Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6eff9d223830c0244b2e990edc87a73b0e788683.cer
File: 6eff9d223830c0244b2e990edc87a73b0e788683.cer (raw, json)
Hash identifier: eSdPxs/0IZi5cTKDV4OsJDGSf3cTOoZSLOEvPGVUqsc=
Subject key identifier: 84:7A:5F:36:85:FC:8B:00:16:AF:7B:9F:6E:4E:E9:7C:16:3F:47:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 01065B7F
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/5c504291-a690-418e-a95b-ac02e1f4bea8/6eff9d223830c0244b2e990edc87a73b0e788683.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/5c504291-a690-418e-a95b-ac02e1f4bea8/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 27 Oct 2023 20:04:58 +0000
Certificate not after: Wed 17 Sep 2025 15:00:00 +0000
Subordinate resources: AS: 7738
AS: 8167
AS: 22745
IP: 45.238.96.0/22
IP: 138.0.16.0/22
IP: 152.232.0.0 -- 152.233.127.255
IP: 152.234.0.0/18
IP: 152.234.128.0 -- 152.239.255.255
IP: 177.0.0.0/13
IP: 177.176.0.0/14
IP: 177.201.0.0 -- 177.203.255.255
IP: 177.208.0.0/14
IP: 179.64.0.0/14
IP: 179.69.64.0 -- 179.71.255.255
IP: 179.192.0.0/16
IP: 179.193.128.0 -- 179.199.255.255
IP: 179.236.0.0/16
IP: 179.237.64.0/18
IP: 179.238.0.0/15
IP: 179.252.0.0/14
IP: 186.240.0.0 -- 186.246.127.255
IP: 186.247.0.0/16
IP: 187.4.0.0/14
IP: 187.12.0.0/14
IP: 187.40.0.0 -- 187.42.255.255
IP: 187.52.0.0/14
IP: 187.76.0.0/14
IP: 187.124.0.0/14
IP: 189.10.0.0 -- 189.13.255.255
IP: 189.24.0.0/15
IP: 189.30.0.0/15
IP: 189.48.0.0/15
IP: 189.70.0.0 -- 189.75.255.255
IP: 189.80.0.0/14
IP: 189.104.0.0/14
IP: 191.0.0.0/14
IP: 191.40.0.0/16
IP: 191.43.0.0 -- 191.47.255.255
IP: 191.212.0.0 -- 191.223.255.255
IP: 200.96.0.0/15
IP: 200.101.0.0 -- 200.103.255.255
IP: 200.138.0.0/16
IP: 200.140.0.0/15
IP: 200.142.64.0/19
IP: 200.149.0.0/16
IP: 200.151.0.0/16
IP: 200.152.128.0/19
IP: 200.152.192.0/19
IP: 200.160.224.0/19
IP: 200.163.0.0 -- 200.165.255.255
IP: 200.169.128.0/17
IP: 200.180.0.0/15
IP: 200.187.128.0/19
IP: 200.193.0.0/16
IP: 200.195.0.0/17
IP: 200.199.0.0/16
IP: 200.202.192.0 -- 200.203.255.255
IP: 200.215.0.0/17
IP: 200.216.0.0/15
IP: 200.219.64.0/18
IP: 200.222.0.0/15
IP: 200.225.64.0/20
IP: 200.225.144.0 -- 200.225.191.255
IP: 200.226.0.0/16
IP: 200.234.8.0 -- 200.234.127.255
IP: 201.2.0.0 -- 201.5.255.255
IP: 201.7.0.0/17
IP: 201.8.0.0/14
IP: 201.14.0.0/15
IP: 201.18.0.0/15
IP: 201.24.0.0/15
IP: 201.29.0.0/16
IP: 201.32.0.0/16
IP: 201.34.0.0/15
IP: 201.40.0.0/15
IP: 201.50.0.0/15
IP: 201.58.0.0/15
IP: 201.66.0.0/15
IP: 201.78.0.0/15
IP: 201.88.0.0/15
IP: 201.94.0.0/17
IP: 201.175.56.0/22
IP: 2804:13c::/32
IP: 2804:d40::/27
IP: 2804:4f7c::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17193855 (0x1065b7f)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Oct 27 20:04:58 2023 GMT
Not After : Sep 17 15:00:00 2025 GMT
Subject: CN=6eff9d223830c0244b2e990edc87a73b0e788683
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b5:df:2f:07:e6:30:3a:41:d0:32:90:8a:ad:8e:
d6:40:a2:85:7d:a8:1d:e8:20:c6:a8:60:07:12:1a:
05:55:d5:25:6c:9d:e2:ff:fa:1a:96:1e:e8:e2:f1:
8a:b5:cd:a5:ab:b3:1a:71:5f:05:20:e4:86:42:b5:
99:6a:2a:e4:59:18:d0:42:bf:16:20:e9:6e:96:60:
b7:7f:3b:35:6c:c3:15:0b:c1:63:70:75:88:ab:58:
c4:ab:f6:58:d6:73:54:52:4b:fe:74:36:86:4a:3a:
04:23:80:eb:24:4c:43:46:fb:d1:38:bb:b3:4f:c9:
c0:31:4c:75:bc:76:8d:da:93:ae:e7:88:c1:7e:91:
1c:76:df:0f:52:cc:70:30:29:ca:3e:b9:09:5c:6c:
f8:b1:92:83:e0:2a:99:9e:c6:df:5b:05:62:ef:c9:
1d:b3:07:33:12:a9:f5:38:4c:0e:fa:b0:62:cd:9f:
8c:65:0f:a3:39:f4:01:d7:c5:25:2b:b8:5f:18:fb:
1c:1f:1b:21:a8:a3:e5:17:5f:39:a8:a9:a2:50:30:
3e:d8:5b:8f:8d:be:84:8a:64:a8:22:c0:79:f0:b9:
d0:a6:96:71:db:9e:a7:39:8a:b4:45:70:40:cc:f5:
f4:16:4f:e3:51:e9:d8:4c:14:64:82:6a:3b:23:d0:
ac:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
84:7A:5F:36:85:FC:8B:00:16:AF:7B:9F:6E:4E:E9:7C:16:3F:47:85
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5c504291-a690-418e-a95b-ac02e1f4bea8/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5c504291-a690-418e-a95b-ac02e1f4bea8/6eff9d223830c0244b2e990edc87a73b0e788683.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.238.96.0/22
138.0.16.0/22
152.232.0.0-152.233.127.255
152.234.0.0/18
152.234.128.0-152.239.255.255
177.0.0.0/13
177.176.0.0/14
177.201.0.0-177.203.255.255
177.208.0.0/14
179.64.0.0/14
179.69.64.0-179.71.255.255
179.192.0.0/16
179.193.128.0-179.199.255.255
179.236.0.0/16
179.237.64.0/18
179.238.0.0/15
179.252.0.0/14
186.240.0.0-186.246.127.255
186.247.0.0/16
187.4.0.0/14
187.12.0.0/14
187.40.0.0-187.42.255.255
187.52.0.0/14
187.76.0.0/14
187.124.0.0/14
189.10.0.0-189.13.255.255
189.24.0.0/15
189.30.0.0/15
189.48.0.0/15
189.70.0.0-189.75.255.255
189.80.0.0/14
189.104.0.0/14
191.0.0.0/14
191.40.0.0/16
191.43.0.0-191.47.255.255
191.212.0.0-191.223.255.255
200.96.0.0/15
200.101.0.0-200.103.255.255
200.138.0.0/16
200.140.0.0/15
200.142.64.0/19
200.149.0.0/16
200.151.0.0/16
200.152.128.0/19
200.152.192.0/19
200.160.224.0/19
200.163.0.0-200.165.255.255
200.169.128.0/17
200.180.0.0/15
200.187.128.0/19
200.193.0.0/16
200.195.0.0/17
200.199.0.0/16
200.202.192.0-200.203.255.255
200.215.0.0/17
200.216.0.0/15
200.219.64.0/18
200.222.0.0/15
200.225.64.0/20
200.225.144.0-200.225.191.255
200.226.0.0/16
200.234.8.0-200.234.127.255
201.2.0.0-201.5.255.255
201.7.0.0/17
201.8.0.0/14
201.14.0.0/15
201.18.0.0/15
201.24.0.0/15
201.29.0.0/16
201.32.0.0/16
201.34.0.0/15
201.40.0.0/15
201.50.0.0/15
201.58.0.0/15
201.66.0.0/15
201.78.0.0/15
201.88.0.0/15
201.94.0.0/17
201.175.56.0/22
IPv6:
2804:13c::/32
2804:d40::/27
2804:4f7c::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7738
8167
22745
Signature Algorithm: sha256WithRSAEncryption
2b:38:33:37:c3:95:9e:a7:a9:ca:aa:71:44:17:06:a3:a1:05:
c9:9e:55:c6:26:6d:05:b7:fe:18:3f:ae:93:eb:79:84:98:fb:
35:bb:73:bd:9d:48:c9:56:c2:05:a7:9f:6a:2e:be:64:7c:5a:
b5:5f:4e:11:73:5c:53:4f:b0:cf:79:a5:65:bb:3f:48:a8:69:
d9:78:3d:92:a2:74:90:d0:84:7f:9e:51:af:10:10:b1:f9:3d:
1c:6e:a5:04:06:e8:0c:27:1a:99:97:4c:be:7a:0f:0a:32:f2:
d6:be:1d:ea:4e:df:81:d2:23:70:e1:5c:5f:f7:ad:a2:7a:9d:
99:c6:22:f8:5e:60:04:d5:6f:6e:f5:47:cf:9c:27:91:1e:0d:
ea:79:26:b4:8b:13:2f:72:ea:cd:f2:26:79:16:66:09:8b:1c:
c1:f2:2b:29:b3:cd:54:be:35:63:54:47:7e:72:fd:39:51:11:
1c:54:e3:c0:65:e6:aa:f2:b0:02:2b:02:d3:4d:09:40:bd:ef:
84:5b:c4:a8:12:7e:86:81:12:04:9b:e6:a2:da:ce:67:b1:54:
6d:eb:fa:31:c9:64:c8:9f:f1:e5:4b:d6:f7:46:62:5d:07:bb:
89:96:6c:74:80:aa:b8:e8:f5:a1:45:09:d3:01:41:11:c8:8e:
ab:a7:4c:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org