Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
File: 8c9dca33c362bedd76cf28490675e1556f7d1835.cer (raw, json)
Hash identifier: fd3TQL4tadhET6vy50VGnlusFIzAR0ilFEWhp7olmfE=
Subject key identifier: 0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: D9CFE1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 21 Oct 2020 01:45:51 +0000
Certificate not after: Wed 17 Jan 2024 05:00:00 +0000
Subordinate resources: AS: 28110
AS: 28317
AS: 263796
AS: 265766
IP: 131.196.32.0/22
IP: 138.59.132.0/22
IP: 138.121.140.0/22
IP: 138.122.244.0/22
IP: 170.81.32.0/22
IP: 181.174.168.0/22
IP: 190.124.248.0/22
IP: 190.184.196.0/22
IP: 191.102.56.0/22
IP: 2800:c20::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14274529 (0xd9cfe1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Oct 21 01:45:51 2020 GMT
Not After : Jan 17 05:00:00 2024 GMT
Subject: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ad:4a:14:5f:0f:8e:4f:a0:f0:45:4b:74:c9:30:
c8:28:42:bf:e4:f8:8e:ba:be:1b:32:ad:17:91:9b:
26:ad:f9:bf:6f:c6:15:a4:32:15:23:dc:52:d3:a1:
4f:d2:37:f7:72:07:22:22:76:2a:b6:b6:ee:f3:7b:
81:39:7f:ad:cb:3e:94:ab:47:4f:bb:f5:96:f2:53:
6d:0e:d1:de:54:88:db:64:11:e0:96:81:ec:08:d1:
05:85:57:a0:7e:ec:83:0f:dc:e9:73:c2:27:ac:48:
06:c5:c1:f7:60:81:d0:a3:74:c5:ba:83:c1:b1:a1:
bb:5d:f6:47:39:08:43:38:68:16:86:6c:e7:d1:cf:
5e:aa:ab:dd:bb:f1:44:1d:0a:a5:43:98:02:70:d5:
94:f4:44:98:2f:e7:30:1f:49:e8:8b:cf:af:be:aa:
4b:88:c1:bb:9d:e0:b8:c0:74:a8:34:4e:fb:cb:1b:
7a:3f:05:41:c9:65:91:57:9c:70:cb:d6:2f:79:cf:
95:e9:b2:1c:6c:29:8e:fe:56:f6:79:98:fe:38:1a:
db:45:f1:7d:d8:66:d6:11:7c:03:72:54:32:fa:23:
03:30:c5:e2:17:84:13:90:78:51:7b:ed:78:32:7f:
51:e6:02:b4:61:1f:28:a6:cb:d2:f6:b2:97:5c:06:
ec:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
131.196.32.0/22
138.59.132.0/22
138.121.140.0/22
138.122.244.0/22
170.81.32.0/22
181.174.168.0/22
190.124.248.0/22
190.184.196.0/22
191.102.56.0/22
IPv6:
2800:c20::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
28110
28317
263796
265766
Signature Algorithm: sha256WithRSAEncryption
18:cc:70:f4:a2:eb:41:c3:3a:e8:ef:4c:54:93:15:32:8d:bb:
2d:dc:73:2a:20:3c:81:9c:19:52:08:4e:4c:dd:6d:4a:42:d1:
84:f3:20:9a:5a:1a:fe:ef:c5:72:57:52:55:6c:59:f6:f0:7a:
