
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/8B0FB3B0ECA54A997135F9E5491919368741661E.cer
File: 8B0FB3B0ECA54A997135F9E5491919368741661E.cer (raw, json)
Hash identifier: Tnh7kyk+j6LfMF7n2zM66rW1a0dLdKb8fnKWyDNQlbU=
Subject key identifier: 8B:0F:B3:B0:EC:A5:4A:99:71:35:F9:E5:49:19:19:36:87:41:66:1E
Authority key identifier: BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
Certificate issuer: /CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Certificate serial: 53A2F7C98F478774AEF087DBC6285EBC7E1DA57E
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/8B0FB3B0ECA54A997135F9E5491919368741661E.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 05 Feb 2025 03:35:10 +0000
Certificate not after: Wed 04 Feb 2026 03:40:10 +0000
Subordinate resources: AS: 266729
IP: 45.229.74.0/24
IP: 2801:1c:7000::/48
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.mft
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.crl
rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.mft
rsync://repository.lacnic.net/rpki/lacnic/946DAE8464E7C581E9BA5787F74CBDA9DCF6F8CD.cer
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.crl
rsync://repository.lacnic.net/rpki/lacnic/FC8A9CB3ED184E17D30EEA1E0FA7615CE4B1AF47.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sun 09 Nov 2025 01:04:20 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
53:a2:f7:c9:8f:47:87:74:ae:f0:87:db:c6:28:5e:bc:7e:1d:a5:7e
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=BCC0665ECF8A97B83E398268D92A255BAE661816
Validity
Not Before: Feb 5 03:35:10 2025 GMT
Not After : Feb 4 03:40:10 2026 GMT
Subject: CN=8B0FB3B0ECA54A997135F9E5491919368741661E
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b7:dd:53:92:ee:07:92:f9:16:41:02:43:b6:04:
3d:e1:dd:b8:f7:49:2e:fd:16:6c:74:b1:1e:24:6c:
c7:c8:09:a1:78:f7:76:f1:b3:21:04:53:a4:bf:83:
6a:68:77:77:87:29:21:84:46:db:aa:7f:88:95:5c:
d8:e3:30:f3:9d:4c:92:6e:ba:4f:ff:76:f5:d7:02:
38:40:22:b1:cb:3f:83:81:d2:f3:10:2b:22:6f:51:
38:19:9a:e0:da:b7:af:df:4b:7e:2b:ca:59:e2:51:
20:2f:1e:c7:53:11:03:95:d1:5c:71:2e:de:27:3e:
f1:ac:3f:5f:46:c8:84:a8:01:ec:d8:57:bd:8d:7c:
81:dc:21:cc:48:76:c7:02:db:59:62:56:8d:43:72:
1e:6a:62:69:69:6a:6d:c4:69:00:de:84:ba:0d:9a:
4c:b0:22:6f:e9:69:34:ab:5c:87:ae:a2:0c:c0:1d:
e6:b2:e7:2e:eb:dc:35:02:62:d1:d3:d5:13:41:8f:
b4:9c:6a:da:a8:a0:86:ae:33:ee:18:ba:16:8f:f7:
b7:4e:a4:14:7e:c0:80:e0:57:bd:54:2f:e5:79:52:
7a:c6:a8:b4:a6:32:b6:d6:ca:9f:86:5d:0c:c5:c8:
97:6e:aa:0f:9a:a7:e3:e3:8f:6d:40:66:98:8f:68:
a8:7f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Subject Key Identifier:
8B:0F:B3:B0:EC:A5:4A:99:71:35:F9:E5:49:19:19:36:87:41:66:1E
X509v3 Authority Key Identifier:
keyid:BC:C0:66:5E:CF:8A:97:B8:3E:39:82:68:D9:2A:25:5B:AE:66:18:16
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/FDC3594DD4E54BADE709AC0D255CF279C47716D2E8B3F4D45DC46355899B36D4/0/BCC0665ECF8A97B83E398268D92A255BAE661816.crl
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/E5AA1B2C690D34DD3A42E0C0268C3218ED158E15D29FCBD0BAB66B4786D632E6/0/BCC0665ECF8A97B83E398268D92A255BAE661816.cer
Subject Information Access:
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/798686B97A8E86697F903984B79C2A71884F74A37B2712FAEC5E655FBAD35866/0/8B0FB3B0ECA54A997135F9E5491919368741661E.mft
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.229.74.0/24
IPv6:
2801:1c:7000::/48
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
