Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer
File: 43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.cer (raw, json)
Hash identifier: alYYJEIyzl4l7+c1zOWdupAf8Pd6+lbC4EDN4uZzNwU=
Subject key identifier: 43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 43DB435DDFDE65617D877F3048FA164F47AEE2B6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 07 Apr 2025 17:55:24 +0000
Certificate not after: Mon 06 Apr 2026 18:00:24 +0000
Subordinate resources: AS: 26611
IP: 166.210.0.0/16
IP: 166.238.0.0/16
IP: 181.144.0.0/12
IP: 181.240.0.0/12
IP: 190.125.0.0 -- 190.127.255.255
IP: 190.130.64.0/18
IP: 190.243.0.0/16
IP: 191.64.0.0/12
IP: 191.144.0.0/12
IP: 198.228.90.0/24
IP: 2800:800::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Fri 18 Apr 2025 17:00:07 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
43:db:43:5d:df:de:65:61:7d:87:7f:30:48:fa:16:4f:47:ae:e2:b6
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Apr 7 17:55:24 2025 GMT
Not After : Apr 6 18:00:24 2026 GMT
Subject: CN=43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b9:9a:85:73:63:1c:8a:3b:40:c0:d3:5b:8b:11:
f2:00:27:34:44:80:6d:00:1c:ca:57:bb:6f:a0:ac:
25:4d:7c:57:c1:03:a3:df:50:9e:17:fa:e5:64:1a:
11:b1:4a:49:0b:34:96:fa:fb:a2:b3:1d:85:fc:d5:
be:c7:04:fe:b1:a6:46:92:96:1c:ea:88:a0:e4:64:
e5:42:d4:f7:32:d3:2e:35:fc:b8:71:41:f0:fb:a2:
d4:a6:66:31:c1:55:ca:1b:6f:85:30:c7:5a:b2:93:
61:87:5b:26:b9:d9:1a:bd:95:9c:91:01:aa:f3:cd:
8d:e6:88:ac:fe:a4:78:b9:95:55:f1:6e:6d:38:f2:
fe:45:84:01:8d:9e:16:fa:ea:18:8e:f1:a4:3d:c4:
9f:6a:06:73:40:98:62:e6:e5:fe:ce:0c:96:8f:81:
51:5b:ab:fc:4e:ac:88:99:1a:d6:fc:76:ed:d8:db:
05:6b:55:83:79:f4:98:86:87:2f:07:ee:ba:fd:1c:
59:df:5b:1e:28:6f:e5:8e:07:a1:f9:f6:95:99:1b:
86:f0:f6:d9:40:ca:00:dd:4a:f5:bd:8e:5d:40:e2:
57:f3:40:9b:34:79:b1:c4:5f:07:6b:31:a8:bf:5d:
79:ea:b6:42:c9:de:34:4e:65:ee:50:ad:09:85:8e:
78:53
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
43:FF:1C:8A:E0:B4:75:7E:68:ED:D0:8A:E1:AE:B2:AD:AD:86:53:D5
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/51240E7962B9380A3E627C94441EA6BB2CCA3DB1D22E934B6CC9DC5B635EF491/0/43FF1C8AE0B4757E68EDD08AE1AEB2ADAD8653D5.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
166.210.0.0/16
166.238.0.0/16
181.144.0.0/12
181.240.0.0/12
190.125.0.0-190.127.255.255
190.130.64.0/18
190.243.0.0/16
191.64.0.0/12
191.144.0.0/12
198.228.90.0/24
IPv6:
2800:800::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
26611
Signature Algorithm: sha256WithRSAEncryption
62:9c:d4:c3:70:d4:59:11:0d:59:66:5c:56:11:b9:6b:4f:59:
86:e9:c8:aa:a6:f3:56:e5:c8:b5:83:4c:ed:eb:e3:12:46:f3:
d6:7e:e4:bf:cf:63:5b:eb:a3:0c:b1:ae:13:9f:3b:67:18:e8:
66:10:8f:58:fe:a1:22:d1:39:0d:ec:a1:50:98:4a:27:2c:54:
43:0a:47:53:ed:c7:bf:3f:c8:66:7a:c8:35:25:25:9f:10:f7:
e3:80:d0:b4:e8:86:1d:63:19:36:18:06:86:d3:b6:24:c4:4b:
ec:cc:2d:04:98:1d:22:d6:aa:dc:6c:6d:c9:82:53:ec:35:c5:
8f:7c:fa:24:0e:2b:d8:03:80:1d:7f:6d:c6:70:63:b4:27:2a:
97:d8:14:76:17:fb:86:75:f4:2d:f9:8c:dd:d5:e7:a9:90:f9:
21:82:9e:4d:68:8f:77:6e:11:f5:97:42:3f:7d:02:43:6f:9c:
3d:7a:0d:e1:66:1d:d0:17:53:b1:33:ef:34:27:b2:91:06:b2:
33:76:b0:26:e9:b9:f6:f1:66:c6:3a:60:c9:ee:6c:a2:24:24:
c2:8a:bc:47:bf:a1:f7:50:5e:1c:71:0f:9d:8a:2d:cf:3a:f8:
42:17:ad:33:2c:19:97:90:65:a8:4c:60:46:c3:cd:de:2f:0c:
f9:36:d6:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 14 08:59:00 2025 by rpki-client