Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer
File: 8174f9e0234527f23fb0bcfd7cea896897ec3191.cer (raw, json)
Hash identifier: tRJtXUQm/WO3Hqw5WI/bcKnRSWtxg+Whh0hTrLBq28U=
Subject key identifier: FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: D986A7
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 04 Feb 2022 16:53:56 +0000
Certificate not after: Sun 14 Jan 2024 05:00:00 +0000
Subordinate resources: AS: 7908
AS: 17399
AS: 27917
AS: 52333
IP: 200.3.116.0/22
IP: 200.47.0.0 -- 200.47.171.255
IP: 200.47.176.0 -- 200.47.215.255
IP: 200.47.220.0 -- 200.47.255.255
IP: 200.85.64.0/20
IP: 200.110.240.0/20
IP: 2001:1350::/32
IP: 2800:20::/28
IP: 2800:170::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14255783 (0xd986a7)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Feb 4 16:53:56 2022 GMT
Not After : Jan 14 05:00:00 2024 GMT
Subject: CN=8174f9e0234527f23fb0bcfd7cea896897ec3191
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:9e:8c:f9:24:9e:08:84:c9:e6:8b:64:61:5d:f8:
bb:cc:f7:0b:a8:57:04:ff:e5:cb:5d:90:19:98:fa:
95:a1:dd:d7:9b:35:36:a5:d4:61:a3:2f:e3:71:81:
04:c5:1e:1d:50:34:d5:1a:68:61:a6:7a:c7:4e:f2:
88:f5:e4:f9:e3:ab:33:17:da:30:bb:56:33:1b:fa:
cc:b8:84:cd:e1:07:5a:7c:84:e3:ef:89:6a:c6:22:
f2:82:3f:76:1d:4a:65:a3:79:15:d3:0c:ac:6e:55:
f9:cc:7f:6f:41:13:36:b9:49:32:6f:60:1c:d5:80:
8c:0e:f0:41:d9:e3:ee:17:dc:cb:b7:c2:cd:77:e7:
2c:8d:97:6d:24:10:79:65:93:10:7d:4e:ee:85:37:
00:ba:0c:27:14:46:e4:ba:41:52:1e:97:14:c3:a8:
ee:8a:7d:a8:17:da:51:32:70:d8:ed:31:a1:54:e7:
74:ed:8d:66:87:1b:82:77:b7:10:16:10:95:c2:0d:
ef:df:dc:90:c1:ab:22:a1:79:8b:36:8c:6a:f0:b7:
27:a2:59:29:40:8e:c5:07:33:33:f4:43:18:01:e2:
f6:86:77:d6:95:80:27:75:5c:45:f6:5f:ca:58:72:
6d:7f:76:2f:5e:b8:a2:91:a4:e3:3f:42:ce:79:36:
6b:83
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
200.3.116.0/22
200.47.0.0-200.47.171.255
200.47.176.0-200.47.215.255
200.47.220.0-200.47.255.255
200.85.64.0/20
200.110.240.0/20
IPv6:
2001:1350::/32
2800:20::/28
2800:170::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
7908
17399
27917
52333
Signature Algorithm: sha256WithRSAEncryption
3c:64:36:55:f6:6d:29:36:fd:88:11:1d:e0:f6:80:54:e5:49:
a3:c8:ea:d7:66:c0:09:86:df:ba:6e:fe:db:58:ca:86:a3:1c:
8f:72:ce:cb:7d:c1:17:ed:9e:70:fa:ec:a0:90:88:ff:6c:a2:
e3:a9:9d:a0:5b:79:76:6a:cd:36:5b:c1:67:fa:92:d5:35:d5:
3a:68:bc:a3:23:e7:b6:0d:d8:6b:12:96:45:f3:5a:a6:b3:d9:
af:a5:15:85:ff:d9:f0:8c:45:c8:5c:36:36:af:09:94:b1:ac:
51:c7:5e:49:c7:c5:ec:5d:d1:51:1a:16:0f:0b:d8:08:f6:b4:
f4:29:bf:c9:03:a3:86:7a:7e:cd:00:ca:b4:5c:7c:b0:0a:28:
f7:fa:0c:7f:97:20:fe:02:2a:cc:b2:35:98:44:b8:b0:c9:bb:
b9:10:5f:05:2b:c6:d2:54:00:72:27:8d:e8:26:ea:60:0d:7c:
14:18:dc:ef:e5:bf:68:ad:30:da:28:fc:e4:9a:66:21:7e:60:
d3:91:0c:57:59:3b:1f:0b:1b:c7:a7:d7:da:03:d1:ba:4f:13:
d3:76:fa:3f:8d:e1:90:f0:35:fd:98:e2:7d:f0:9c:d8:db:b3:
35:7e:03:39:c9:26:f1:87:86:45:90:19:4c:66:c2:96:63:94:
91:2e:8b:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org