Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/84fdc5a06fd8fb6453f55c5cac5ce8feee1031ea.cer
File: 84fdc5a06fd8fb6453f55c5cac5ce8feee1031ea.cer (raw, json)
Hash identifier: oltvvwiNLMnmYs2J6tksQs8xtEYr/gcJ1YiwjvGqw70=
Subject key identifier: E8:E0:04:E7:DA:17:20:78:DA:80:92:40:19:22:F1:C5:FA:F7:70:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 010B887B
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/b5e56b00-6fb6-49e0-ab37-a70c4eed8c5b/84fdc5a06fd8fb6453f55c5cac5ce8feee1031ea.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/b5e56b00-6fb6-49e0-ab37-a70c4eed8c5b/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 27 Oct 2023 20:49:12 +0000
Certificate not after: Sat 27 Sep 2025 13:25:42 +0000
Subordinate resources: AS: 28598
AS: 52759
AS: 61832
AS: 268018
IP: 45.7.104.0/22
IP: 45.165.228.0/22
IP: 45.172.124.0/22
IP: 45.179.224.0/22
IP: 45.229.212.0/22
IP: 45.236.68.0/22
IP: 138.59.228.0/22
IP: 138.122.80.0/21
IP: 167.250.136.0/22
IP: 170.78.4.0/22
IP: 170.81.4.0/22
IP: 170.81.192.0/22
IP: 177.38.200.0/21
IP: 177.39.56.0/21
IP: 177.53.216.0/21
IP: 177.66.120.0/22
IP: 177.72.0.0/21
IP: 177.104.112.0/20
IP: 177.190.208.0/22
IP: 179.96.216.0/21
IP: 187.60.240.0/20
IP: 187.84.64.0/20
IP: 187.94.8.0/22
IP: 187.110.224.0/20
IP: 187.120.48.0/20
IP: 191.6.8.0/21
IP: 191.52.224.0/20
IP: 201.20.64.0/18
IP: 201.148.100.0/22
IP: 201.148.120.0/22
IP: 2804:248::/32
IP: 2804:b3c::/32
IP: 2804:1a04::/32
IP: 2804:56b0::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17533051 (0x10b887b)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Oct 27 20:49:12 2023 GMT
Not After : Sep 27 13:25:42 2025 GMT
Subject: CN=84fdc5a06fd8fb6453f55c5cac5ce8feee1031ea
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:c8:52:11:01:c5:9a:47:61:66:31:8b:dc:0a:17:
66:89:06:ba:fe:c9:b8:82:69:c0:34:03:e4:3c:7e:
06:09:b2:cc:23:41:3d:b6:67:32:28:b8:b8:f2:8c:
39:b7:20:b9:13:89:9a:01:22:3f:4a:c9:b7:26:4a:
80:de:b1:0b:62:ee:45:c0:2d:b8:3a:47:67:59:b2:
3c:98:b1:65:c0:cf:24:4d:f9:d2:56:a2:c9:a0:3d:
4c:81:dd:2f:5a:55:d7:8f:66:11:08:1c:ab:b0:5d:
61:df:d0:ff:39:b5:0d:7b:12:7a:12:72:4a:b2:37:
39:71:24:57:73:73:d2:eb:c3:ab:71:d9:9f:87:68:
6b:92:27:8d:60:01:b5:b2:e7:33:f4:7d:be:e0:dc:
e5:9b:27:1a:1d:74:55:cf:99:fd:51:2a:d3:8f:b2:
8a:39:06:77:3a:19:48:c0:f9:51:fb:26:44:42:25:
3f:a8:c0:c9:10:21:b3:c0:22:72:7a:82:cc:df:68:
19:34:b5:02:bf:ec:b8:bf:6a:b0:c9:86:76:7b:a3:
56:65:5a:9c:1b:a2:c6:7b:f2:e1:b8:2b:b7:34:36:
f4:32:db:30:0f:1a:54:32:55:30:78:ef:41:81:c2:
fa:56:6a:e2:b2:4e:3e:62:b2:58:41:28:38:f5:71:
9f:f9
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
E8:E0:04:E7:DA:17:20:78:DA:80:92:40:19:22:F1:C5:FA:F7:70:25
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b5e56b00-6fb6-49e0-ab37-a70c4eed8c5b/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b5e56b00-6fb6-49e0-ab37-a70c4eed8c5b/84fdc5a06fd8fb6453f55c5cac5ce8feee1031ea.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
45.7.104.0/22
45.165.228.0/22
45.172.124.0/22
45.179.224.0/22
45.229.212.0/22
45.236.68.0/22
138.59.228.0/22
138.122.80.0/21
167.250.136.0/22
170.78.4.0/22
