Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2559d30393c226001b2b2306d5cdf8c59cc392fe.cer
File: 2559d30393c226001b2b2306d5cdf8c59cc392fe.cer (raw, json)
Hash identifier: g5vbwNhOpJSfygtOMI0KRsxsjX048n2qmUGGV/ru4p8=
Subject key identifier: 77:F1:77:81:D3:0B:65:F6:BE:F2:2A:27:06:BB:AC:EC:11:63:36:AC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 010AC230
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/73066471-bcc2-47a5-8a9b-3dab2b2fd759/2559d30393c226001b2b2306d5cdf8c59cc392fe.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/73066471-bcc2-47a5-8a9b-3dab2b2fd759/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 16 Feb 2024 15:21:51 +0000
Certificate not after: Mon 23 Dec 2024 13:26:04 +0000
Subordinate resources: AS: 14457
AS: 262391
IP: 45.235.16.0/22
IP: 131.0.76.0/22
IP: 168.181.68.0/22
IP: 170.254.124.0/22
IP: 177.125.220.0/22
IP: 177.131.112.0/20
IP: 190.89.104.0/22
IP: 200.53.16.0/20
IP: 2804:8c0::/32
IP: 2804:1a64::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17482288 (0x10ac230)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Feb 16 15:21:51 2024 GMT
Not After : Dec 23 13:26:04 2024 GMT
Subject: CN=2559d30393c226001b2b2306d5cdf8c59cc392fe
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:88:92:97:7a:9c:fd:71:8c:15:a5:02:b1:6b:9e:
01:03:e2:5e:90:3a:23:45:cf:6d:e7:07:0d:2e:37:
43:99:72:0c:73:8f:fa:af:4d:dc:48:56:1c:4a:44:
10:b1:5f:f8:98:e7:22:4e:c4:81:4e:97:f0:85:f8:
d8:27:b3:5f:fe:05:e4:48:c6:38:c4:2c:85:e1:40:
f3:6b:44:e5:cc:93:d9:f5:67:b2:a9:90:02:dd:34:
48:02:88:63:5f:9f:c5:ee:93:18:14:e2:18:3f:f8:
4a:05:b0:6e:bf:fb:c6:fd:fb:7e:83:bf:47:1a:91:
72:76:54:ab:a0:6a:9b:ab:54:83:18:c4:27:43:b6:
56:c1:69:0e:59:27:75:48:48:25:b7:84:27:fd:3c:
19:6b:70:d8:95:1e:43:79:40:7c:f6:c4:9f:ed:35:
aa:5b:e4:48:1e:2f:e2:23:31:c9:70:d4:d6:25:ea:
cf:9c:23:5a:f7:a6:5b:af:f8:bc:24:49:f7:bd:9c:
6a:7f:fe:35:b2:3b:bf:b6:5b:4f:2f:27:b7:43:9d:
3e:21:37:24:c8:b9:01:11:0a:bf:0d:44:97:32:5d:
54:bc:d7:e3:c3:d0:0a:26:be:02:fe:82:fe:c6:de:
9e:9e:e8:ad:9c:08:c3:da:d1:e2:fd:ce:88:94:c1:
a5:bf
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
77:F1:77:81:D3:0B:65:F6:BE:F2:2A:27:06:BB:AC:EC:11:63:36:AC
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/73066471-bcc2-47a5-8a9b-3dab2b2fd759/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/73066471-bcc2-47a5-8a9b-3dab2b2fd759/2559d30393c226001b2b2306d5cdf8c59cc392fe.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.235.16.0/22
131.0.76.0/22
168.181.68.0/22
170.254.124.0/22
177.125.220.0/22
177.131.112.0/20
190.89.104.0/22
200.53.16.0/20
IPv6:
2804:8c0::/32
2804:1a64::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
14457
262391
Signature Algorithm: sha256WithRSAEncryption
2b:37:de:7b:4a:32:c7:8d:05:46:a6:cf:8c:b6:37:6a:e6:4b:
f3:f3:9f:92:12:8a:b9:31:2a:ab:09:7f:6b:99:0d:e3:00:c2:
02:e3:2e:6e:8f:51:8d:da:ff:34:3e:d8:8d:67:61:23:32:64:
fb:22:f4:69:c3:60:74:dc:15:61:35:cb:da:21:d6:9d:56:7d:
36:20:ee:df:7f:57:e5:37:d8:5d:9e:ad:c7:12:87:2e:aa:fc:
a8:f4:4b:23:54:f2:2b:b9:52:84:fe:cb:c8:9a:90:98:1b:76:
dd:44:d1:78:ba:f8:a5:e9:7c:43:76:ed:f7:92:9c:48:54:ea:
2e:4c:d3:f9:5d:64:dd:d5:54:81:6a:43:a9:53:65:c0:1b:a6:
6c:15:e7:76:6c:29:70:aa:5c:ed:62:d3:4e:a5:ed:08:91:cc:
b6:f4:a9:49:f5:a2:1d:fd:68:8e:a8:6b:ac:a1:68:22:3b:14:
82:0d:2e:c2:32:09:af:3a:13:b9:68:0c:c4:29:28:bc:9c:79:
db:86:d1:9b:a6:78:2d:76:a9:71:56:52:ce:12:e3:9c:a5:0c:
84:b4:83:40:b4:58:97:6d:e7:ba:ad:cf:dd:aa:62:84:a7:73:
c6:16:ce:c7:dc:41:07:3b:e5:fd:92:d0:7b:5b:07:09:1d:68:
ba:5e:eb:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:10 2024 by rpki-client on console-fra.rpki-client.org