b1:19:68:57:0a:d8:de:1b:5a:36:82:30:a7:02:42:e2:06:4f:
5e:f2:c0:87:f3:5e:a4:1e:36:f0:41:af:b1:ba:b7:21:9c:04:
46:73:b7:78:50:39:5e:8b:6b:25:6e:22:8d:4b:10:09:1b:aa:
73:02:4c:94:ee:9f:d2:e3:07:92:54:1c:20:fc:fb:61:4b:8f:
11:aa:4b:bc:34:97:06:69:e1:45:51:06:3e:89:1a:48:0f:30:
3a:3c:df:4f:3a:b0:47:92:9b:e1:9c:b9:bd:4b:e9:ce:f5:7a:
5a:26:1e:b3:cc:33:09:98:09:8d:e8:67:28:af:40:3e:01:5e:
5f:e7:fc:09:27:33:ba:a6:e5:1c:75:40:29:08:e4:67:c6:08:
8c:1c:8b:08:dd:87:f5:c8:ec:3b:1e:aa:96:20:a8:25:7e:25:
16:81:b2:dd:0c:4e:dc:9b:55:21:42:90:43:03:6a:45:8c:59:
2b:40:1a:4a:5e:11:f2:7f:20:2d:a4:3d:d6:6b:cd:5b:4a:fe:
5d:1e:e8:cd
-----BEGIN CERTIFICATE-----
MIIGFzCCBP+gAwIBAgIEANnP4TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTAyMTAxNDU1MVoXDTI0MDExNzA1MDAw
MFowMzExMC8GA1UEAxMoOGM5ZGNhMzNjMzYyYmVkZDc2Y2YyODQ5MDY3NWUxNTU2
ZjdkMTgzNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK1KFF8Pjk+g
8EVLdMkwyChCv+T4jrq+GzKtF5GbJq35v2/GFaQyFSPcUtOhT9I393IHIiJ2Kra2
7vN7gTl/rcs+lKtHT7v1lvJTbQ7R3lSI22QR4JaB7AjRBYVXoH7sgw/c6XPCJ6xI
BsXB92CB0KN0xbqDwbGhu132RzkIQzhoFoZs59HPXqqr3bvxRB0KpUOYAnDVlPRE
mC/nMB9J6IvPr76qS4jBu53guMB0qDRO+8sbej8FQcllkVeccMvWL3nPlemyHGwp
jv5W9nmY/jga20Xxfdhm1hF8A3JUMvojAzDF4heEE5B4UXvteDJ/UeYCtGEfKKbL
0vayl1wG7HcCAwEAAaOCA0YwggNCMB0GA1UdDgQWBBQLZdbxOWJ8tYVhdAXlGr2W
WfTcqDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80YjhlMGJlZS0xNWJj
LTRhYTMtOGY2Yi05MGY2MTAzNWM0MTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGI4ZTBiZWUtMTViYy00
YWEzLThmNmItOTBmNjEwMzVjNDE0LzhjOWRjYTMzYzM2MmJlZGQ3NmNmMjg0OTA2
NzVlMTU1NmY3ZDE4MzUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBe
BggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEAoPEIAMEAoo7hAMEAop5jAMEAop6
9AMEAqpRIAMEArWuqAMEAr58+AMEAr64xAMEAr9mODANBAIAAjAHAwUAKAAMIDAn
BggrBgEFBQcBCAEB/wQYMBagFDASAgJtzgICbp0CAwQGdAIDBA4mMA0GCSqGSIb3
DQEBCwUAA4IBAQAYzHD0outBwzro70xUkxUyjbst3HMqIDyBnBlSCE5M3W1KQtGE
8yCaWhr+78VyV1JVbFn28HqxGWhXCtjeG1o2gjCnAkLiBk9e8sCH816kHjbwQa+x
urchnARGc7d4UDlei2slbiKNSxAJG6pzAkyU7p/S4weSVBwg/PthS48Rqku8NJcG
aeFFUQY+iRpIDzA6PN9POrBHkpvhnLm9S+nO9XpaJh6zzDMJmAmN6Gcor0A+AV5f
5/wJJzO6puUcdUApCORnxgiMHIsI3Yf1yOw7HqqWIKglfiUWgbLdDE7cm1UhQpBD
A2pFjFkrQBpKXhHyfyAtpD3Wa81bSv5dHujN
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org