Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer
File: 75414d9f68146acc4abcd9997952be1300ec5196.cer (raw, json)
Hash identifier: g3GwLOakgEI870Sf5OaEZYwkhzMn+3RkNN1eL3qe2vA=
Subject key identifier: 31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: F91775
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/75414d9f68146acc4abcd9997952be1300ec5196.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 23 Feb 2022 16:49:22 +0000
Certificate not after: Sat 12 Oct 2024 05:00:00 +0000
Subordinate resources: AS: 22011
AS: 22908
IP: 143.137.108.0/22
IP: 168.181.76.0/22
IP: 170.150.160.0/22
IP: 170.244.120.0/22
IP: 170.245.184.0/22
IP: 186.194.140.0/22
IP: 200.53.128.0/18
IP: 200.57.80.0/20
IP: 200.77.224.0/20
IP: 201.159.128.0/20
IP: 201.175.0.0 -- 201.175.47.255
IP: 2001:1270::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 16324469 (0xf91775)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Feb 23 16:49:22 2022 GMT
Not After : Oct 12 05:00:00 2024 GMT
Subject: CN=75414d9f68146acc4abcd9997952be1300ec5196
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:cf:c2:6e:24:1a:29:34:01:5c:7d:8a:7c:0e:cf:
36:53:e8:fa:83:d1:94:8b:6d:ac:81:6c:81:71:04:
47:33:70:47:d4:7c:7d:9a:0d:5f:92:05:30:e3:37:
12:e4:7a:c1:1f:e4:20:d6:bd:10:eb:56:23:79:df:
f5:95:68:d3:59:38:38:cf:72:fe:d8:23:83:3d:5e:
b6:90:00:44:da:c8:a6:69:a8:6f:02:d7:ff:6e:0c:
56:f0:1e:2e:f1:91:8c:70:e5:e4:72:8a:3c:5d:70:
2f:13:8a:4a:d0:11:ce:4d:28:64:95:2f:08:a4:2c:
2a:f5:be:b4:70:e1:22:ec:41:4d:5e:dd:40:12:ed:
e8:93:3a:67:38:26:67:6c:78:fe:4e:a6:b9:ec:c2:
aa:a5:77:49:57:25:a0:9e:53:a1:68:e3:6c:eb:15:
1b:5f:be:41:f7:3b:fd:68:5a:d7:11:cc:37:fb:59:
ea:df:a1:0c:6b:37:d2:ed:6e:92:1a:d4:13:4d:69:
6e:6d:97:fc:cf:5b:b1:ce:96:44:a9:1e:fd:0d:d2:
08:45:d5:b6:2f:92:36:da:74:a7:bc:82:3b:b5:b4:
8a:e6:b0:74:a1:f6:6c:ae:b2:af:0c:06:8c:43:22:
27:98:d0:ab:6b:4a:39:a3:ab:3c:b2:60:cb:c8:be:
01:b7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/75414d9f68146acc4abcd9997952be1300ec5196.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
143.137.108.0/22
168.181.76.0/22
170.150.160.0/22
170.244.120.0/22
170.245.184.0/22
186.194.140.0/22
200.53.128.0/18
200.57.80.0/20
200.77.224.0/20
201.159.128.0/20
201.175.0.0-201.175.47.255
IPv6:
2001:1270::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
22011
22908
Signature Algorithm: sha256WithRSAEncryption
3a:00:92:1e:9e:37:81:3e:b5:43:95:a8:8e:b4:42:1d:a4:5f:
2c:c9:0c:1f:0c:4a:68:35:60:bc:8f:db:d0:12:b7:79:64:a7:
77:c9:c8:0d:1f:bf:ff:2c:4d:ea:82:2a:b9:84:d4:2a:d0:73:
13:cf:e7:f3:bd:69:5e:be:26:b1:77:26:8f:f2:ee:58:56:c3:
1c:c4:c3:94:bf:65:51:43:00:1f:f2:39:43:38:dd:6e:68:14:
5d:06:89:46:c3:1d:f2:c5:5c:78:7a:3c:19:7a:ac:9a:07:c4:
b1:b2:4b:86:21:45:d0:e6:5f:10:a4:bd:0d:81:90:f4:da:54:
38:fd:46:f2:01:b6:f3:c4:5b:3a:27:60:f1:8a:a3:24:5e:44:
6a:bf:48:ac:41:f1:13:1d:50:09:fa:79:26:eb:f8:ad:b5:1b:
4a:c2:bd:75:3d:bc:51:6e:7f:bd:a1:0d:ae:2e:c2:8c:bf:d7:
21:fe:5a:e7:27:34:ff:81:7c:eb:47:b4:a8:19:47:09:de:b7:
08:af:63:ae:40:5c:c5:c8:c5:61:57:c1:03:3d:2a:eb:3e:2d:
cd:c0:60:2e:02:e9:5c:74:cb:ee:b8:86:f5:90:9a:88:3e:07:
74:f6:ca:81:56:d2:91:ce:78:f7:12:66:ab:9f:5c:12:d6:2b:
21:f7:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org