Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
File: 39c565bbc1beca70ca953d23feff753b392a17a7.cer (raw, json)
Hash identifier: kC1gDtJgAUOK8Nf4sIAYAXACKLcIc3FO+8K0puAObn8=
Subject key identifier: 87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: F767BF
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Nov 2017 18:36:53 +0000
Certificate not after: Mon 30 Sep 2024 05:00:00 +0000
Subordinate resources: AS: 27951
IP: 132.255.20.0/22
IP: 138.117.108.0/22
IP: 168.90.12.0/22
IP: 170.246.112.0/22
IP: 170.254.228.0/22
IP: 181.118.144.0/20
IP: 181.225.64.0/20
IP: 190.0.240.0/21
IP: 190.14.224.0/19
IP: 190.107.16.0/20
IP: 190.121.128.0/19
IP: 200.110.168.0/21
IP: 2800:490::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16213951 (0xf767bf)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Nov 17 18:36:53 2017 GMT
Not After : Sep 30 05:00:00 2024 GMT
Subject: CN=39c565bbc1beca70ca953d23feff753b392a17a7
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c0:9c:1a:8b:3a:02:9c:e6:94:40:9c:ac:b4:98:
f5:18:76:a7:3a:fb:69:9c:6d:7a:5d:cc:af:d9:20:
b0:81:8b:61:54:d5:c3:a3:23:56:84:65:8e:99:b1:
28:ab:0e:be:60:74:9e:d4:e5:7d:9b:6e:b5:81:29:
08:5c:9d:ae:e8:51:82:4b:ce:df:15:aa:07:10:a2:
06:31:c5:ca:38:78:98:18:ea:40:cc:81:c3:34:22:
f0:bc:be:34:d6:f8:be:f7:23:19:dc:92:33:75:48:
c3:50:c8:e2:93:fd:cd:e9:12:43:2c:bc:f4:e3:41:
b1:1f:af:4d:27:43:01:98:a8:71:64:8a:d9:89:8e:
2e:d1:b7:b7:dc:6f:bb:f6:b4:8e:4b:d3:1e:bd:b6:
e9:22:d5:4e:ed:04:03:95:7e:36:b0:56:1e:47:30:
9b:08:b1:d8:7c:1f:e7:b9:0d:85:9f:cb:fc:77:a7:
60:30:54:62:c7:0e:6a:89:06:d8:33:92:2a:0f:dc:
81:26:51:2a:14:8a:d4:ca:3e:cf:8a:9a:d1:3a:1f:
10:d3:1e:e9:25:5e:b1:dc:5f:eb:33:f6:93:0f:a2:
de:4b:43:72:28:8e:dd:1a:6e:5d:96:82:15:00:71:
36:ac:51:54:9f:9f:8b:ef:79:de:9c:dc:c4:b1:8a:
03:01
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
132.255.20.0/22
138.117.108.0/22
168.90.12.0/22
170.246.112.0/22
170.254.228.0/22
181.118.144.0/20
181.225.64.0/20
190.0.240.0/21
190.14.224.0/19
190.107.16.0/20
190.121.128.0/19
200.110.168.0/21
IPv6:
2800:490::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27951
Signature Algorithm: sha256WithRSAEncryption
00:44:ae:0c:68:df:5d:95:88:47:32:0b:da:29:6c:1f:8e:68:
d1:1c:a0:d8:eb:f8:7a:ca:49:14:07:c4:02:58:a1:99:42:76:
6f:ec:6a:8f:8b:49:22:f6:5c:19:bc:f7:df:47:31:76:2b:01:
fd:24:7b:cf:bf:40:35:c3:f2:d5:1f:98:13:e6:fc:ca:a0:e5:
36:ab:ed:fc:60:22:5e:3b:05:e1:b5:48:06:4a:2b:c9:fa:02:
4e:3e:17:b8:19:c9:46:a3:65:eb:67:50:8d:c5:1a:06:f0:96:
84:e1:bf:7c:96:62:24:d9:70:b5:b2:ab:9b:44:2e:73:c3:e8:
2a:1a:35:cf:bb:54:fe:ad:8e:4e:5c:65:55:cf:a5:c2:10:03:
31:f8:e8:27:95:36:08:4a:fd:ba:84:20:d8:29:6a:6e:0b:af:
15:eb:8d:1b:91:68:5e:b1:d2:1e:dd:9b:f8:4d:d5:c0:40:a1:
0e:af:0f:fe:8e:df:3c:7b:b0:8c:7b:41:11:f3:57:33:ab:b4:
e8:69:68:4d:4b:a8:a9:c0:10:0a:05:53:46:59:02:d5:0a:18:
51:22:76:4b:e4:8b:14:d0:e4:2d:f7:84:ce:f2:9c:48:f3:54:
0b:fe:ca:95:3d:c5:9b:3a:5f:6a:98:fb:fd:07:30:d6:a4:0d:
fa:c2:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org