu8Y5BY7rFLLazB8LvsVxDSkJaDVB4lUjkYZZhB75BPMQiAIMKnr7ldD4PpJEK3Q y2eWq67VW2rgZnqwDxc1tVzfW6aGafBlpQS58D0odnDwMbS0jcWNM9owXM7R6Tq6 Ynp7ZQhYoLypO8Gc0kkcv5TWH1pZ/d76ao8XIzRoepyY4XL80EW3rjE9IE48oxG9 gNVyk79s78UKENj4Kzmf/NQkmr1KiP/IUUpJ/zPzGBU= -----END CERTIFICATE-----Generated at Mon Apr 7 00:55:32 2025 by rpki-client