![](/console.gif)
Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer
File: a1e706ce8128add2b25ca400a695dc4620ac6e0f.cer (raw, json)
Hash identifier: skvEPHnifzrFXHtpvLs0wbfFze1vm6tR9X2riT7Omug=
Subject key identifier: 5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: E2C5AE
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/a1e706ce8128add2b25ca400a695dc4620ac6e0f.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Wed 29 Sep 2021 12:58:22 +0000
Certificate not after: Sun 28 Apr 2024 15:00:00 +0000
Subordinate resources: AS: 13585
IP: 190.1.96.0/19
IP: 190.11.128.0/18
IP: 2800:220::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 14861742 (0xe2c5ae)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Sep 29 12:58:22 2021 GMT
Not After : Apr 28 15:00:00 2024 GMT
Subject: CN=a1e706ce8128add2b25ca400a695dc4620ac6e0f
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:8a:67:35:f2:3c:eb:72:3e:b7:3b:f1:47:69:8d:
ff:3c:1f:3f:5d:45:0f:8d:fe:85:c6:88:af:db:3b:
f5:1d:40:88:59:44:a1:56:01:db:76:a8:69:c3:fb:
2f:8f:c1:54:1c:4a:d9:18:5e:23:94:03:46:df:7d:
35:42:cd:6b:15:5d:2a:77:1d:03:16:6f:23:c8:23:
4f:52:08:e9:49:9c:2e:14:f8:76:d1:20:4f:65:dd:
f3:71:cb:87:4c:1f:af:08:da:cb:bc:db:37:ff:89:
06:28:6b:8c:b7:f2:05:c8:a9:e1:1e:d1:e9:66:b3:
a9:8c:02:bc:dd:16:87:46:f5:fa:70:4c:29:93:85:
20:00:db:cd:0d:23:16:d4:09:c0:2f:87:ae:24:30:
31:45:a4:d9:82:dd:b0:de:29:7f:8c:61:c0:69:fb:
6c:0d:09:54:c2:fe:69:65:21:e9:43:80:ff:3d:2d:
35:14:56:60:bd:b1:62:a1:3b:05:9e:2d:7a:8f:2f:
ce:15:a9:bb:f0:fe:4a:2d:94:20:6b:1d:6e:b6:15:
ea:66:39:39:b9:9e:ca:4d:3e:b8:14:67:42:8a:bd:
47:5c:ee:d0:8d:c7:3c:3c:3b:f6:6f:86:02:09:c8:
80:68:2a:30:24:da:6e:70:57:80:89:e1:90:c2:e8:
70:d1
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
5E:D1:5A:C7:56:2D:40:AA:73:65:03:62:76:86:9E:A5:01:69:A5:B6
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cf71c559-5181-43d3-8d5b-66ced32b1eae/a1e706ce8128add2b25ca400a695dc4620ac6e0f.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
190.1.96.0/19
190.11.128.0/18
IPv6:
2800:220::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
13585
Signature Algorithm: sha256WithRSAEncryption
24:19:d6:69:9c:d9:ef:a6:96:21:b3:b5:13:66:b2:e6:f9:23:
aa:0a:6b:6e:da:01:7c:09:b4:eb:ed:12:ed:8e:f2:cc:b8:54:
56:c2:0f:c6:ba:17:45:7a:82:34:12:0b:c7:63:b0:6a:4a:e6:
69:d5:d6:31:e7:f3:b3:fb:46:b5:b1:ad:e3:c3:79:e6:84:0b:
39:87:8b:ae:a6:67:a3:36:de:21:d9:66:37:0f:9a:cb:6e:85:
01:09:f6:68:cb:13:cf:61:69:38:2f:f9:21:37:aa:ee:50:2a:
8b:8f:a3:27:81:98:6f:37:47:8a:40:55:f9:a5:a6:9a:61:fd:
a5:57:b5:1c:01:20:ec:47:c6:12:9e:0c:d8:15:c9:e4:20:6f:
ce:54:d6:ad:f4:b6:7c:1e:dc:0d:26:4a:89:e0:6f:94:9c:15:
43:c8:44:37:b4:45:7b:7b:74:c5:4e:1f:2d:a1:63:bc:26:4e:
f1:43:8d:b3:32:df:93:d7:0c:95:7c:6d:51:d2:c1:68:3d:f5:
4f:fc:d7:99:ed:4d:d0:2c:e2:a8:be:ad:b9:52:30:bf:3b:0c:
cf:48:e9:92:d3:91:3b:aa:67:9e:c9:f3:f3:75:a2:23:76:f1:
91:06:68:94:12:c2:08:5c:b2:0d:b8:0a:f0:f5:45:7d:42:c2:
76:a1:6e:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:28 2024 by rpki-client on console-ams.rpki-client.org