Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6ff75e9cde86b5c490d171a8993267e23270787a.cer
File: 6ff75e9cde86b5c490d171a8993267e23270787a.cer (raw, json)
Hash identifier: USxDJZfONhIxRVpNyvCtxChyhTZA9k+A8oNL1+VeBX4=
Subject key identifier: 95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: E221E6
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 06 Apr 2021 16:09:09 +0000
Certificate not after: Wed 09 Oct 2024 19:47:45 +0000
Subordinate resources: IP: 138.84.32.0/19
IP: 149.19.160.0/20
IP: 179.60.168.0/21
IP: 2803:9810::/32
Validation: OK
Signature path: rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.mft
rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.crl
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.mft
rsync://repository.lacnic.net/rpki/lacnic/rta-lacnic-rpki.cer
Signature path expires: Sat 13 May 2023 19:39:08 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14819814 (0xe221e6)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Apr 6 16:09:09 2021 GMT
Not After : Oct 9 19:47:45 2024 GMT
Subject: CN=6ff75e9cde86b5c490d171a8993267e23270787a
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a1:16:49:b0:c5:36:05:0c:86:25:ce:63:c1:87:
06:70:a9:1b:7f:ea:8d:e7:d1:71:90:a2:df:10:d4:
32:9a:78:7a:7a:78:65:37:a3:0f:6b:fb:26:f1:2a:
9a:09:5a:08:19:ac:4c:7a:0f:f4:52:bb:63:38:f9:
ec:5c:52:0a:a5:22:86:95:65:6f:bc:14:eb:17:3b:
ed:80:2c:d8:f2:a3:76:df:9c:e4:85:cf:57:fa:ff:
e1:f8:6a:5c:27:66:21:99:99:a8:93:f2:ed:85:a2:
a0:12:a4:2e:3e:9f:32:ca:10:ac:dd:0f:5a:a1:28:
3f:c7:a9:ac:8e:6e:c8:fa:17:17:03:64:d4:9f:93:
84:01:ea:7d:40:8b:d6:93:6d:4f:2e:bd:39:f3:ef:
30:89:6f:90:f9:e4:0c:47:5e:6a:75:2e:4e:24:74:
cb:fa:08:9c:10:f8:b9:0c:0b:4c:d1:f3:e0:cc:59:
18:2e:1c:50:04:b9:c8:af:1a:69:31:ec:b2:7b:1c:
2a:f0:f8:54:6b:b7:c7:97:34:98:44:09:57:56:55:
fa:87:8a:3f:6b:ee:6a:a1:30:d7:d1:74:14:9d:e7:
1d:77:7b:42:d3:85:f8:84:15:04:93:40:04:38:44:
be:11:b0:2b:9e:d2:aa:24:a0:2f:d1:93:25:ae:5a:
9a:a9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
95:A6:67:0F:79:8D:EC:6E:34:2F:A0:19:BF:9B:D8:87:BA:A0:E2:23
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/295a55e8-fb31-4987-ac8d-343df97ff387/6ff75e9cde86b5c490d171a8993267e23270787a.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
138.84.32.0/19
149.19.160.0/20
179.60.168.0/21
IPv6:
2803:9810::/32
Signature Algorithm: sha256WithRSAEncryption
ae:f1:ad:93:8c:2c:72:74:f4:6e:6e:35:13:27:70:f7:e5:5d:
a3:ad:3e:f9:34:e0:60:0f:0c:be:df:46:ea:9e:50:41:b0:35:
78:bf:54:1c:aa:2a:d8:c6:a6:ee:34:3d:00:ce:c3:24:54:bc:
a3:d5:5a:98:46:39:94:45:2e:18:95:b9:02:7d:74:4d:1b:75:
a5:b7:d1:4f:3c:c1:d0:53:6d:3a:22:a9:e8:f4:8f:ad:b3:60:
e3:95:7b:5e:34:37:b2:7c:52:5e:14:0c:c8:fd:0d:55:36:7c:
75:70:da:78:0b:89:56:71:6f:6b:17:17:05:9b:1b:1d:00:51:
f8:b2:ec:6a:78:a4:98:91:38:41:a3:71:5b:fe:4b:4d:7f:89:
1b:5f:85:38:1a:4d:09:20:01:2f:66:83:80:e8:45:19:65:9d:
40:20:3c:a0:88:33:23:1a:05:40:35:74:ee:48:ef:4f:12:60:
8d:a1:54:5e:33:ab:7a:ec:9e:94:2f:18:40:c6:5f:79:a1:54:
6c:e5:4f:28:2c:17:25:1e:51:2b:79:5f:97:ff:3c:82:c1:f3:
dc:fc:f7:f7:3a:a8:f5:75:31:90:04:de:bf:d3:50:bd:d5:bc:
b4:1f:ca:04:22:0a:38:f4:31:9f:da:a7:0c:24:be:39:7e:0b:
a2:53:02:f8
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAOIh5jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDQwNjE2MDkwOVoXDTI0MTAwOTE5NDc0
NVowMzExMC8GA1UEAxMoNmZmNzVlOWNkZTg2YjVjNDkwZDE3MWE4OTkzMjY3ZTIz
MjcwNzg3YTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKEWSbDFNgUM
hiXOY8GHBnCpG3/qjefRcZCi3xDUMpp4enp4ZTejD2v7JvEqmglaCBmsTHoP9FK7
Yzj57FxSCqUihpVlb7wU6xc77YAs2PKjdt+c5IXPV/r/4fhqXCdmIZmZqJPy7YWi
oBKkLj6fMsoQrN0PWqEoP8eprI5uyPoXFwNk1J+ThAHqfUCL1pNtTy69OfPvMIlv
kPnkDEdeanUuTiR0y/oInBD4uQwLTNHz4MxZGC4cUAS5yK8aaTHssnscKvD4VGu3
x5c0mEQJV1ZV+oeKP2vuaqEw19F0FJ3nHXd7QtOF+IQVBJNABDhEvhGwK57SqiSg
L9GTJa5amqkCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBSVpmcPeY3sbjQvoBm/m9iH
uqDiIzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yOTVhNTVlOC1mYjMx
LTQ5ODctYWM4ZC0zNDNkZjk3ZmYzODcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjk1YTU1ZTgtZmIzMS00
OTg3LWFjOGQtMzQzZGY5N2ZmMzg3LzZmZjc1ZTljZGU4NmI1YzQ5MGQxNzFhODk5
MzI2N2UyMzI3MDc4N2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBYpUIAMEBJUToAMEA7M8qDANBAIA
AjAHAwUAKAOYEDANBgkqhkiG9w0BAQsFAAOCAQEArvGtk4wscnT0bm41Eydw9+Vd
o60++TTgYA8Mvt9G6p5QQbA1eL9UHKoq2Mam7jQ9AM7DJFS8o9VamEY5lEUuGJW5
An10TRt1pbfRTzzB0FNtOiKp6PSPrbNg45V7XjQ3snxSXhQMyP0NVTZ8dXDaeAuJ
VnFvaxcXBZsbHQBR+LLsanikmJE4QaNxW/5LTX+JG1+FOBpNCSABL2aDgOhFGWWd
QCA8oIgzIxoFQDV07kjvTxJgjaFUXjOreuyelC8YQMZfeaFUbOVPKCwXJR5RK3lf
l/88gsHz3Pz39zqo9XUxkATev9NQvdW8tB/KBCIKOPQxn9qnDCS+OX4LolMC+A==
-----END CERTIFICATE-----
Generated at Thu May 11 00:55:43 2023 by rpki-client on console-ams.rpki-client.org