170.81.4.0/22
170.81.192.0/22
177.38.200.0/21
177.39.56.0/21
177.53.216.0/21
177.66.120.0/22
177.72.0.0/21
177.104.112.0/20
177.190.208.0/22
179.96.216.0/21
187.60.240.0/20
187.84.64.0/20
187.94.8.0/22
187.110.224.0/20
187.120.48.0/20
191.6.8.0/21
191.52.224.0/20
201.20.64.0/18
201.148.100.0/22
201.148.120.0/22
IPv6:
2804:248::/32
2804:b3c::/32
2804:1a04::/32
2804:56b0::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28598
52759
61832
268018
Signature Algorithm: sha256WithRSAEncryption
94:91:91:b1:cc:ba:20:7d:6c:85:33:5f:76:5b:d7:86:a6:86:
b6:2f:9e:b3:f3:39:85:b6:ea:18:c7:7e:bd:fb:b8:7a:8c:c6:
19:7f:92:6b:12:5c:d2:d3:eb:4c:ab:5e:58:ab:c4:49:e9:4a:
23:b3:b1:0f:61:04:d6:fc:16:b2:21:a8:a6:c2:3f:55:ea:48:
20:26:71:75:b9:a4:a2:ad:1a:a2:14:60:25:e8:5f:78:51:ed:
4f:6a:f1:16:ee:65:a4:dd:87:e0:b0:ae:1c:bc:7d:31:88:fb:
99:19:5d:c5:60:12:f9:dc:3d:da:da:08:a5:4e:2a:3f:fc:09:
60:49:1d:16:47:85:e7:89:70:d7:25:65:8b:60:bc:7b:2c:f1:
e1:c7:26:e3:86:c1:ad:c8:0c:a4:0d:90:fd:f3:c4:71:ee:c6:
4f:7e:5f:50:26:d4:2b:bc:ca:7e:d9:de:e5:f3:d1:22:5a:d4:
0a:9c:33:f1:60:d1:ad:81:8f:4d:62:77:c6:01:1f:0d:c0:92:
46:ad:4c:44:bf:04:b4:32:97:63:43:8d:81:c8:99:1f:76:a9:
7f:df:ef:ae:c7:ee:a1:c7:4a:c2:af:4f:28:1c:28:12:cc:c7:
81:f0:50:ae:10:eb:59:67:a6:ac:f7:cd:87:09:e0:53:33:f6:
b8:3a:be:a2
-----BEGIN CERTIFICATE-----
MIIGsDCCBZigAwIBAgIEAQuIezANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNzIwNDkxMloXDTI1MDkyNzEzMjU0
MlowMzExMC8GA1UEAxMoODRmZGM1YTA2ZmQ4ZmI2NDUzZjU1YzVjYWM1Y2U4ZmVl
ZTEwMzFlYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMhSEQHFmkdh
ZjGL3AoXZokGuv7JuIJpwDQD5Dx+BgmyzCNBPbZnMii4uPKMObcguROJmgEiP0rJ
tyZKgN6xC2LuRcAtuDpHZ1myPJixZcDPJE350laiyaA9TIHdL1pV149mEQgcq7Bd
Yd/Q/zm1DXsSehJySrI3OXEkV3Nz0uvDq3HZn4doa5InjWABtbLnM/R9vuDc5Zsn
Gh10Vc+Z/VEq04+yijkGdzoZSMD5UfsmREIlP6jAyRAhs8AicnqCzN9oGTS1Ar/s
uL9qsMmGdnujVmVanBuixnvy4bgrtzQ29DLbMA8aVDJVMHjvQYHC+lZq4rJOPmKy
WEEoOPVxn/kCAwEAAaOCA98wggPbMB0GA1UdDgQWBBTo4ATn2hcgeNqAkkAZIvHF
+vdwJTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iNWU1NmIwMC02ZmI2
LTQ5ZTAtYWIzNy1hNzBjNGVlZDhjNWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjVlNTZiMDAtNmZiNi00
OWUwLWFiMzctYTcwYzRlZWQ4YzViLzg0ZmRjNWEwNmZkOGZiNjQ1M2Y1NWM1Y2Fj
NWNlOGZlZWUxMDMxZWEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
9QYIKwYBBQUHAQcBAf8EgeUwgeIwgbsEAgABMIG0AwQCLQdoAwQCLaXkAwQCLax8
AwQCLbPgAwQCLeXUAwQCLexEAwQCijvkAwQDinpQAwQCp/qIAwQCqk4EAwQCqlEE
AwQCqlHAAwQDsSbIAwQDsSc4AwQDsTXYAwQCsUJ4AwQDsUgAAwQEsWhwAwQCsb7Q
AwQDs2DYAwQEuzzwAwQEu1RAAwQCu14IAwQEu27gAwQEu3gwAwQDvwYIAwQEvzTg
AwQGyRRAAwQCyZRkAwQCyZR4MCIEAgACMBwDBQAoBAJIAwUAKAQLPAMFACgEGgQD
BQAoBFawMCgGCCsGAQUFBwEIAQH/BBkwF6AVMBMCAm+2AgMAzhcCAwDxiAIDBBby
MA0GCSqGSIb3DQEBCwUAA4IBAQCUkZGxzLogfWyFM192W9eGpoa2L56z8zmFtuoY
x369+7h6jMYZf5JrElzS0+tMq15Yq8RJ6Uojs7EPYQTW/BayIaimwj9V6kggJnF1
uaSirRqiFGAl6F94Ue1PavEW7mWk3YfgsK4cvH0xiPuZGV3FYBL53D3a2gilTio/
/AlgSR0WR4XniXDXJWWLYLx7LPHhxybjhsGtyAykDZD988Rx7sZPfl9QJtQrvMp+
2d7l89EiWtQKnDPxYNGtgY9NYnfGAR8NwJJGrUxEvwS0MpdjQ42ByJkfdql/3++u
x+6hx0rCr08oHCgSzMeB8FCuEOtZZ6as982HCeBTM/a4Or6i
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org