$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer File: BB049027AED3847EFEF3E2D27C66FE9D520E44B1.cer (raw, json) Hash identifier: Qv23GmaARvUnPisLoNHfv18Kl9n0iZu2JIQYXl1PWRM= Subject key identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 0D41080EC02AF7F96D1C0AB6668A8B53CD36CAC8 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:35:20 +0000 Certificate not after: Tue 04 Mar 2025 17:40:20 +0000 Subordinate resources: AS: 27833 IP: 170.231.76.0/22 IP: 181.197.192.0/18 IP: 190.1.0.0/18 IP: 190.97.0.0/18 IP: 190.211.192.0/19 IP: 2800:560::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Tue 04 Jun 2024 22:21:44 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 0d:41:08:0e:c0:2a:f7:f9:6d:1c:0a:b6:66:8a:8b:53:cd:36:ca:c8 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:35:20 2024 GMT Not After : Mar 4 17:40:20 2025 GMT Subject: CN=BB049027AED3847EFEF3E2D27C66FE9D520E44B1 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:ba:13:ef:be:71:72:63:58:d2:29:08:15:c5:c1: 73:d9:01:ae:cd:83:92:64:ce:8e:ec:7b:ba:ab:06: 77:ab:3c:5b:dd:e7:8c:c1:98:9a:c0:6c:94:99:89: d5:4e:27:ff:67:1b:b0:b3:d3:12:3d:27:53:4a:22: 53:c6:6a:18:08:5a:16:32:12:51:bb:e7:e4:88:5c: 7e:b1:8d:c7:c2:93:ee:e3:0d:18:50:09:05:66:05: 84:95:1f:c9:41:b6:5b:9a:1e:98:6e:40:8c:3c:46: 39:16:ac:b4:ba:7b:47:49:d2:67:be:21:5d:aa:f3: 15:4d:a8:db:c2:1b:52:23:2e:65:9f:fa:4e:83:a4: 4b:4d:f7:ad:fb:76:3e:16:b9:a1:b4:a1:03:34:99: 22:8f:ca:97:cf:93:28:cd:f2:31:bb:85:f4:32:a2: 9f:83:16:bd:5d:cb:bf:5b:22:ba:e2:43:75:24:25: 7f:ec:84:75:e0:7b:28:7b:b9:25:44:6c:b7:15:60: e2:33:96:cd:7c:e7:c7:ff:c3:16:42:b1:66:7a:04: 6b:d5:6e:5b:c1:c0:35:4f:6c:e8:f9:3f:4e:ed:d8: da:1b:f1:36:b0:89:70:07:63:71:b7:a7:74:19:22: a0:35:26:4c:5f:3b:d4:af:68:f3:b5:b0:06:b7:d8: 27:8d Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:04:90:27:AE:D3:84:7E:FE:F3:E2:D2:7C:66:FE:9D:52:0E:44:B1 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/83A255FCE12BB26D5E1202F7987362AF9551BFC5B0336BD0ED979FDAEBA20571/0/BB049027AED3847EFEF3E2D27C66FE9D520E44B1.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 170.231.76.0/22 181.197.192.0/18 190.1.0.0/18 190.97.0.0/18 190.211.192.0/19 IPv6: 2800:560::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 27833 Signature Algorithm: sha256WithRSAEncryption 44:f0:3d:a2:d9:65:98:0d:65:f4:0d:8b:93:ff:e0:ee:0a:64: 62:57:f7:16:93:73:17:34:07:41:4f:26:c7:70:62:fc:2d:70: 