$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer File: BB10B69B7A16E2CB2290A33EEB74DE274F837575.cer (raw, json) Hash identifier: E5KmJpA3w4iUftg8Gxgut8k5d9Sw+9JjgjUA5cxsbIY= Subject key identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75 Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Certificate serial: 77506709D84DEEEC0E5B6A3500BD47BB366B0D93 Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Manifest: rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft caRepository: rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/ Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml Certificate not before: Tue 05 Mar 2024 17:44:48 +0000 Certificate not after: Tue 04 Mar 2025 17:49:48 +0000 Subordinate resources: AS: 11664 AS: 14535 IP: 138.36.52.0/22 IP: 177.234.128.0/22 IP: 186.182.0.0/16 IP: 190.3.0.0/17 IP: 190.220.0.0/15 IP: 200.49.64.0/19 IP: 200.59.128.0 -- 200.59.175.255 IP: 200.61.32.0/19 IP: 200.69.128.0/19 IP: 200.80.128.0/17 IP: 200.123.64.0/18 IP: 2800:190::/32 Validation: OK Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer Signature path expires: Thu 06 Jun 2024 12:27:09 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 77:50:67:09:d8:4d:ee:ec:0e:5b:6a:35:00:bd:47:bb:36:6b:0d:93 Signature Algorithm: sha256WithRSAEncryption Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816 Validity Not Before: Mar 5 17:44:48 2024 GMT Not After : Mar 4 17:49:48 2025 GMT Subject: CN=BB10B69B7A16E2CB2290A33EEB74DE274F837575 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:b9:ea:d5:b1:b6:fc:b7:8f:55:bd:3b:39:97:3c: f8:43:fb:86:4b:87:cf:51:eb:72:c8:af:32:db:b8: 3e:0a:42:fa:09:4c:26:40:42:be:ef:3b:2a:4f:72: c8:27:c5:96:29:13:31:88:4f:43:e4:83:71:d0:c1: 61:df:68:2f:94:cd:f8:ea:9c:97:e8:cd:98:6e:15: b6:5d:8b:e0:fe:08:ee:6e:48:2f:cf:4d:c0:a0:6d: 8f:96:96:cc:ea:94:ff:c7:62:a0:a3:8e:7e:52:bf: c7:9d:b7:e9:1f:8b:e7:ca:d8:3a:76:c5:04:a9:9a: 7c:04:fe:9e:77:f9:b3:4c:0a:42:d0:cf:99:6f:7d: 09:0a:ee:9f:09:a5:1a:9a:47:f0:98:df:81:84:78: 68:11:fc:0c:21:40:5f:bf:4c:54:d2:0a:06:bd:62: d6:85:fa:6b:2e:f2:83:84:24:67:4c:96:7b:4a:1a: 16:59:c5:57:81:77:c7:5e:17:37:53:78:a8:cb:46: b7:77:79:fd:ae:6b:19:64:b2:7a:72:dd:16:54:0d: cf:b2:38:39:dc:fa:3e:1e:45:24:80:d3:7d:b7:e3: 8a:7f:4f:79:ba:19:cd:f4:31:f8:68:23:26:df:92: 87:f6:20:70:bb:81:8a:f9:a0:4a:e4:45:58:21:d3: 3b:27 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Basic Constraints: critical CA:TRUE X509v3 Subject Key Identifier: BB:10:B6:9B:7A:16:E2:CB:22:90:A3:3E:EB:74:DE:27:4F:83:75:75 X509v3 Authority Key Identifier: keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16 X509v3 Key Usage: critical Certificate Sign, CRL Sign X509v3 CRL Distribution Points: Full Name: URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl Authority Information Access: CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer Subject Information Access: CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/ RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/390374EADCA5170A37F6B4735A85CE083EADAFDFB96AA93C9CA04FB6E1710AED/0/BB10B69B7A16E2CB2290A33EEB74DE274F837575.mft RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml X509v3 Certificate Policies: