This project's continuity is at risk. If Internet routing security is important to you, throw a lifeline! Please donate to the 2026 fundraising campaign.

Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer
File:                     B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.cer (raw, json)
Hash identifier:          3gUhXc/JtWf4msBfVWMPLQrCr2cV64p97TS9bXdqoII=
Subject key identifier:   B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer:       /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial:       4BEBB409E64D20BCB522E5AB93CCAEDEAFD681F5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jan 2026 05:17:07 +0000
Certificate not after:    Tue 19 Jan 2027 05:22:07 +0000
Subordinate resources:    AS: 263700
                          IP: 132.255.68.0/22
                          IP: 138.121.168.0/22
                          IP: 170.239.152.0/23
                          IP: 2803:db80::/32
Validation:               OK
Signature path:           rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
                          rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
                          rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
                          rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
                          rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires:   Fri 30 Jan 2026 02:59:55 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:eb:b4:09:e6:4d:20:bc:b5:22:e5:ab:93:cc:ae:de:af:d6:81:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
        Validity
            Not Before: Jan 20 05:17:07 2026 GMT
            Not After : Jan 19 05:22:07 2027 GMT
        Subject: CN=B57B438CFF3F02CD31FFA267CFD03FC2140E1C17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:20:71:60:fa:d1:83:00:1f:ef:bd:4d:ff:a3:
                    a0:96:d8:e0:bf:b1:6d:4d:49:bf:47:32:db:d7:b9:
                    7e:4b:db:75:84:f4:a2:39:b4:12:e0:b7:e0:33:7c:
                    77:b9:6c:e8:50:f8:24:b0:32:07:22:09:23:d5:ec:
                    ad:6a:f3:00:bd:39:87:c9:c7:7e:6c:9a:fd:0c:04:
                    38:68:81:25:9a:d8:a1:3c:44:7a:97:30:ee:0a:34:
                    81:5a:d3:50:7d:31:1f:9e:76:bb:50:91:89:00:0b:
                    ba:3d:7d:69:7e:67:30:e9:a3:89:43:26:49:20:ef:
                    b0:46:10:49:c7:06:5e:af:23:55:1a:a0:6a:d9:c9:
                    86:45:9b:b4:be:dd:14:02:5c:da:02:80:98:77:e1:
                    91:71:68:0e:f1:36:dd:3d:92:fd:6e:a4:f6:df:4e:
                    d5:83:db:0d:85:7b:fb:b1:90:d4:e1:98:87:fd:70:
                    12:d5:17:67:9d:92:70:72:cf:00:0c:c1:57:d2:e8:
                    02:9a:fe:01:b0:ef:25:d1:f5:5f:b7:ca:6a:14:1b:
                    88:22:33:e7:16:e5:3f:da:3c:a0:a9:f1:b5:d8:0b:
                    3d:0c:50:0a:7d:6b:82:c6:20:79:c4:ff:ab:e0:27:
                    72:8b:4e:34:00:60:c5:93:3b:58:07:57:55:f4:6b:
                    78:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Subject Key Identifier:
                B5:7B:43:8C:FF:3F:02:CD:31:FF:A2:67:CF:D0:3F:C2:14:0E:1C:17
            X509v3 Authority Key Identifier:
                keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl

            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer

            Subject Information Access:
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/B6B5E4684BEE1F7763249A49CBAB846BE8CF475056C8D564BFF46B3996938AB6/0/B57B438CFF3F02CD31FFA267CFD03FC2140E1C17.mft
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.68.0/22
                  138.121.168.0/22
                  170.239.152.0/23
                IPv6:
                  2803:db80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263700

    Signature Algorithm: sha256WithRSAEncryption
         cd:14:2d:32:76:5c:6f:ea:8f:e2:20:ad:df:e6:53:b7:96:4d:
         8b:93:8c:3c:fe:3b:27:18:ad:43:83:fe:5c:3f:bc:12:b6:9b:
         22:6d:92:09:ef:4e:c1:25:04:d5:8e:a5:43:48:40:c2:27:0d:
         3a:4f:4f:20:5e:a3:02:1e:e4:da:22:3c:c3:f9:ee:1c:80:f5:
         4c:16:aa:eb:84:09:e4:ef:3a:63:37:9d:af:c5:42:7c:1e:53:
         19:a5:78:7b:91:cb:25:c0:31:e0:dd:97:81:e8:c5:7e:dd:cd:
         a7:a6:44:41:43:31:4b:88:8b:dc:7d:0a:0f:2d:96:24:f3:05:
         5c:4c:c3:2b:3c:e3:44:87:20:88:a7:68:be:24:0f:ec:b4:4a:
         93:b9:93:0b:76:2c:33:a8:db:9e:73:97:62:01:9b:48:0f:6c:
         5d:17:e7:da:37:d3:e8:26:c2:a0:25:06:85:8d:de:7b:b8:31:
         8e:67:0b:61:cd:75:92:1e:c0:b9:e3:a3:68:d2:80:30:03:60:
         62:99:58:bd:91:48:a8:f6:1f:e9:74:50:54:ef:39:aa:ad:51:
         3b:7b:ca:54:e6:91:46:bd:a1:0d:f3:71:36:5f:8d:08:a7:62:
         13:53:1c:4c:61:b0:7e:f1:fc:08:2e:de:93:0d:65:67:32:9b:
         db:05:7c:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----