Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3630d9667705386aa23432fb78abe05226e5f7e2.cer
File: 3630d9667705386aa23432fb78abe05226e5f7e2.cer (raw, json)
Hash identifier: ikKl+ASjcjfhRXwQSYbhZDjDqiY1esMOoCPv1XMECU8=
Subject key identifier: FF:12:31:BB:95:EE:49:DF:AB:97:4E:0D:4A:4F:28:4D:99:9E:AB:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: FEC0E2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/c2ef9ebf-f93c-4ae6-930c-946986f5b2dc/3630d9667705386aa23432fb78abe05226e5f7e2.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/c2ef9ebf-f93c-4ae6-930c-946986f5b2dc/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 27 Oct 2023 20:11:46 +0000
Certificate not after: Wed 18 Sep 2024 12:47:05 +0000
Subordinate resources: AS: 263665
IP: 45.165.20.0/22
IP: 45.227.188.0/22
IP: 131.161.108.0/22
IP: 131.255.156.0/22
IP: 138.255.172.0/22
IP: 168.196.20.0/22
IP: 170.150.112.0/22
IP: 170.150.204.0/22
IP: 191.241.32.0/21
IP: 2804:1134::/32
IP: 2804:343c::/32
IP: 2804:47c0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16695522 (0xfec0e2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Oct 27 20:11:46 2023 GMT
Not After : Sep 18 12:47:05 2024 GMT
Subject: CN=3630d9667705386aa23432fb78abe05226e5f7e2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c9:e8:36:ae:54:9a:b6:8c:0e:37:18:fe:5d:b4:
3c:50:c5:88:68:3f:f6:b2:b1:e0:f2:fa:3f:20:a5:
8d:46:38:20:5c:cf:c8:e1:de:8c:66:e5:19:b7:9e:
9d:f7:d6:07:d9:78:08:85:48:6c:45:cf:d1:e2:36:
8c:67:61:99:e4:32:ff:62:00:6b:98:7c:72:b4:54:
dc:69:cf:7b:b2:9e:45:14:91:52:02:b1:d9:ba:a9:
79:f6:13:93:8f:50:ab:8e:b3:32:e4:d2:60:ba:b7:
b2:66:54:52:87:5c:66:b0:7d:73:d4:1c:9d:e1:6d:
1c:c9:04:7c:45:59:c0:01:ac:76:ef:c1:72:d5:1f:
73:bc:8e:a7:8a:a7:a2:17:13:ac:6d:5f:d9:3b:04:
d5:64:30:b8:da:e0:35:9e:5b:e3:c9:01:c9:e2:d5:
a5:15:ed:95:2a:be:b9:e7:ed:46:2e:fb:f2:18:18:
01:62:0b:89:97:ad:4f:a4:28:53:39:f7:c9:54:f2:
97:7f:b2:5c:d3:8e:57:a5:7d:6d:3e:a6:00:5d:6e:
e8:80:c2:75:fc:27:f9:a3:fc:b5:78:48:94:ca:0f:
45:44:18:9f:c7:97:27:25:c0:ea:e6:6f:b4:91:0a:
ce:33:51:d6:9d:f9:00:59:5c:d9:0c:39:90:b2:da:
16:c5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FF:12:31:BB:95:EE:49:DF:AB:97:4E:0D:4A:4F:28:4D:99:9E:AB:04
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c2ef9ebf-f93c-4ae6-930c-946986f5b2dc/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c2ef9ebf-f93c-4ae6-930c-946986f5b2dc/3630d9667705386aa23432fb78abe05226e5f7e2.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.165.20.0/22
45.227.188.0/22
131.161.108.0/22
131.255.156.0/22
138.255.172.0/22
168.196.20.0/22
170.150.112.0/22
170.150.204.0/22
191.241.32.0/21
IPv6:
2804:1134::/32
2804:343c::/32
2804:47c0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
263665
Signature Algorithm: sha256WithRSAEncryption
a0:73:92:45:e3:c2:6e:b0:34:5e:1c:23:c9:8b:52:20:22:bd:
c8:a3:3f:cd:ed:0b:86:03:4d:b5:f9:aa:ef:d2:54:a1:ca:71:
1a:c8:0d:10:92:3c:8c:8a:73:c7:57:1c:ee:99:e3:2e:e5:bf:
10:9a:5b:a3:bd:9d:0f:2c:6f:09:da:bf:57:fa:1c:69:6a:87:
74:20:9e:43:2e:0d:59:b7:bb:16:ca:0b:dc:79:cd:b7:24:3e:
5d:90:f7:b4:8c:52:7f:4e:19:33:f4:3d:bf:f7:5e:81:b5:08:
4b:a7:bb:56:1f:9a:f0:9f:38:70:6b:7c:5b:d2:25:0d:b6:66:
6b:f4:f3:38:49:29:9e:2a:62:73:07:97:6b:54:14:66:78:86:
ff:42:63:bb:ff:39:79:bc:04:4c:54:4d:eb:ef:b2:11:26:fc:
be:c3:58:76:12:f2:e0:8f:6b:e6:20:6d:1d:82:24:90:80:8d:
f8:a9:bd:a7:1a:7c:a6:48:e4:6a:0d:b8:0c:ec:7a:aa:d4:47:
7b:d9:d9:55:2f:fb:e5:3f:71:78:fe:71:d4:ce:05:dd:43:c6:
0e:cf:17:38:d4:28:5c:72:e6:28:b6:3c:3b:c4:c2:00:6e:a3:
cf:f1:fe:e1:e6:3e:54:a3:6f:a7:2e:d0:30:d0:20:9f:4b:03:
2b:9b:90:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org