Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec2580c7b1428c52b125216e3788d1f223af85f.cer
File: 3ec2580c7b1428c52b125216e3788d1f223af85f.cer (raw, json)
Hash identifier: dfweuQRpGl/2TJPDTrrUJ7eQwmsnNKDFp83sGnklbvs=
Subject key identifier: D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: E5B48F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/3ec2580c7b1428c52b125216e3788d1f223af85f.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Thu 10 Dec 2020 16:34:50 +0000
Certificate not after: Thu 16 May 2024 06:00:00 +0000
Subordinate resources: AS: 262186
IP: 138.0.116.0/22
IP: 177.93.32.0/19
IP: 181.225.96.0/20
IP: 186.96.96.0/19
IP: 186.148.160.0/19
IP: 186.179.96.0/20
IP: 186.190.224.0/21
IP: 190.2.208.0/21
IP: 190.13.80.0/21
IP: 191.97.0.0/20
IP: 191.102.64.0/18
IP: 192.144.112.0/22
IP: 200.69.64.0/19
IP: 2803:1a00::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15053967 (0xe5b48f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Dec 10 16:34:50 2020 GMT
Not After : May 16 06:00:00 2024 GMT
Subject: CN=3ec2580c7b1428c52b125216e3788d1f223af85f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b8:9e:32:39:92:c2:a7:7b:89:59:4c:84:21:6a:
c8:da:b9:c2:40:ad:b8:34:82:33:16:69:25:e6:fc:
09:0c:98:83:23:81:0f:c8:36:00:c7:1f:8f:ed:fc:
a1:47:12:34:b6:52:66:fe:05:6c:ce:41:5e:99:b4:
b6:10:77:47:b1:df:ca:da:ba:63:69:4a:ab:29:4c:
2b:da:70:34:aa:21:e9:53:67:4e:b9:9c:e0:69:8c:
a1:37:b8:bd:72:c5:a7:2c:9b:bd:ea:01:69:95:65:
9e:81:08:3a:41:78:c5:31:c9:5f:f4:c3:21:07:18:
6a:f8:0d:6d:2c:ba:f1:c7:6c:f2:b4:a7:98:90:d3:
37:45:ae:6a:6d:1f:5e:90:6b:a0:75:c7:44:92:4a:
ff:e9:91:d1:17:4e:db:cd:90:29:1a:33:64:1e:b1:
06:81:87:8c:2b:d2:57:52:05:0d:f8:fb:7b:fa:a5:
22:b8:08:09:31:1a:0a:fb:97:3f:db:65:6a:84:a7:
bc:f1:83:62:62:f6:be:c0:5f:be:2c:67:21:c1:4e:
50:25:9d:71:eb:b1:40:20:0c:30:93:4d:25:89:f8:
64:97:69:4f:ce:9a:41:91:05:ff:a1:f0:9b:fb:f0:
ed:b7:38:20:41:2b:43:1c:ed:ba:37:93:ca:22:85:
55:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/3ec2580c7b1428c52b125216e3788d1f223af85f.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.0.116.0/22
177.93.32.0/19
181.225.96.0/20
186.96.96.0/19
186.148.160.0/19
186.179.96.0/20
186.190.224.0/21
190.2.208.0/21
190.13.80.0/21
191.97.0.0/20
191.102.64.0/18
192.144.112.0/22
200.69.64.0/19
IPv6:
2803:1a00::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
262186
Signature Algorithm: sha256WithRSAEncryption
