Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer
File: 3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.cer (raw, json)
Hash identifier: bTFKV4Z96cmqf9EmtiDbLa9WZFxeHABc47QgnOn3lrE=
Subject key identifier: D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 01031C84
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Mon 24 Feb 2020 23:45:17 +0000
Certificate not after: Sun 07 Sep 2025 15:00:00 +0000
Subordinate resources: AS: 27895
IP: 181.1.152.0/22
IP: 181.85.208.0/21
IP: 181.91.84.0/22
IP: 181.94.197.0/24
IP: 181.94.208.0 -- 181.94.210.255
IP: 181.94.212.0 -- 181.94.238.255
IP: 181.94.241.0 -- 181.94.250.255
IP: 190.104.128.0/18
IP: 200.3.248.0/21
IP: 2803:2a00::/31
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16981124 (0x1031c84)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Feb 24 23:45:17 2020 GMT
Not After : Sep 7 15:00:00 2025 GMT
Subject: CN=3f0c9202d1972a5deab032862dbcc1d9d5c5e87f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:aa:2f:8e:b0:3d:21:c8:a2:82:4c:5d:60:20:e6:
8a:48:16:fd:f1:0f:36:7c:21:57:28:84:24:d0:23:
86:a3:10:b3:26:94:50:9b:49:9f:0b:96:36:07:c1:
97:71:5b:a8:6c:8e:37:0a:d9:f7:47:c6:0f:90:09:
b9:f8:e8:35:7d:b9:21:71:d7:49:18:31:da:df:81:
2c:ff:09:4c:e6:94:9a:39:32:af:ac:2d:30:f3:0d:
7a:1c:38:39:24:ac:99:84:92:8a:3c:d4:1a:3a:07:
35:d9:6c:a3:92:df:46:73:35:7f:30:47:e7:53:70:
05:fa:0a:ec:06:22:f0:be:33:94:a7:a9:a9:86:ce:
a2:48:e5:78:ab:6d:3f:ee:23:ba:c4:ab:42:f5:1d:
7b:f2:cf:aa:2c:d3:0d:dc:6b:32:d3:f8:dd:5a:df:
5b:3b:6f:5c:91:68:fe:a1:8f:e5:4e:7d:69:db:08:
42:9d:10:1e:44:07:c8:f9:4f:e3:17:c0:fc:b0:7f:
2a:53:bf:8e:ce:9f:35:43:c3:17:56:66:f2:a8:38:
49:61:a3:ae:2a:e6:9e:a1:da:ec:8b:34:65:19:da:
7e:ab:dd:fa:4a:97:2c:00:bf:d3:d7:f2:52:7a:56:
3e:ba:10:43:1e:3e:a8:f7:48:88:33:3e:43:81:d8:
b4:e1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:B8:B5:8E:04:3A:41:7E:2B:D9:31:F2:B7:7D:CC:06:F1:82:60:E1
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/40a7b962-d15d-41f0-97d4-a3c3f9ffb177/3f0c9202d1972a5deab032862dbcc1d9d5c5e87f.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
181.1.152.0/22
181.85.208.0/21
181.91.84.0/22
181.94.197.0/24
181.94.208.0-181.94.210.255
181.94.212.0-181.94.238.255
181.94.241.0-181.94.250.255
190.104.128.0/18
200.3.248.0/21
IPv6:
2803:2a00::/31
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27895
Signature Algorithm: sha256WithRSAEncryption
