Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
File: 90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer (raw, json)
Hash identifier: NmNiJt6lIQVwOuEA7tVgVtTYUf1A18ZivqptiU9Xrrw=
Subject key identifier: 55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: 010E0AB1
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Tue 04 Apr 2023 18:41:00 +0000
Certificate not after: Fri 01 Aug 2025 06:00:00 +0000
Subordinate resources: AS: 6503
AS: 14000
IP: 148.240.0.0/16
IP: 148.243.0.0/16
IP: 148.245.0.0/16
IP: 187.162.0.0 -- 187.167.255.255
IP: 187.176.0.0 -- 187.179.127.255
IP: 189.205.0.0/16
IP: 189.207.0.0 -- 189.213.255.255
IP: 200.23.72.0/23
IP: 200.23.147.0/24
IP: 200.33.192.0/21
IP: 200.33.208.0 -- 200.33.231.255
IP: 200.34.64.0/19
IP: 200.34.141.0/24
IP: 200.36.96.0/19
IP: 200.38.64.0/19
IP: 200.38.224.0/19
IP: 200.39.224.0/19
IP: 200.52.0.0/20
IP: 200.52.32.0/19
IP: 200.56.0.0 -- 200.56.95.255
IP: 200.57.96.0/19
IP: 200.57.192.0/18
IP: 200.76.192.0/19
IP: 200.78.128.0/17
IP: 200.94.192.0/19
IP: 200.188.0.0/17
IP: 200.194.0.0/18
IP: 200.236.64.0/18
IP: 201.140.0.0/18
IP: 201.156.0.0/16
IP: 201.158.128.0/17
IP: 207.249.128.0/18
IP: 2806::/28
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 17697457 (0x10e0ab1)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Apr 4 18:41:00 2023 GMT
Not After : Aug 1 06:00:00 2025 GMT
Subject: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:dd:10:ed:c1:77:ff:07:66:bc:bd:12:82:0e:14:
ed:64:8d:a6:a8:71:c0:95:31:c0:55:06:70:a4:1b:
1a:79:c7:52:46:61:09:ac:42:39:e0:ce:5b:4e:8c:
ff:eb:37:c4:9b:bd:05:30:0b:fb:8c:bc:34:29:ba:
62:d2:17:a6:9e:3a:b7:d3:39:f7:50:e7:d5:f2:74:
49:5b:79:ff:a4:1b:33:48:8b:c3:a9:93:9c:16:5b:
71:e0:23:6f:86:1f:1a:46:4c:23:a9:6b:90:25:1c:
c3:95:a5:6c:d5:47:78:8d:8d:38:e8:4e:01:90:bb:
25:50:e4:4b:8c:53:da:23:7b:1d:dc:ee:0d:22:14:
05:42:97:f7:c3:9a:17:11:62:15:31:58:08:7d:ee:
34:14:6a:77:14:35:1e:4b:41:20:ec:e8:24:fe:9e:
ac:c8:cd:50:ad:8c:dd:43:46:f7:30:9a:1b:f0:9d:
d2:1a:43:49:ef:18:39:2c:98:32:cd:7a:ed:d7:3a:
e6:74:81:08:89:df:b2:e5:03:28:a7:d5:bd:72:7d:
96:1d:04:ea:4c:b1:34:19:64:92:05:5e:33:e6:d3:
2e:85:3c:57:4e:77:ff:08:d0:de:24:9f:cf:2c:c5:
75:2a:7e:87:5d:d1:9f:3e:6d:c2:df:72:80:bd:d4:
9d:a5
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
148.240.0.0/16
148.243.0.0/16
148.245.0.0/16
187.162.0.0-187.167.255.255
187.176.0.0-187.179.127.255
189.205.0.0/16
189.207.0.0-189.213.255.255
200.23.72.0/23
200.23.147.0/24
200.33.192.0/21
200.33.208.0-200.33.231.255
200.34.64.0/19
200.34.141.0/24
200.36.96.0/19
200.38.64.0/19
200.38.224.0/19
200.39.224.0/19
200.52.0.0/20
200.52.32.0/19
200.56.0.0-200.56.95.255
200.57.96.0/19
200.57.192.0/18
200.76.192.0/19
200.78.128.0/17
200.94.192.0/19
200.188.0.0/17
200.194.0.0/18
200.236.64.0/18
201.140.0.0/18
201.156.0.0/16
201.158.128.0/17
207.249.128.0/18
IPv6:
2806::/28
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
6503
14000
Signature Algorithm: sha256WithRSAEncryption
8b:42:c6:dc:1b:bd:e1:2a:35:b2:ff:00:91:5c:4a:3b:aa:43:
fd:9a:0f:42:7c:8e:4c:e8:58:03:0b:cf:b9:b9:84:97:60:ec:
5e:b2:bd:2b:14:82:82:c0:32:53:7a:7a:d5:64:4b:93:34:fa:
5b:60:a6:5c:54:66:41:5c:84:bb:77:ff:80:b0:84:fb:58:38:
a0:2e:36:4a:f0:ad:6c:59:22:d4:c0:b1:cf:19:26:87:cd:a2:
3c:4f:95:e2:09:78:a7:0d:33:8a:87:ba:1a:3d:2f:c2:16:cf:
73:14:a2:b3:82:e9:7e:10:c6:a4:b9:f0:c7:ba:50:3b:4d:3a:
30:3c:85:28:34:20:de:5d:af:d4:9e:7c:94:74:8b:b1:eb:cb:
01:68:8c:66:03:d5:22:2d:b1:9e:b7:2e:43:32:0f:8d:7d:7e:
71:50:e4:7e:08:8a:87:8e:d9:89:e9:15:44:a8:e9:67:be:29:
44:3b:fd:9d:14:d6:84:97:08:86:8d:41:35:40:fa:03:24:43:
c3:35:28:c1:b2:fb:54:1f:7b:cc:f3:47:cc:15:0f:e0:ff:79:
ca:b6:b9:2d:ae:7b:77:ad:73:60:70:cd:48:25:e8:09:64:90:
d2:4a:ff:8d:6e:35:6d:6d:50:04:12:72:ac:87:01:ac:bb:63:
58:99:8e:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org