2d:ab:d6:3f:25:94:4f:0c:31:b5:2b:06:22:ac:6f:92:7a:b4:
2a:35:18:06:c4:b2:4e:6d:74:fc:0f:80:c4:47:52:68:a4:9b:
98:bd:e8:8e:4f:6b:de:43:87:57:37:39:1e:72:9c:1b:00:dc:
6f:d4:e7:3d:f0:13:22:37:ee:4e:f9:40:6f:2d:09:5c:70:8e:
ab:bb:85:84:2b:f7:d0:2a:cc:91:01:f3:cc:29:5c:a8:ab:6f:
80:0f:83:5e:bc:b2:2f:d2:f4:1a:98:e0:ef:b8:93:70:3c:4e:
44:3c:c2:3f:23:9f:3c:83:cb:5d:82:d0:82:09:73:54:06:9f:
7d:e0:f4:e2:93:d3:72:43:6a:0d:45:3a:f2:07:41:c2:99:ee:
bf:e2:ae:31:83:ae:d1:56:ae:54:06:ba:9a:7e:26:e1:bf:4c:
6b:33:11:e2:58:f8:6b:67:15:5d:52:55:5e:f3:97:9b:f5:b8:
4d:b4:ff:9a:b3:32:d6:e6:33:f8:68:9f:dd:bf:19:53:a8:31:
12:1d:6f:ed:3c:ce:15:3e:93:3e:43:a9:27:e3:7b:bf:2c:49:
f7:07:29:96:d6:ef:27:53:04:b4:96:2b:c9:17:6e:39:da:c3:
b8:52:2f:e7:db:b1:0a:31:06:9d:75:ec:ac:bb:b2:f4:28:3a:
ba:c0:ec:59
-----BEGIN CERTIFICATE-----
MIIGIjCCBQqgAwIBAgIEAOW0jzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTIxMDE2MzQ1MFoXDTI0MDUxNjA2MDAw
MFowMzExMC8GA1UEAxMoM2VjMjU4MGM3YjE0MjhjNTJiMTI1MjE2ZTM3ODhkMWYy
MjNhZjg1ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALieMjmSwqd7
iVlMhCFqyNq5wkCtuDSCMxZpJeb8CQyYgyOBD8g2AMcfj+38oUcSNLZSZv4FbM5B
Xpm0thB3R7Hfytq6Y2lKqylMK9pwNKoh6VNnTrmc4GmMoTe4vXLFpyybveoBaZVl
noEIOkF4xTHJX/TDIQcYavgNbSy68cds8rSnmJDTN0Wuam0fXpBroHXHRJJK/+mR
0RdO282QKRozZB6xBoGHjCvSV1IFDfj7e/qlIrgICTEaCvuXP9tlaoSnvPGDYmL2
vsBfvixnIcFOUCWdceuxQCAMMJNNJYn4ZJdpT86aQZEF/6Hwm/vw7bc4IEErQxzt
ujeTyiKFVTMCAwEAAaOCA1EwggNNMB0GA1UdDgQWBBTRF5EoUAECUv7XzfHTbfX6
444dFTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iMWYyYzNiNS02Yzkx
LTRhYTItOTU0My1mOTgyZDNmMTY1YzEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjFmMmMzYjUtNmM5MS00
YWEyLTk1NDMtZjk4MmQzZjE2NWMxLzNlYzI1ODBjN2IxNDI4YzUyYjEyNTIxNmUz
Nzg4ZDFmMjIzYWY4NWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB2
BggrBgEFBQcBBwEB/wRnMGUwVAQCAAEwTgMEAooAdAMEBbFdIAMEBLXhYAMEBbpg
YAMEBbqUoAMEBLqzYAMEA7q+4AMEA74C0AMEA74NUAMEBL9hAAMEBr9mQAMEAsCQ
cAMEBchFQDANBAIAAjAHAwUAKAMaADAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
ACowDQYJKoZIhvcNAQELBQADggEBAC2r1j8llE8MMbUrBiKsb5J6tCo1GAbEsk5t
dPwPgMRHUmikm5i96I5Pa95Dh1c3OR5ynBsA3G/U5z3wEyI37k75QG8tCVxwjqu7
hYQr99AqzJEB88wpXKirb4APg168si/S9BqY4O+4k3A8TkQ8wj8jnzyDy12C0IIJ
c1QGn33g9OKT03JDag1FOvIHQcKZ7r/irjGDrtFWrlQGupp+JuG/TGszEeJY+Gtn
FV1SVV7zl5v1uE20/5qzMtbmM/hon92/GVOoMRIdb+08zhU+kz5DqSfje78sSfcH
KZbW7ydTBLSWK8kXbjnaw7hSL+fbsQoxBp117Ky7svQoOrrA7Fk=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org