Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2976ad75722b56c555dc377ffc12668912cc9247.cer
File: 2976ad75722b56c555dc377ffc12668912cc9247.cer (raw, json)
Hash identifier: 7tOBAAq4bKqi1tXI8s8BoZ/QMYiuRoupto7f0zn8aUc=
Subject key identifier: AB:75:E0:7D:F2:C5:70:28:E6:35:B5:D4:FD:1E:14:9D:10:72:AE:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 010223A3
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/b1b6683f-3c01-4053-ab33-e754c8c8a2af/2976ad75722b56c555dc377ffc12668912cc9247.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/b1b6683f-3c01-4053-ab33-e754c8c8a2af/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 27 Oct 2023 20:51:02 +0000
Certificate not after: Thu 02 Jan 2025 20:20:14 +0000
Subordinate resources: AS: 22689
IP: 138.59.88.0/22
IP: 186.236.128.0/18
IP: 187.0.64.0/18
IP: 187.18.64.0/18
IP: 187.62.0.0/18
IP: 187.121.128.0/20
IP: 189.14.0.0/18
IP: 189.76.0.0/18
IP: 200.155.32.0/19
IP: 200.233.96.0/19
IP: 201.23.128.0/19
IP: 201.54.64.0/18
IP: 201.94.192.0/18
IP: 2804:22c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16917411 (0x10223a3)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Oct 27 20:51:02 2023 GMT
Not After : Jan 2 20:20:14 2025 GMT
Subject: CN=2976ad75722b56c555dc377ffc12668912cc9247
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a7:71:67:63:cc:2a:b4:b8:29:18:2c:04:25:85:
15:e4:dd:d7:a0:e0:ee:82:db:2f:80:d3:08:19:9a:
c1:ce:a4:5b:bb:2c:fe:ad:41:ea:fb:7b:dd:5f:ef:
93:17:cf:12:54:82:e1:f1:80:2b:f8:73:a4:12:e2:
8f:0e:67:ec:01:33:cf:df:f1:5b:42:c5:3d:87:fc:
ed:1f:bd:09:03:39:4d:91:15:2a:53:36:5e:85:f3:
0e:a1:58:32:90:89:52:87:08:6d:db:13:30:68:34:
8d:37:43:8d:40:09:0d:f3:ba:0f:9a:e1:72:72:d9:
55:83:63:77:fc:de:13:10:76:4d:4b:1e:80:be:83:
0a:8b:d5:63:61:e8:5a:ed:e8:b0:70:87:21:32:50:
0d:d5:1d:af:8d:82:aa:a6:b8:2d:d4:55:13:1c:85:
e6:1d:a4:4b:60:55:8d:28:6c:cb:55:7a:82:c3:f2:
4e:e4:ad:ee:77:5c:f6:08:bc:36:10:d3:24:ff:a4:
e2:f5:bb:19:54:e0:a9:9f:1a:8b:0d:2e:dc:5d:51:
dc:ac:83:ab:bb:69:2a:9f:dc:5c:17:40:4b:2f:dd:
05:b4:b6:e3:a7:94:e0:58:83:7f:1f:70:65:f8:b2:
71:c8:9f:5d:75:59:7f:e0:88:ca:02:80:fe:c7:c0:
c2:79
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
AB:75:E0:7D:F2:C5:70:28:E6:35:B5:D4:FD:1E:14:9D:10:72:AE:6D
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b1b6683f-3c01-4053-ab33-e754c8c8a2af/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b1b6683f-3c01-4053-ab33-e754c8c8a2af/2976ad75722b56c555dc377ffc12668912cc9247.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.59.88.0/22
186.236.128.0/18
187.0.64.0/18
187.18.64.0/18
187.62.0.0/18
187.121.128.0/20
189.14.0.0/18
189.76.0.0/18
200.155.32.0/19
200.233.96.0/19
201.23.128.0/19
201.54.64.0/18
201.94.192.0/18
IPv6:
2804:22c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22689
Signature Algorithm: sha256WithRSAEncryption
26:4f:41:32:33:25:3b:85:1d:cc:83:17:7a:8e:d8:aa:6d:d0:
ae:81:48:0e:78:f4:39:47:9b:e9:4b:c8:a0:70:64:67:0a:2b:
91:7e:e3:0d:d9:52:0e:18:51:38:3c:2d:71:ae:50:b3:26:15:
23:2a:d2:43:07:f5:66:9b:b9:a8:56:09:20:ac:65:57:f0:35:
d0:1e:c9:ad:db:1b:fa:96:48:0c:dc:7d:b8:99:fa:fc:8f:e7:
2b:5c:df:f3:ae:36:76:bc:5e:89:8b:5e:55:5a:be:ae:7c:14:
d1:cc:c2:8b:db:96:6a:8f:92:e6:6d:80:68:ce:46:3a:b9:84:
37:78:30:bd:f0:6f:f2:f4:0f:ff:a9:01:ea:d8:09:dd:2b:91:
33:de:87:80:04:09:50:95:af:b3:eb:91:1b:d8:5c:2d:22:34:
7c:ec:04:4e:c9:2d:bd:97:d4:d2:13:00:d2:a1:25:94:dc:ed:
17:0e:9e:06:8d:24:14:fd:6e:54:c8:42:67:90:cb:c0:c2:b2:
e4:f2:2a:87:28:61:0a:f7:94:f0:fa:04:9a:ce:7e:29:92:49:
44:a2:1a:b7:e6:d5:e5:bd:6e:98:5f:67:c5:bf:99:dc:48:3b:
34:c7:79:84:dd:c2:9d:ce:50:ff:23:f9:68:f1:a7:7d:ec:11:
a8:c7:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:24 2024 by rpki-client on console-ams.rpki-client.org