This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.cer
File:                     F43A9A12F8E8BF00FA962B7630FC633E917262E5.cer (raw, json)
Hash identifier:          aZFSpxNOwutSM7qJuRrnOIjr8KkyUIglVPorBsfpjk0=
Subject key identifier:   F4:3A:9A:12:F8:E8:BF:00:FA:96:2B:76:30:FC:63:3E:91:72:62:E5
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       422771F892E9B75FBFD9D52C469027AA27D1BED1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Nov 2025 15:35:01 +0000
Certificate not after:    Fri 13 Nov 2026 15:40:01 +0000
Subordinate resources:    AS: 266822
                          IP: 45.237.36.0/22
                          IP: 2803:c4a0::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Mon 01 Dec 2025 07:19:59 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:27:71:f8:92:e9:b7:5f:bf:d9:d5:2c:46:90:27:aa:27:d1:be:d1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Nov 14 15:35:01 2025 GMT
            Not After : Nov 13 15:40:01 2026 GMT
        Subject: CN=F43A9A12F8E8BF00FA962B7630FC633E917262E5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:e7:2b:be:15:c3:89:9a:6c:19:63:32:58:4e:
                    88:57:1f:f8:83:8c:6a:5a:26:fd:42:bf:ff:4f:d3:
                    d0:e4:63:15:f2:97:0b:c4:1a:7d:6a:1f:f7:9e:52:
                    79:1b:2f:0a:a5:0c:e7:04:a0:af:e0:96:39:a3:22:
                    23:ec:67:42:de:05:d8:f3:bd:ac:cc:c1:e8:38:da:
                    f9:1b:52:f3:5e:66:d9:f3:ca:6e:88:d6:ca:cd:59:
                    14:e9:ed:78:7b:35:4d:2e:95:c5:44:4b:cf:d7:6c:
                    8b:fc:02:46:40:67:35:69:ae:3a:ce:10:de:7d:56:
                    7f:14:81:e4:75:62:01:e3:8b:fc:6c:cc:c4:9e:4a:
                    02:62:e9:e8:25:44:b5:e2:2c:a9:35:b6:67:26:cd:
                    1c:82:73:9d:0a:8d:54:3b:9d:1b:32:6f:d2:3f:34:
                    1b:12:3c:ee:34:74:a2:55:07:f6:1a:dc:f6:5d:28:
                    9e:e7:ba:5c:f8:4f:41:69:19:b5:47:af:2d:4e:2e:
                    8e:0e:09:c7:c9:dc:ba:97:6d:08:5e:24:b7:9b:5b:
                    9f:9a:8b:fc:e0:e6:01:4c:79:28:43:e9:e4:d5:82:
                    f1:14:e4:7a:3d:34:9b:bc:9f:93:d4:a9:10:fd:d7:
                    92:39:98:22:48:e8:cd:c4:79:42:a1:b5:50:f3:94:
                    b0:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                F4:3A:9A:12:F8:E8:BF:00:FA:96:2B:76:30:FC:63:3E:91:72:62:E5
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/694C7D361EEED3038F08C182B38BE0F8D032919D09A4447C00A0A1F53EE76709/0/F43A9A12F8E8BF00FA962B7630FC633E917262E5.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.36.0/22
                IPv6:
                  2803:c4a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266822

    Signature Algorithm: sha256WithRSAEncryption
         8c:c2:97:d4:37:d9:26:f7:61:46:fd:88:73:8d:7b:8f:b6:02:
         3c:f3:44:0a:48:71:38:0d:7e:86:7c:5a:24:45:c1:26:ad:88:
         d4:e9:5c:0a:bc:4d:0c:7b:34:b6:0d:33:de:a8:3b:c9:51:bf:
         b9:19:9b:42:1f:4e:c8:0a:f5:72:b1:bf:43:a1:53:43:9d:68:
         00:6e:4d:4b:15:72:ef:53:ef:d8:b7:c4:a4:43:24:78:0a:3c:
         51:c8:a2:dc:ac:b6:1b:b6:3b:cd:7b:f5:01:15:17:9d:85:dc:
         9c:ce:63:57:23:34:33:ea:44:3b:40:ef:2f:24:ba:62:9a:13:
         2f:8a:62:da:43:fe:d3:40:13:9c:97:5f:36:3c:2d:05:b7:df:
         50:f7:5c:50:9c:c2:40:c9:65:c5:9f:74:2a:03:fb:01:00:c6:
         cf:dc:e4:ac:c7:15:15:13:53:5f:97:c1:a2:ce:30:c8:38:dc:
         f1:66:b6:56:59:0c:73:7c:26:d0:b9:c3:6e:58:3b:73:ac:76:
         14:3d:1f:69:91:4e:a8:c1:4c:b2:6a:30:95:d0:4b:99:f0:22:
         84:55:7c:93:0e:1d:07:01:4e:f1:4b:53:00:91:5a:98:95:75:
         1c:86:51:32:b3:0a:85:01:03:ec:3b:84:71:e1:49:61:ff:e0:
         ee:6a:15:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----