18:d6:26:6f:87:e7:5f:a4:ef:6f:60:72:78:3b:f6:89:dc:7f:
b5:e0:9e:49:5b:35:b6:e1:20:9f:ea:d6:b8:70:d1:15:72:f7:
3b:1c:5e:7e:77:22:9d:8e:8b:99:d8:7c:f6:53:34:76:39:d5:
ec:ee:b2:fa:76:89:ea:3e:02:ac:d3:13:4c:20:ca:6b:17:64:
c2:71:df:ff:fd:8e:d5:4b:62:bf:f1:83:aa:73:b2:dd:fa:79:
f0:e4:a0:b7:52:fb:e2:37:90:40:b2:a0:d9:d7:49:c0:0d:a2:
87:1f:3e:c1:c3:6d:3a:9f:3e:76:7c:e4:48:cb:47:47:5d:cb:
c3:f6:f9:1d:a2:d7:62:69:82:7c:b8:9b:4c:ff:55:25:70:9c:
a3:96:fe:77:f4:aa:48:45:de:d8:47:12:d3:35:7d:f1:23:40:
4b:31:c6:2d:4c:56:bc:0e:4c:63:89:19:d7:6b:d4:5b:9a:df:
f8:48:08:7e:c1:ff:fe:6c:d6:7f:3b:2e:93:b3:e3:72:af:99:
14:be:38:0e:85:23:0e:56:9f:cf:57:8b:96:54:a6:dd:c1:cb:
76:dc:af:d2:23:7a:b6:93:c9:89:20:29:3b:c5:f1:ae:b6:ba:
f4:e9:3c:76:69:49:d9:fd:39:88:51:c5:66:e8:03:c3:a0:51:
4e:7e:32:c7
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIEAQMchDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDIyNDIzNDUxN1oXDTI1MDkwNzE1MDAw
MFowMzExMC8GA1UEAxMoM2YwYzkyMDJkMTk3MmE1ZGVhYjAzMjg2MmRiY2MxZDlk
NWM1ZTg3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKovjrA9Icii
gkxdYCDmikgW/fEPNnwhVyiEJNAjhqMQsyaUUJtJnwuWNgfBl3FbqGyONwrZ90fG
D5AJufjoNX25IXHXSRgx2t+BLP8JTOaUmjkyr6wtMPMNehw4OSSsmYSSijzUGjoH
Ndlso5LfRnM1fzBH51NwBfoK7AYi8L4zlKepqYbOokjleKttP+4jusSrQvUde/LP
qizTDdxrMtP43VrfWztvXJFo/qGP5U59adsIQp0QHkQHyPlP4xfA/LB/KlO/js6f
NUPDF1Zm8qg4SWGjrirmnqHa7Is0ZRnafqvd+kqXLAC/09fyUnpWProQQx4+qPdI
iDM+Q4HYtOECAwEAAaOCA1AwggNMMB0GA1UdDgQWBBTWuLWOBDpBfivZMfK3fcwG
8YJg4TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MGE3Yjk2Mi1kMTVk
LTQxZjAtOTdkNC1hM2MzZjlmZmIxNzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDBhN2I5NjItZDE1ZC00
MWYwLTk3ZDQtYTNjM2Y5ZmZiMTc3LzNmMGM5MjAyZDE5NzJhNWRlYWIwMzI4NjJk
YmNjMWQ5ZDVjNWU4N2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB2
BggrBgEFBQcBBwEB/wRnMGUwVAQCAAEwTgMEArUBmAMEA7VV0AMEArVbVAMEALVe
xTAMAwQEtV7QAwQAtV7SMAwDBAK1XtQDBAC1Xu4wDAMEALVe8QMEALVe+gMEBr5o
gAMEA8gD+DANBAIAAjAHAwUBKAMqADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJs
9zANBgkqhkiG9w0BAQsFAAOCAQEAGNYmb4fnX6Tvb2ByeDv2idx/teCeSVs1tuEg
n+rWuHDRFXL3OxxefncinY6Lmdh89lM0djnV7O6y+naJ6j4CrNMTTCDKaxdkwnHf
//2O1Utiv/GDqnOy3fp58OSgt1L74jeQQLKg2ddJwA2ihx8+wcNtOp8+dnzkSMtH
R13Lw/b5HaLXYmmCfLibTP9VJXCco5b+d/SqSEXe2EcS0zV98SNASzHGLUxWvA5M
Y4kZ12vUW5rf+EgIfsH//mzWfzsuk7Pjcq+ZFL44DoUjDlafz1eLllSm3cHLdtyv
0iN6tpPJiSApO8Xxrra69Ok8dmlJ2f05iFHFZugDw6BRTn4yxw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org