Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cfc2d85b2516d8ba5149ddc3e802485e67e27c9.cer
File: 3cfc2d85b2516d8ba5149ddc3e802485e67e27c9.cer (raw, json)
Hash identifier: MqFDYOPksJ08YQDEQmlnzWSNUXocezS09ZfZP5gdi+Y=
Subject key identifier: 90:E1:4C:37:02:36:7C:AC:6F:7D:F0:DD:5C:F8:DF:AA:27:DD:AA:1F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: F2BFE2
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/29abd7fc-bb80-4148-a15c-740f48dee7fd/3cfc2d85b2516d8ba5149ddc3e802485e67e27c9.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/29abd7fc-bb80-4148-a15c-740f48dee7fd/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 10 Jul 2019 16:22:29 +0000
Certificate not after: Sat 24 Aug 2024 15:00:00 +0000
Subordinate resources: AS: 6332
IP: 187.250.0.0/16
IP: 189.222.0.0/15
IP: 200.23.248.0/22
IP: 200.38.0.0/19
IP: 200.56.96.0/20
IP: 200.76.224.0/19
IP: 200.79.128.0/19
IP: 201.130.96.0 -- 201.130.191.255
IP: 201.142.128.0 -- 201.143.255.255
IP: 201.170.0.0/15
IP: 2806:290::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15908834 (0xf2bfe2)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Jul 10 16:22:29 2019 GMT
Not After : Aug 24 15:00:00 2024 GMT
Subject: CN=3cfc2d85b2516d8ba5149ddc3e802485e67e27c9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c7:50:fb:5a:b0:b0:c0:b0:f7:3b:51:b7:61:9d:
8a:08:f4:4e:90:57:be:49:73:0a:ed:79:ab:61:26:
5a:3c:90:72:6e:a9:96:36:d6:88:3e:be:47:bd:f6:
d2:b7:96:fe:ff:7c:15:2a:a3:33:ea:17:3b:ad:3e:
28:78:40:50:a5:89:d1:c0:e8:0e:31:1b:67:d5:7b:
fa:e0:0c:6f:10:18:25:9d:ba:4c:56:f1:bd:ab:f6:
93:c5:11:c4:35:e7:ca:a4:26:98:57:ac:4c:ee:1f:
f8:47:25:f6:0c:52:09:f1:48:71:50:a8:eb:04:3e:
6a:f6:1f:1e:18:a9:7c:ab:7d:b3:60:ce:14:fb:b6:
2a:75:30:82:03:66:89:2b:54:14:5d:19:87:62:98:
b2:ce:ea:37:3d:65:dc:59:b6:cf:6d:67:95:6d:ad:
39:03:9d:45:ad:c0:1e:3d:57:0a:da:f0:e8:b4:a2:
88:12:48:ff:97:36:f2:64:85:92:cb:b1:5f:49:77:
b3:87:17:60:99:b8:32:7c:1d:ac:b1:8d:85:87:bd:
cb:28:26:b4:10:0b:09:af:fb:19:17:3d:15:f0:f4:
df:7c:74:8d:c5:a9:97:91:9f:f6:76:e0:80:53:91:
39:f9:a2:4d:11:11:2f:11:c6:fb:8b:0f:18:7d:ed:
f8:d5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
90:E1:4C:37:02:36:7C:AC:6F:7D:F0:DD:5C:F8:DF:AA:27:DD:AA:1F
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/29abd7fc-bb80-4148-a15c-740f48dee7fd/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/29abd7fc-bb80-4148-a15c-740f48dee7fd/3cfc2d85b2516d8ba5149ddc3e802485e67e27c9.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
187.250.0.0/16
189.222.0.0/15
200.23.248.0/22
200.38.0.0/19
200.56.96.0/20
200.76.224.0/19
200.79.128.0/19
201.130.96.0-201.130.191.255
201.142.128.0-201.143.255.255
201.170.0.0/15
IPv6:
2806:290::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6332
Signature Algorithm: sha256WithRSAEncryption
07:cf:ff:af:62:9a:f6:7c:54:82:f6:7b:e9:01:5f:bb:09:76:
95:9d:f9:fc:61:e5:da:87:b5:36:42:df:40:79:96:6a:19:3e:
d5:ad:ed:d7:f4:8f:68:b9:ac:54:4a:76:09:89:4a:ae:af:1a:
14:ef:1e:bc:f3:e7:17:8f:5e:24:ba:1f:91:44:36:0a:85:37:
c7:1f:9f:26:26:0d:1c:2d:6f:77:78:66:67:f4:28:ca:0d:df:
d4:23:73:ab:05:9a:51:a9:db:79:ff:88:6b:d9:b6:85:c4:b6:
33:c0:b2:a2:cd:f4:4d:3a:ae:f8:fe:2e:31:c8:56:19:73:14:
38:60:c4:e7:a3:d0:d2:dd:38:ba:f9:87:7e:68:00:47:32:d4:
fa:b6:db:1d:6f:a9:71:41:43:eb:9c:29:41:b6:7f:65:f4:0f:
ef:49:44:a2:d9:fd:c4:58:2e:44:e3:98:6b:6f:2b:5a:3b:d6:
ee:ef:2b:da:b9:53:42:e6:9b:75:4e:d3:d4:75:9c:fc:9d:ba:
db:2f:52:9d:3a:c3:1c:49:d5:e4:3d:7c:d8:7f:76:f8:92:78:
fa:f4:22:8b:98:1d:0e:32:2a:27:af:d8:6e:da:9c:ac:2c:30:
cd:7d:a2:da:89:21:63:1c:98:4a:7a:cb:8b:78:5e:5d:8e:87:
d8:6e:89:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org