critical Policy: ipAddr-asNumber sbgp-ipAddrBlock: critical IPv4: 138.36.52.0/22 177.234.128.0/22 186.182.0.0/16 190.3.0.0/17 190.220.0.0/15 200.49.64.0/19 200.59.128.0-200.59.175.255 200.61.32.0/19 200.69.128.0/19 200.80.128.0/17 200.123.64.0/18 IPv6: 2800:190::/32 sbgp-autonomousSysNum: critical Autonomous System Numbers: 11664 14535 Signature Algorithm: sha256WithRSAEncryption 3f:22:6a:5e:5c:6c:0d:ba:82:9c:d2:4a:f5:94:c0:da:5b:2a: f7:0b:1e:53:1b:08:4b:af:0b:d5:ba:80:5a:4e:b9:e2:12:a9: dc:ac:f8:e4:8c:4d:b7:b9:01:37:d2:ea:ed:76:c8:ec:3b:e6: cc:ec:a7:e7:04:fb:f7:e8:4d:2b:ce:73:7a:8e:c1:d4:82:86: f9:09:29:33:c9:70:22:d9:4d:12:c8:76:9b:85:ff:d2:27:95: dc:97:6b:b7:50:20:a8:5d:b3:b6:63:b5:6a:4f:a4:1f:48:90: de:37:d4:3f:dd:a9:3b:25:66:5f:6e:24:1d:96:7e:b8:93:26: 30:4f:e0:06:9a:2d:1b:38:3f:79:8b:17:cf:e7:7f:d0:4a:1e: 69:25:96:8b:23:3f:2f:5d:c4:8d:cb:4d:3f:44:8d:6c:fe:44: 9e:cc:45:c9:d9:d9:9d:4f:fd:1a:25:78:f8:40:f8:62:ae:eb: 53:98:42:7d:dc:21:4d:64:31:15:7d:2a:2a:f0:98:ea:ed:a5: 72:8d:af:c6:57:be:37:d8:d9:72:f9:05:9d:7f:ff:c1:51:a9: 23:fc:5b:7c:33:45:3f:0f:4f:bc:40:be:65:e3:1b:a7:90:ff: a7:4a:fa:ac:fa:a2:b9:0d:f8:81:f3:69:4f:3c:96:66:2e:cb: b5:4d:e4:5b -----BEGIN CERTIFICATE----- MIIG6jCCBdKgAwIBAgIUd1BnCdhN7uwOW2o1AL1HuzZrDZMwDQYJKoZIhvcNAQEL BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB RTY2MTgxNjAeFw0yNDAzMDUxNzQ0NDhaFw0yNTAzMDQxNzQ5NDhaMDMxMTAvBgNV BAMTKEJCMTBCNjlCN0ExNkUyQ0IyMjkwQTMzRUVCNzRERTI3NEY4Mzc1NzUwggEi MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC56tWxtvy3j1W9OzmXPPhD+4ZL h89R63LIrzLbuD4KQvoJTCZAQr7vOypPcsgnxZYpEzGIT0Pkg3HQwWHfaC+Uzfjq nJfozZhuFbZdi+D+CO5uSC/PTcCgbY+WlszqlP/HYqCjjn5Sv8edt+kfi+fK2Dp2 xQSpmnwE/p53+bNMCkLQz5lvfQkK7p8JpRqaR/CY34GEeGgR/AwhQF+/TFTSCga9 YtaF+msu8oOEJGdMlntKGhZZxVeBd8deFzdTeKjLRrd3ef2uaxlksnpy3RZUDc+y ODnc+j4eRSSA032344p/T3m6Gc30MfhoIybfkof2IHC7gYr5oErkRVgh0zsnAgMB AAGjggP0MIID8DAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBS7ELabehbiyyKQ oz7rdN4nT4N1dTAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0 b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5 LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzkwMzc0RUFEQ0E1MTcwQTM3RjZCNDcz NUE4NUNFMDgzRUFEQUZERkI5NkFBOTNDOUNBMDRGQjZFMTcxMEFFRC8wLzCBpgYI KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh Y25pYy8zOTAzNzRFQURDQTUxNzBBMzdGNkI0NzM1QTg1Q0UwODNFQURBRkRGQjk2 QUE5M0M5Q0EwNEZCNkUxNzEwQUVELzAvQkIxMEI2OUI3QTE2RTJDQjIyOTBBMzNF RUI3NERFMjc0RjgzNzU3NS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG CCsGAQUFBw4CMHAGCCsGAQUFBwEHAQH/BGEwXzBOBAIAATBIAwQCiiQ0AwQCseqA AwMAurYDBAe+AwADAwG+3AMEBcgxQDAMAwQHyDuAAwQEyDugAwQFyD0gAwQFyEWA AwQHyFCAAwQGyHtAMA0EAgACMAcDBQAoAAGQMB0GCCsGAQUFBwEIAQH/BA4wDKAK MAgCAi2QAgI4xzANBgkqhkiG9w0BAQsFAAOCAQEAPyJqXlxsDbqCnNJK9ZTA2lsq 9wseUxsIS68L1bqAWk654hKp3Kz45IxNt7kBN9Lq7XbI7DvmzOyn5wT79+hNK85z eo7B1IKG+QkpM8lwItlNEsh2m4X/0ieV3Jdrt1AgqF2ztmO1ak+kH0iQ3jfUP92p OyVmX24kHZZ+uJMmME/gBpotGzg/eYsXz+d/0EoeaSWWiyM/L13EjctNP0SNbP5E nsxFydnZnU/9GiV4+ED4Yq7rU5hCfdwhTWQxFX0qKvCY6u2lco2vxle+N9jZcvkF nX//wVGpI/xbfDNFPw9PvEC+ZeMbp5D/p0r6rPqiuQ34gfNpTzyWZi7LtU3kWw== -----END CERTIFICATE-----Generated at Sun Jun 2 11:53:58 2024 by rpki-client on console-fra.rpki-client.org