Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/133d78599d5f39599b3a8d0666e6da806086c0a0.cer
File: 133d78599d5f39599b3a8d0666e6da806086c0a0.cer (raw, json)
Hash identifier: D7KROK526cOl3Qwu/IJZzdyOYKTsucywi0NTh59GJrU=
Subject key identifier: 8B:D0:62:EA:F1:00:CB:24:59:47:F3:6D:91:0F:B5:B0:BA:27:DA:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: EAB8CC
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/903d3bdc-e43d-435d-bd0b-33bf930e172b/133d78599d5f39599b3a8d0666e6da806086c0a0.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/903d3bdc-e43d-435d-bd0b-33bf930e172b/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 21 Jul 2022 17:15:09 +0000
Certificate not after: Tue 22 Oct 2024 17:17:59 +0000
Subordinate resources: IP: 45.4.172.0/22
IP: 45.4.196.0/22
IP: 128.201.4.0/22
IP: 138.118.116.0/22
IP: 170.0.4.0/22
IP: 170.81.124.0/22
IP: 177.128.128.0/22
IP: 181.41.140.0/22
IP: 181.224.128.0/19
IP: 186.190.208.0/20
IP: 190.92.128.0 -- 190.92.167.255
IP: 190.92.176.0/20
IP: 190.102.104.0/21
IP: 190.124.44.0/22
IP: 190.151.136.0/23
IP: 190.211.149.0 -- 190.211.151.255
IP: 191.5.56.0/22
IP: 200.0.94.0/24
IP: 200.0.137.0 -- 200.0.138.255
IP: 200.0.216.0/21
IP: 200.1.160.0/24
IP: 200.5.0.0 -- 200.5.8.255
IP: 200.5.11.0/24
IP: 200.9.82.0/23
IP: 200.9.115.0/24
IP: 200.10.152.0/24
IP: 200.10.155.0/24
IP: 200.10.160.0/24
IP: 200.10.165.0 -- 200.10.166.255
IP: 200.12.168.0/24
IP: 200.12.224.0/20
IP: 200.15.0.0/16
IP: 200.16.88.0/24
IP: 200.30.0.0/18
IP: 200.50.0.0/19
IP: 200.50.64.0/19
IP: 200.50.128.0/20
IP: 200.58.0.0/18
IP: 200.62.0.0/18
IP: 200.69.20.0 -- 200.69.27.255
IP: 200.110.232.0/21
IP: 200.194.240.0/21
IP: 200.225.32.0/20
IP: 200.229.16.0/20
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15382732 (0xeab8cc)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Jul 21 17:15:09 2022 GMT
Not After : Oct 22 17:17:59 2024 GMT
Subject: CN=133d78599d5f39599b3a8d0666e6da806086c0a0
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8d:c5:d6:ce:e0:c1:5f:d9:1a:5f:aa:b7:74:7b:
84:ee:f6:60:9c:75:0a:1b:a8:d8:78:6c:ad:a3:ef:
81:df:a9:cf:47:41:cf:08:cd:17:ac:43:3a:ee:b7:
50:56:a3:ee:b1:36:67:dc:f0:06:35:9a:51:5b:98:
1f:e2:c2:cf:65:b4:2f:d7:6d:b7:ec:33:2a:f5:42:
ef:33:8f:c1:a4:10:2f:0b:85:65:6a:96:6e:08:76:
52:c7:eb:44:aa:e4:78:d6:ce:02:3b:f1:cc:24:2c:
9f:b4:14:9a:49:ef:fb:d2:6c:24:94:da:1a:0e:05:
11:09:dc:b1:33:d5:db:2c:03:68:a7:95:4a:e9:c4:
41:17:ba:28:6c:da:ec:cf:6d:05:c6:6e:f8:39:bf:
94:84:63:cc:f2:2b:e8:b3:90:3e:f1:8c:78:e2:2c:
6a:1d:52:ce:b9:0b:bd:47:25:da:c8:74:15:fb:10:
5f:91:b1:7e:0d:16:a2:5d:e5:cc:ee:03:9d:54:03:
6f:ab:0d:f3:c5:87:9e:e9:39:21:c9:2b:29:20:93:
44:f3:10:9f:e7:33:ee:c0:ac:ec:62:b0:82:40:7b:
74:a2:3f:32:de:b4:ba:a0:86:31:a0:53:85:95:a6:
23:cc:aa:99:da:d3:57:75:a5:2f:0a:98:9c:fc:9f:
e5:8f
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
8B:D0:62:EA:F1:00:CB:24:59:47:F3:6D:91:0F:B5:B0:BA:27:DA:98
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/903d3bdc-e43d-435d-bd0b-33bf930e172b/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/903d3bdc-e43d-435d-bd0b-33bf930e172b/133d78599d5f39599b3a8d0666e6da806086c0a0.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.4.172.0/22
45.4.196.0/22
128.201.4.0/22
138.118.116.0/22
170.0.4.0/22
170.81.124.0/22
177.128.128.0/22
181.41.140.0/22
181.224.128.0/19
186.190.208.0/20
190.92.128.0-190.92.167.255
190.92.176.0/20
190.102.104.0/21
190.124.44.0/22
190.151.136.0/23
190.211.149.0-190.211.151.255
191.5.56.0/22
200.0.94.0/24
200.0.137.0-200.0.138.255
200.0.216.0/21
200.1.160.0/24
200.5.0.0-200.5.8.255
200.5.11.0/24
200.9.82.0/23
200.9.115.0/24
200.10.152.0/24
200.10.155.0/24
200.10.160.0/24
200.10.165.0-200.10.166.255
200.12.168.0/24
200.12.224.0/20
200.15.0.0/16
200.16.88.0/24
200.30.0.0/18
200.50.0.0/19
200.50.64.0/19
200.50.128.0/20
200.58.0.0/18
200.62.0.0/18
200.69.20.0-200.69.27.255
200.110.232.0/21
200.194.240.0/21
200.225.32.0/20
200.229.16.0/20
Signature Algorithm: sha256WithRSAEncryption
b5:b6:44:ab:bc:ba:3a:27:11:4e:a8:a5:4b:c7:12:60:61:48:
62:8d:3a:e6:2c:75:55:46:9c:c4:79:f7:b7:40:4d:ec:24:ee:
33:16:1c:e0:01:ba:88:31:d8:6d:43:2e:db:8c:18:89:5a:49:
1b:04:25:f7:03:14:c2:df:e0:fe:ef:bc:bf:d5:d0:d7:72:aa:
48:9f:0c:32:e0:39:b7:b0:65:77:7f:da:43:d3:b0:9c:5c:95:
6e:72:c1:69:c9:7b:cc:d7:57:b1:1f:e7:fe:69:1a:0f:57:d0:
0c:82:74:6f:88:ce:00:92:a3:c2:c4:66:0a:e1:f3:1c:f9:95:
d8:7d:a6:ec:b6:97:5c:fe:9a:68:9d:14:4c:ae:03:d0:03:bf:
56:b9:e7:2b:51:64:e1:72:d8:e4:d7:99:b0:1c:ea:e5:7c:8b:
f1:db:22:e9:04:46:a5:48:4f:98:c1:9d:42:87:1f:16:dd:d8:
28:39:25:4b:2f:94:06:32:08:6a:ae:7c:2d:a8:a2:da:26:1f:
c9:87:64:10:02:c3:14:d2:04:0c:cb:6d:6f:f4:ad:34:5d:8c:
ea:03:f9:e9:66:8b:7a:4f:ce:e2:7e:b9:0d:aa:c3:3a:49:c4:
f8:1b:c1:00:d0:ed:78:cc:a0:60:1e:8e:36:68:4f:56:cc:d0:
78:3e:19:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:32 2024 by rpki-client on console-fra.rpki-client.org