Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5bc4379ae0b3d8af7decbde78b9cbd400561d999.cer
File: 5bc4379ae0b3d8af7decbde78b9cbd400561d999.cer (raw, json)
Hash identifier: na/TW3IMx4Y6CZLds4GLE4o7NNbuNAU0Ng8pctKWeiA=
Subject key identifier: D6:9C:CD:CD:3F:2E:68:4C:A6:C2:8C:15:44:24:D5:5C:B9:F5:5F:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: FF3DEE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/f09da2c8-0e1a-4b67-890d-06781eaa1016/5bc4379ae0b3d8af7decbde78b9cbd400561d999.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/f09da2c8-0e1a-4b67-890d-06781eaa1016/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Sun 29 Oct 2023 17:12:54 +0000
Certificate not after: Thu 03 Apr 2025 22:37:22 +0000
Subordinate resources: AS: 28349
AS: 28647
AS: 53008
AS: 53067
AS: 53143
AS: 262420
AS: 265021
AS: 266206
AS: 267203
AS: 267452
AS: 267484
AS: 268555
AS: 268603
AS: 269112
AS: 269489
IP: 45.161.148.0/22
IP: 45.163.96.0/22
IP: 45.179.0.0/22
IP: 45.187.236.0/22
IP: 45.231.136.0/22
IP: 131.0.84.0/22
IP: 131.100.68.0/22
IP: 168.195.236.0/22
IP: 170.0.160.0/22
IP: 177.84.176.0/21
IP: 177.154.64.0/20
IP: 177.185.160.0/19
IP: 179.107.0.0/21
IP: 181.191.76.0/22
IP: 186.193.112.0/20
IP: 186.194.224.0/20
IP: 186.219.96.0/20
IP: 187.85.192.0/19
IP: 187.86.112.0/20
IP: 187.87.64.0/20
IP: 189.51.128.0/19
IP: 189.113.192.0/20
IP: 189.113.216.0/21
IP: 189.126.160.0/19
IP: 200.71.68.0/22
IP: 201.76.224.0/19
IP: 2804:554::/32
IP: 2804:a50::/32
IP: 2804:b1c::/32
IP: 2804:e50::/32
IP: 2804:1a68::/32
IP: 2804:3184::/32
IP: 2804:3c5c::/32
IP: 2804:41b8::/32
IP: 2804:4230::/32
IP: 2804:49c8::/32
IP: 2804:52fc::/32
IP: 2804:53bc::/32
IP: 2804:5f9c::/32
IP: 2804:656c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16727534 (0xff3dee)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Oct 29 17:12:54 2023 GMT
Not After : Apr 3 22:37:22 2025 GMT
Subject: CN=5bc4379ae0b3d8af7decbde78b9cbd400561d999
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:bb:92:32:6c:37:fc:e9:42:b7:ef:7c:42:41:69:
d2:07:07:38:3f:23:8d:fb:ee:5d:a1:73:1b:44:bb:
c7:52:f5:93:83:45:df:c4:73:d0:d3:7f:29:5b:30:
62:d5:fa:92:fb:39:00:54:99:50:40:6f:2c:ff:cf:
01:a5:b8:42:e0:d4:72:47:46:5a:b2:b4:57:8d:76:
6e:6c:07:cb:b7:d6:22:2f:90:bd:f6:60:5c:17:49:
79:0c:7d:df:68:3a:ea:0b:d9:a3:8c:c1:b4:a0:a9:
4e:6f:e4:75:5e:cd:f5:9a:ec:df:35:76:46:01:c3:
69:ba:4a:d7:d6:10:ee:ea:1e:ff:d1:94:c7:22:76:
83:6f:f3:12:96:b9:8e:df:5c:82:0d:1f:91:c6:1e:
ca:c3:90:96:88:9d:ce:59:e1:01:6e:39:c8:76:86:
9d:9d:72:1d:3b:c3:7a:d6:ac:3d:c0:aa:52:d5:c1:
12:c4:7c:f4:81:7e:fb:1a:0b:68:ac:43:b0:96:31:
cb:c4:76:36:be:a4:35:69:66:13:57:35:58:a2:d5:
8d:40:85:60:10:fd:da:ae:4d:49:03:12:26:b9:40:
41:ef:59:6e:46:1f:da:39:e9:75:34:cb:33:d8:aa:
38:8f:0e:94:1d:17:3f:c8:ad:53:bc:01:85:26:53:
c9:33
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
D6:9C:CD:CD:3F:2E:68:4C:A6:C2:8C:15:44:24:D5:5C:B9:F5:5F:47
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f09da2c8-0e1a-4b67-890d-06781eaa1016/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f09da2c8-0e1a-4b67-890d-06781eaa1016/5bc4379ae0b3d8af7decbde78b9cbd400561d999.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.161.148.0/22
45.163.96.0/22
45.179.0.0/22
45.187.236.0/22
45.231.136.0/22
131.0.84.0/22
131.100.68.0/22
168.195.236.0/22
170.0.160.0/22
177.84.176.0/21
177.154.64.0/20
177.185.160.0/19
179.107.0.0/21
181.191.76.0/22
186.193.112.0/20
186.194.224.0/20
186.219.96.0/20
187.85.192.0/19
187.86.112.0/20
187.87.64.0/20
189.51.128.0/19
189.113.192.0/20
189.113.216.0/21
189.126.160.0/19
200.71.68.0/22
201.76.224.0/19
IPv6:
2804:554::/32
2804:a50::/32
2804:b1c::/32
2804:e50::/32
2804:1a68::/32
2804:3184::/32
2804:3c5c::/32
2804:41b8::/32
2804:4230::/32
2804:49c8::/32
2804:52fc::/32
2804:53bc::/32
2804:5f9c::/32
2804:656c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28349
28647
53008
53067
53143
262420
265021
266206
267203
267452
267484
268555
268603
269112
269489
Signature Algorithm: sha256WithRSAEncryption
63:77:f2:2a:7e:1a:d5:c0:8f:fc:6a:c3:c9:27:9d:e1:22:17:
c4:f8:01:a5:02:67:89:ca:9d:82:3e:bf:71:4c:93:bb:c5:a1:
52:e4:a1:bd:bc:2a:50:f2:45:6e:57:d8:1b:fc:b9:a7:ba:af:
b8:73:0d:b6:4d:55:1f:5e:c1:5e:5f:bb:e7:56:94:ac:19:02:
dd:69:1f:7f:94:4d:f9:e8:d9:cb:32:af:87:f0:31:8e:34:34:
ee:50:5e:c9:3c:31:74:bb:ff:d1:a6:b9:e0:44:7f:1e:64:89:
6b:49:5c:5e:aa:56:d8:ae:1c:87:8e:ea:e5:a6:f8:c4:11:15:
21:70:94:07:e1:f5:32:b2:b7:27:7b:69:0e:af:03:5c:b1:f1:
6d:a4:cd:d6:9a:0e:50:40:88:40:90:8b:be:85:0b:2b:9f:86:
03:c7:c2:6e:ef:ab:0c:bb:a3:b6:ea:ad:9c:a9:e8:55:a1:e2:
e0:fd:3b:ef:0d:8e:2e:f6:80:74:34:88:fa:fb:91:24:f1:9b:
00:2f:11:6b:bb:70:29:7c:9f:3f:a9:70:6a:8a:d2:e1:28:98:
f4:f5:39:56:2b:e5:aa:39:41:92:95:0e:cd:e0:c7:18:45:c9:
17:a4:74:1f:0a:fe:00:16:ba:43:1f:22:b5:3a:fc:ea:4e:54:
d8:fe:ba:43
-----BEGIN CERTIFICATE-----
MIIHFzCCBf+gAwIBAgIEAP897jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyOTE3MTI1NFoXDTI1MDQwMzIyMzcy
MlowMzExMC8GA1UEAxMoNWJjNDM3OWFlMGIzZDhhZjdkZWNiZGU3OGI5Y2JkNDAw
NTYxZDk5OTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALuSMmw3/OlC
t+98QkFp0gcHOD8jjfvuXaFzG0S7x1L1k4NF38Rz0NN/KVswYtX6kvs5AFSZUEBv
LP/PAaW4QuDUckdGWrK0V412bmwHy7fWIi+QvfZgXBdJeQx932g66gvZo4zBtKCp
Tm/kdV7N9Zrs3zV2RgHDabpK19YQ7uoe/9GUxyJ2g2/zEpa5jt9cgg0fkcYeysOQ
loidzlnhAW45yHaGnZ1yHTvDetasPcCqUtXBEsR89IF++xoLaKxDsJYxy8R2Nr6k
NWlmE1c1WKLVjUCFYBD92q5NSQMSJrlAQe9ZbkYf2jnpdTTLM9iqOI8OlB0XP8it
U7wBhSZTyTMCAwEAAaOCBEYwggRCMB0GA1UdDgQWBBTWnM3NPy5oTKbCjBVEJNVc
ufVfRzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mMDlkYTJjOC0wZTFh
LTRiNjctODkwZC0wNjc4MWVhYTEwMTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjA5ZGEyYzgtMGUxYS00
YjY3LTg5MGQtMDY3ODFlYWExMDE2LzViYzQzNzlhZTBiM2Q4YWY3ZGVjYmRlNzhi
OWNiZDQwMDU2MWQ5OTkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
ASUGCCsGAQUFBwEHAQH/BIIBFDCCARAwgaMEAgABMIGcAwQCLaGUAwQCLaNgAwQC
LbMAAwQCLbvsAwQCLeeIAwQCgwBUAwQCg2REAwQCqMPsAwQCqgCgAwQDsVSwAwQE
sZpAAwQFsbmgAwQDs2sAAwQCtb9MAwQEusFwAwQEusLgAwQEuttgAwQFu1XAAwQE
u1ZwAwQEu1dAAwQFvTOAAwQEvXHAAwQDvXHYAwQFvX6gAwQCyEdEAwQFyUzgMGgE
AgACMGIDBQAoBAVUAwUAKAQKUAMFACgECxwDBQAoBA5QAwUAKAQaaAMFACgEMYQD
BQAoBDxcAwUAKARBuAMFACgEQjADBQAoBEnIAwUAKARS/AMFACgEU7wDBQAoBF+c
AwUAKARlbDBeBggrBgEFBQcBCAEB/wRPME2gSzBJAgJuvQICb+cCAwDPEAIDAM9L
AgMAz5cCAwQBFAIDBAs9AgMED94CAwQTwwIDBBS8AgMEFNwCAwQZCwIDBBk7AgME
GzgCAwQcsTANBgkqhkiG9w0BAQsFAAOCAQEAY3fyKn4a1cCP/GrDySed4SIXxPgB
pQJnicqdgj6/cUyTu8WhUuShvbwqUPJFblfYG/y5p7qvuHMNtk1VH17BXl+751aU
rBkC3Wkff5RN+ejZyzKvh/AxjjQ07lBeyTwxdLv/0aa54ER/HmSJa0lcXqpW2K4c
h47q5ab4xBEVIXCUB+H1MrK3J3tpDq8DXLHxbaTN1poOUECIQJCLvoULK5+GA8fC
bu+rDLujtuqtnKnoVaHi4P077w2OLvaAdDSI+vuRJPGbAC8Ra7twKXyfP6lwaorS
4SiY9PU5VivlqjlBkpUOzeDHGEXJF6R0Hwr+ABa6Qx8itTr86k5U2P66Qw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org