$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.cer File: 8C02E0E579C60369B9E5962BC7E700427B6915B6.cer (raw, json) Hash identifier: 7YDKMhL9xJjse2uE3kD2lG4gyVLJitLez/RvqTrTc+0= Subject key identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 2E235089A11B89FE47672058D40FBFBF058A97CE Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:55:00 +0000 Certificate not after: Tue 04 Mar 2025 18:00:00 +0000 Subordinate resources: AS: 52308 IP: 138.118.36.0/22 IP: 170.84.168.0/22 IP: 181.114.192.0/19 IP: 181.174.128.0/19 IP: 190.105.176.0/20 IP: 190.108.32.0/19 IP: 2803:c400::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Wed 12 Jun 2024 06:58:43 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 2e:23:50:89:a1:1b:89:fe:47:67:20:58:d4:0f:bf:bf:05:8a:97:ce Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:55:00 2024 GMT Not After : Mar 4 18:00:00 2025 GMT Subject: CN=8C02E0E579C60369B9E5962BC7E700427B6915B6 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ec:6a:8c:e1:af:ec:4d:18:f4:92:4c:db:47:90: 33:ae:7c:0d:ef:e9:f9:bc:29:27:0d:c4:76:99:a3: d8:9b:f1:41:54:82:dd:59:ba:87:47:59:8b:02:20: 78:0f:bb:03:1d:df:4b:47:3c:d9:eb:06:d9:2b:25: 89:86:6a:38:b1:06:06:73:7f:e8:c7:59:e2:ce:32: 79:64:c2:69:bf:0e:06:28:fa:18:85:85:7f:50:b9: 02:d3:cc:9a:e5:5a:ea:9d:0a:53:c4:de:c2:73:c9: 36:0d:24:4c:80:65:eb:15:e1:19:99:46:11:da:4d: d8:67:63:05:f0:06:e8:6a:f1:a0:fa:ea:40:c7:21: 96:7a:e9:88:b6:40:57:51:8b:7c:ff:5b:55:9a:c7: ee:24:1e:5c:1a:b0:10:27:04:df:ef:62:2c:4b:a1: 20:3c:f2:53:7d:82:64:74:2b:ff:c6:e8:9c:d9:22: e1:e9:42:92:87:a4:c8:01:b5:4c:fb:3b:8c:44:4f: 31:1f:27:5a:79:e3:53:80:c8:e7:cc:ee:99:e5:83: 0c:a1:6f:e1:3f:d8:ad:54:d4:a9:a0:f5:e9:d8:54: 2a:11:ae:dc:4a:5f:fa:11:88:c4:54:db:06:88:d2: 9e:81:e4:7c:ce:18:b8:b0:b1:44:8a:ef:f1:13:77: d1:99 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: 8C:02:E0:E5:79:C6:03:69:B9:E5:96:2B:C7:E7:00:42:7B:69:15:B6 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/21F5134D3F7842FC83A15DEBA24B51C70BE726DAF9F2D16AC545EEAD744327FE/0/8C02E0E579C60369B9E5962BC7E700427B6915B6.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.118.36.0/22 170.84.168.0/22 181.114.192.0/19 181.174.128.0/19 190.105.176.0/20 190.108.32.0/19 IPv6: 2803:c400::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 52308 Signature Algorithm: sha256WithRSAEncryption 1e:61:b0:7b:50:5f:d0:ee:c1:3f:84:c3:53:e9:bc:c5:4f:a3: b3:a8:07:85:f8:e4:77:3a:66:60:ea:da:97:99:b9:03:3a:d0: 