75:eb:53:87:b3:a8:f8:0e:93:5f:3e:93:5b:a4:cb:66:7f:f4: e0:a9:75:7a:50:24:3d:46:4c:69:ca:1c:71:96:df:2d:65:f2: 47:eb:ab:77:33:87:c9:14:1c:11:6a:2e:4b:8c:55:67:91:2d: ef:f9:3a:ea:6b:f8:a4:a6:0c:84:e2:4c:dc:e8:8d:d1:a3:18: 8a:48:4a:b3:4a:db:e4:a8:23:9a:09:99:89:00:f4:40:c5:6c: ab:a0:cc:40:0b:38:6e:4c:4a:43:d1:9d:55:8b:60:f3:d4:7c: 7f:81:fb:97:01:90:d6:ab:62:78:54:6c:2c:e3:60:92:92:dd: 9e:da:c1:25:f2:e0:c0:d1:53:a5:d5:2f:b3:e0:f4:76:f4:39: 21:c9:05:8f:f6:86:4c:28:31:aa:d7:a0:4c:92:ec:81:46:7f: 81:17:8b:47:cd:89:57:ee:bc:36:69:02:fe:c6:7a:f4:6b:90: 24:77:2a:3e:ef:b2:b1:e5:06:79:8e:9f:7e:7a:28:c3:07:0f: d5:78:2f:80:52:c3:10:60:b9:9e:02:76:93:de:86:89:63:60: 6f:21:b0:45 -----BEGIN CERTIFICATE----- MIIGvDCCBaSgAwIBAgIUDUEIDsAq9/ltHAq2ZoqLU802ysgwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzM1MjBaFw0yNTAzMDQxNzQwMjBaMDMxMTAvBgNV BAMTKEJCMDQ5MDI3QUVEMzg0N0VGRUYzRTJEMjdDNjZGRTlENTIwRTQ0QjEwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC6E+++cXJjWNIpCBXFwXPZAa7N g5Jkzo7se7qrBnerPFvd54zBmJrAbJSZidVOJ/9nG7Cz0xI9J1NKIlPGahgIWhYy ElG75+SIXH6xjcfCk+7jDRhQCQVmBYSVH8lBtluaHphuQIw8RjkWrLS6e0dJ0me+ IV2q8xVNqNvCG1IjLmWf+k6DpEtN9637dj4WuaG0oQM0mSKPypfPkyjN8jG7hfQy op+DFr1dy79bIrriQ3UkJX/shHXgeyh7uSVEbLcVYOIzls1858f/wxZCsWZ6BGvV blvBwDVPbOj5P07t2Nob8TawiXAHY3G3p3QZIqA1JkxfO9SvaPO1sAa32CeNAgMB AAGjggPGMIIDwjAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7BJAnrtOEfv7z 4tJ8Zv6dUg5EsTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODNBMjU1RkNFMTJCQjI2RDVFMTIwMkY3 OTg3MzYyQUY5NTUxQkZDNUIwMzM2QkQwRUQ5NzlGREFFQkEyMDU3MS8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy84M0EyNTVGQ0UxMkJCMjZENUUxMjAyRjc5ODczNjJBRjk1NTFCRkM1QjAz MzZCRDBFRDk3OUZEQUVCQTIwNTcxLzAvQkIwNDkwMjdBRUQzODQ3RUZFRjNFMkQy N0M2NkZFOUQ1MjBFNDRCMS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMEYGCCsGAQUFBwEHAQH/BDcwNTAkBAIAATAeAwQCqudMAwQGtcXA AwQGvgEAAwQGvmEAAwQFvtPAMA0EAgACMAcDBQAoAAVgMBkGCCsGAQUFBwEIAQH/ BAowCKAGMAQCAmy5MA0GCSqGSIb3DQEBCwUAA4IBAQBE8D2i2WWYDWX0DYuT/+Du CmRiV/cWk3MXNAdBTybHcGL8LXB161OHs6j4DpNfPpNbpMtmf/TgqXV6UCQ9Rkxp yhxxlt8tZfJH66t3M4fJFBwRai5LjFVnkS3v+Trqa/ikpgyE4kzc6I3RoxiKSEqz StvkqCOaCZmJAPRAxWyroMxACzhuTEpD0Z1Vi2Dz1Hx/gfuXAZDWq2J4VGws42CS kt2e2sEl8uDA0VOl1S+z4PR29DkhyQWP9oZMKDGq16BMkuyBRn+BF4tHzYlX7rw2 aQL+xnr0a5Akdyo+77Kx5QZ5jp9+eijDBw/VeC+AUsMQYLmeAnaT3oaJY2BvIbBF -----END CERTIFICATE-----Generated at Fri May 31 20:32:57 2024 by rpki-client on console-ams.rpki-client.org