266729
Signature Algorithm: sha256WithRSAEncryption
bf:86:12:54:20:df:26:9a:22:c9:40:d0:bb:37:37:47:03:0a:
5d:18:3a:48:e1:27:34:e0:9b:49:e9:52:78:bc:1d:9b:05:ef:
4d:46:0d:f8:bf:bc:ab:4c:67:25:0e:16:74:c3:b2:be:a8:6b:
87:56:3b:6f:47:a0:a0:eb:f9:26:b0:90:f0:ec:04:a4:2e:6c:
83:83:e5:3a:21:6b:84:4c:75:9a:7b:12:87:26:a4:af:3c:f7:
51:c0:1e:5a:7b:c3:26:ac:2d:f5:f2:c9:74:11:da:a7:61:de:
17:fe:66:45:e8:f1:57:ce:6d:91:37:b8:fd:42:61:74:c4:0d:
3d:ad:c4:ad:02:72:26:29:46:9b:ca:71:91:d8:bd:1b:e9:02:
3d:a8:88:4a:19:34:6a:80:84:e5:8e:28:2c:41:fd:06:cb:45:
59:75:36:f5:49:f9:59:88:c3:8a:3b:83:d8:76:62:4b:67:d2:
a4:f4:64:d4:55:c3:8f:26:8e:32:94:8b:75:00:ba:90:af:51:
8c:a6:15:27:16:9f:a0:51:fc:4d:24:19:26:f2:a0:e3:09:7f:
31:32:29:30:76:93:97:59:01:cb:da:2d:40:ca:ee:44:4d:0f:
37:84:89:5b:59:e5:ae:50:9c:bb:2c:1e:e5:d6:e7:4c:e8:b5:
53:d5:ab:f4
-----BEGIN CERTIFICATE-----
MIIGpzCCBY+gAwIBAgIUU6L3yY9Hh3Su8IfbxihevH4dpX4wDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQkNDMDY2NUVDRjhBOTdCODNFMzk4MjY4RDkyQTI1NUJB
RTY2MTgxNjAeFw0yNTAyMDUwMzM1MTBaFw0yNjAyMDQwMzQwMTBaMDMxMTAvBgNV
BAMTKDhCMEZCM0IwRUNBNTRBOTk3MTM1RjlFNTQ5MTkxOTM2ODc0MTY2MUUwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQC33VOS7geS+RZBAkO2BD3h3bj3
SS79Fmx0sR4kbMfICaF493bxsyEEU6S/g2pod3eHKSGERtuqf4iVXNjjMPOdTJJu
uk//dvXXAjhAIrHLP4OB0vMQKyJvUTgZmuDat6/fS34rylniUSAvHsdTEQOV0Vxx
Lt4nPvGsP19GyISoAezYV72NfIHcIcxIdscC21liVo1Dch5qYmlpam3EaQDehLoN
mkywIm/paTSrXIeuogzAHeay5y7r3DUCYtHT1RNBj7ScatqooIauM+4YuhaP97dO
pBR+wIDgV71UL+V5UnrGqLSmMrbWyp+GXQzFyJduqg+ap+Pjj21AZpiPaKh/AgMB
AAGjggOxMIIDrTAPBgNVHRMBAf8EBTADAQH/MB0GA1UdDgQWBBSLD7Ow7KVKmXE1
+eVJGRk2h0FmHjAfBgNVHSMEGDAWgBS8wGZez4qXuD45gmjZKiVbrmYYFjAOBgNV
HQ8BAf8EBAMCAQYwgbAGA1UdHwSBqDCBpTCBoqCBn6CBnIaBmXJzeW5jOi8vcmVw
b3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL0ZEQzM1OTRERDRFNTRCQURF
NzA5QUMwRDI1NUNGMjc5QzQ3NzE2RDJFOEIzRjRENDVEQzQ2MzU1ODk5QjM2RDQv
MC9CQ0MwNjY1RUNGOEE5N0I4M0UzOTgyNjhEOTJBMjU1QkFFNjYxODE2LmNybDCB
uQYIKwYBBQUHAQEEgawwgakwgaYGCCsGAQUFBzAChoGZcnN5bmM6Ly9yZXBvc2l0
b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvRTVBQTFCMkM2OTBEMzRERDNBNDJF
MEMwMjY4QzMyMThFRDE1OEUxNUQyOUZDQkQwQkFCNjZCNDc4NkQ2MzJFNi8wL0JD
QzA2NjVFQ0Y4QTk3QjgzRTM5ODI2OEQ5MkEyNTVCQUU2NjE4MTYuY2VyMIIBcQYI
KwYBBQUHAQsEggFjMIIBXzB5BggrBgEFBQcwBYZtcnN5bmM6Ly9yZXBvc2l0b3J5
LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzk4Njg2Qjk3QThFODY2OTdGOTAzOTg0
Qjc5QzJBNzE4ODRGNzRBMzdCMjcxMkZBRUM1RTY1NUZCQUQzNTg2Ni8wLzCBpgYI
KwYBBQUHMAqGgZlyc3luYzovL3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xh
Y25pYy83OTg2ODZCOTdBOEU4NjY5N0Y5MDM5ODRCNzlDMkE3MTg4NEY3NEEzN0Iy
NzEyRkFFQzVFNjU1RkJBRDM1ODY2LzAvOEIwRkIzQjBFQ0E1NEE5OTcxMzVGOUU1
NDkxOTE5MzY4NzQxNjYxRS5tZnQwOQYIKwYBBQUHMA2GLWh0dHBzOi8vcnJkcC5s
YWNuaWMubmV0L3JyZHAvbm90aWZpY2F0aW9uLnhtbDAYBgNVHSABAf8EDjAMMAoG
CCsGAQUFBw4CMDAGCCsGAQUFBwEHAQH/BCEwHzAMBAIAATAGAwQALeVKMA8EAgAC
MAkDBwAoAQAccAAwGgYIKwYBBQUHAQgBAf8ECzAJoAcwBQIDBBHpMA0GCSqGSIb3
DQEBCwUAA4IBAQC/hhJUIN8mmiLJQNC7NzdHAwpdGDpI4Sc04JtJ6VJ4vB2bBe9N
Rg34v7yrTGclDhZ0w7K+qGuHVjtvR6Cg6/kmsJDw7ASkLmyDg+U6IWuETHWaexKH
JqSvPPdRwB5ae8MmrC318sl0EdqnYd4X/mZF6PFXzm2RN7j9QmF0xA09rcStAnIm
KUabynGR2L0b6QI9qIhKGTRqgITljigsQf0Gy0VZdTb1SflZiMOKO4PYdmJLZ9Kk
9GTUVcOPJo4ylIt1ALqQr1GMphUnFp+gUfxNJBkm8qDjCX8xMikwdpOXWQHL2i1A
yu5ETQ83hIlbWeWuUJy7LB7l1udM6LVT1av0
-----END CERTIFICATE-----
Generated at Tue Nov 4 21:37:52 2025 by rpki-client