Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.cer
File: 0ab335413c1ba3baeef4f7410d98340c0e6acd4c.cer (raw, json)
Hash identifier: yIxa6nyIMKB1I3bt+zFRi5J7jDBaBw1dCH7tsAQGWtc=
Subject key identifier: 9E:F2:09:99:59:88:69:41:CF:8E:62:1B:AF:18:6F:BC:93:40:DB:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: D4DD10
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 29 Aug 2019 21:30:26 +0000
Certificate not after: Fri 17 Nov 2023 14:00:00 +0000
Subordinate resources: AS: 23201
AS: 28008
AS: 52229
IP: 181.40.0.0/16
IP: 181.120.0.0/13
IP: 186.0.188.0/22
IP: 186.2.192.0 -- 186.2.239.255
IP: 186.16.0.0/15
IP: 190.2.192.0/20
IP: 190.114.224.0/21
IP: 190.121.160.0/20
IP: 190.128.128.0/17
IP: 200.26.176.0/21
IP: 200.85.32.0/19
IP: 2800:3a0::/32
IP: 2800:c70::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 13 May 2023 19:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 13950224 (0xd4dd10)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Aug 29 21:30:26 2019 GMT
Not After : Nov 17 14:00:00 2023 GMT
Subject: CN=0ab335413c1ba3baeef4f7410d98340c0e6acd4c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8e:cc:25:64:54:6a:65:ea:5d:1e:53:86:76:2f:
20:0f:9e:27:b7:b8:a1:5f:95:ae:7e:c3:a9:ab:8f:
51:e6:58:e1:6f:c2:09:fc:e8:06:47:3a:b1:7b:90:
db:d5:22:2b:20:42:ab:ba:1d:f7:4f:a0:23:cf:96:
e1:89:6c:97:09:4c:f1:7b:5a:91:41:0c:8b:68:9e:
ac:8f:96:75:5c:bf:69:06:2e:52:32:27:4d:ce:f0:
b6:39:0d:86:67:a7:62:fb:36:c2:b0:91:fd:e1:4a:
82:7e:ff:b1:c3:20:df:97:4b:a6:14:f0:a4:a1:06:
af:cc:3c:c7:ad:8f:33:db:3e:c1:48:ae:ef:2b:3e:
37:68:aa:dd:da:31:2d:68:26:b3:03:75:36:23:47:
22:38:3e:d7:37:e5:52:35:95:3f:e9:fd:e8:3b:80:
b2:5b:d4:f4:58:8c:a4:10:90:8e:a7:71:89:81:df:
12:e0:fd:95:0b:3e:ff:2d:bf:06:8f:5e:c5:db:da:
18:8f:c2:60:ff:51:11:bc:01:bc:3c:a2:98:1b:52:
85:ba:96:0d:8c:ec:f3:55:5c:d0:78:b1:5a:27:20:
79:07:22:01:3e:af:a9:94:12:9b:bf:2c:7d:53:d8:
af:f3:21:4e:33:0e:d8:f9:f7:6c:fb:fc:cf:1f:46:
9f:21
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
9E:F2:09:99:59:88:69:41:CF:8E:62:1B:AF:18:6F:BC:93:40:DB:16
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.40.0.0/16
181.120.0.0/13
186.0.188.0/22
186.2.192.0-186.2.239.255
186.16.0.0/15
190.2.192.0/20
190.114.224.0/21
190.121.160.0/20
190.128.128.0/17
200.26.176.0/21
200.85.32.0/19
IPv6:
2800:3a0::/32
2800:c70::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
23201
28008
52229
Signature Algorithm: sha256WithRSAEncryption
6b:ae:de:40:a2:8c:bc:07:9b:b9:e2:76:bc:d7:e8:8d:7c:2d:
02:31:2a:0e:97:e1:58:0d:02:13:84:00:32:98:c2:2f:ac:dd:
df:ab:3b:fa:68:c9:66:65:38:78:31:ad:93:e9:58:d7:c9:e9:
24:0a:dd:65:7c:52:ea:2d:32:23:34:3a:3a:c7:b2:be:c7:53:
52:12:01:e2:8d:b8:6c:87:97:dc:7c:c8:0c:7d:47:f4:9f:4c:
75:aa:e3:fb:1f:93:fa:fe:51:74:d7:6d:71:1c:ea:44:47:90:
e4:32:89:d4:69:61:14:a5:cb:2d:51:f8:f4:40:40:eb:e5:d8:
9e:74:a1:7b:c2:01:4c:5d:22:bb:8d:2f:5d:5d:ff:4f:f4:6d:
62:3f:56:29:40:48:1d:d1:8d:27:8f:f5:97:26:f5:5b:5e:65:
0a:ab:1c:7f:6e:79:3e:4b:0e:64:47:6b:52:ab:17:ad:3f:24:
64:9b:d4:ef:2e:63:d9:00:fd:c1:64:5c:cc:c5:f4:da:8d:9e:
7c:9a:6a:e5:34:91:37:20:18:dc:48:5f:7f:80:80:5e:57:0d:
f6:16:0c:6a:50:5d:10:46:de:49:5a:e5:b4:98:2f:ce:e4:21:
6b:f6:7d:96:34:eb:8b:66:45:51:6a:44:11:c0:8c:08:31:13:
5d:71:e6:d4
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu May 11 00:02:25 2023 by rpki-client on console-fra.rpki-client.org