85:62:2d:87:b7:0d:2c:27:45:58:93:5b:54:08:e0:be:84:85: cf:34:58:f3:e4:78:0e:c1:37:82:82:4a:c4:b0:e1:9e:ed:4d: e7:a3:3c:2a:cc:cc:d8:fa:b3:51:3d:8e:88:91:60:90:00:76: 3f:7d:d0:21:58:d9:fd:f1:8c:5c:f9:2d:9d:04:ca:98:e5:dc: 6b:86:a6:a9:4b:9b:35:58:b4:bc:1a:53:e6:6e:ab:ed:a9:51: 38:c3:27:3c:41:99:64:27:17:f6:c5:cc:04:61:16:09:ae:fb: 88:c5:52:4f:60:1b:0e:6d:1e:5f:26:22:11:0e:35:97:64:92: 1a:16:50:ab:ee:4a:8a:8b:c4:ef:f9:2b:84:8f:c4:ae:4a:2f: 08:55:b4:b6:8c:8c:ff:1e:18:9f:da:43:28:e1:46:a7:34:57: 80:93:94:5d:0c:b5:6c:17:0b:0f:e3:a6:b2:df:77:49:e9:01: 71:a6:7d:d3:fb:db:3d:82:cb:0e:3c:79:e3:1b:93:7b:3d:0c: 73:bc:07:41:bc:34:01:5b:3e:80:4d:88:b6:dd:5a:67:df:50: a5:0e:6d:26 -----BEGIN CERTIFICATE----- MIIGwzCCBaugAwIBAgIULiNQiaEbif5HZyBY1A+/vwWKl84wDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzU1MDBaFw0yNTAzMDQxODAwMDBaMDMxMTAvBgNV BAMTKDhDMDJFMEU1NzlDNjAzNjlCOUU1OTYyQkM3RTcwMDQyN0I2OTE1QjYwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDsaozhr+xNGPSSTNtHkDOufA3v 6fm8KScNxHaZo9ib8UFUgt1ZuodHWYsCIHgPuwMd30tHPNnrBtkrJYmGajixBgZz f+jHWeLOMnlkwmm/DgYo+hiFhX9QuQLTzJrlWuqdClPE3sJzyTYNJEyAZesV4RmZ RhHaTdhnYwXwBuhq8aD66kDHIZZ66Yi2QFdRi3z/W1Wax+4kHlwasBAnBN/vYixL oSA88lN9gmR0K//G6JzZIuHpQpKHpMgBtUz7O4xETzEfJ1p541OAyOfM7pnlgwyh b+E/2K1U1Kmg9enYVCoRrtxKX/oRiMRU2waI0p6B5HzOGLiwsUSK7/ETd9GZAgMB AAGjggPNMIIDyTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSMAuDlecYDabnl livH5wBCe2kVtjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjFGNTEzNEQzRjc4NDJGQzgzQTE1REVC QTI0QjUxQzcwQkU3MjZEQUY5RjJEMTZBQzU0NUVFQUQ3NDQzMjdGRS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8yMUY1MTM0RDNGNzg0MkZDODNBMTVERUJBMjRCNTFDNzBCRTcyNkRBRjlG MkQxNkFDNTQ1RUVBRDc0NDMyN0ZFLzAvOEMwMkUwRTU3OUM2MDM2OUI5RTU5NjJC QzdFNzAwNDI3QjY5MTVCNi5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEwGCCsGAQUFBwEHAQH/BD0wOzAqBAIAATAkAwQCinYkAwQCqlSo AwQFtXLAAwQFta6AAwQEvmmwAwQFvmwgMA0EAgACMAcDBQAoA8QAMBoGCCsGAQUF BwEIAQH/BAswCaAHMAUCAwDMVDANBgkqhkiG9w0BAQsFAAOCAQEAHmGwe1Bf0O7B P4TDU+m8xU+js6gHhfjkdzpmYOral5m5AzrQhWIth7cNLCdFWJNbVAjgvoSFzzRY 8+R4DsE3goJKxLDhnu1N56M8KszM2PqzUT2OiJFgkAB2P33QIVjZ/fGMXPktnQTK mOXca4amqUubNVi0vBpT5m6r7alROMMnPEGZZCcX9sXMBGEWCa77iMVST2AbDm0e XyYiEQ41l2SSGhZQq+5KiovE7/krhI/ErkovCFW0toyM/x4Yn9pDKOFGpzRXgJOU XQy1bBcLD+Omst93SekBcaZ90/vbPYLLDjx54xuTez0Mc7wHQbw0AVs+gE2Itt1a Z99QpQ5tJg== -----END CERTIFICATE-----Generated at Sat Jun 8 00:54:10 2024 by rpki-client on console-ams.rpki-client.org