![](/console.gif)
Certificate
$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d62baf1d43712ef5f3860b21d04e8534536fa164.cer
File: d62baf1d43712ef5f3860b21d04e8534536fa164.cer (raw, json)
Hash identifier: BVBDxVhuwQB2Y4R9J3zOcFiNVycrWrKXy2v0PsdfDOA=
Subject key identifier: 87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer: /CN=production O=lacnic
Certificate serial: EF11EA
Authority info access: rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest: rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.mft
caRepository: rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/
Notify URL: https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before: Fri 17 Nov 2017 18:36:45 +0000
Certificate not after: Tue 23 Jul 2024 06:00:00 +0000
Subordinate resources: AS: 27995
IP: 179.2.0.0 -- 179.4.255.255
IP: 186.20.0.0/15
IP: 186.172.0.0/14
IP: 190.110.128.0/19
IP: 191.116.0.0/14
IP: 2800:540::/32
Validation: Failed, unable to get local issuer certificate
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 15667690 (0xef11ea)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=production O=lacnic
Validity
Not Before: Nov 17 18:36:45 2017 GMT
Not After : Jul 23 06:00:00 2024 GMT
Subject: CN=d62baf1d43712ef5f3860b21d04e8534536fa164
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:d7:e3:f6:f8:88:c0:46:22:df:97:6c:45:56:ad:
c7:0c:3b:56:fc:ed:99:6b:e7:36:8a:0f:32:18:93:
45:9d:be:22:fd:d0:87:80:7a:a5:7a:53:c0:4b:d1:
0a:f7:a1:a2:d0:3c:7c:a4:d8:02:e1:a5:da:e0:4b:
ea:41:ba:98:61:e2:3b:c6:8d:8a:6c:65:b6:dd:c3:
cd:6b:b3:4b:17:3b:cf:87:18:98:22:25:c1:01:49:
7e:4e:ec:07:b6:1a:46:ea:62:cd:7d:00:61:8e:42:
65:74:4d:1f:48:31:94:be:c2:38:8f:14:62:f2:0c:
f6:da:e0:67:eb:a3:8f:7f:81:7c:8e:7c:81:e3:f5:
de:94:9d:28:25:3e:34:e9:0f:a2:4e:2a:4f:fe:c0:
4c:57:40:02:c6:12:e7:80:e6:ca:22:c7:67:0c:33:
3e:cb:1f:ea:9f:0a:c1:94:f1:00:ba:74:ff:38:77:
6e:53:f2:ef:58:77:b9:27:92:f2:b3:22:c2:6c:89:
1a:32:80:17:80:cb:24:57:d1:78:92:fe:da:2f:61:
0d:76:51:c4:66:be:b2:99:85:17:f0:a4:23:93:58:
9e:b2:43:79:b0:29:63:9f:f0:08:aa:c3:a6:d5:fb:
6a:94:f9:65:a9:6b:af:8c:4e:48:92:e4:ae:66:b9:
7d:2d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
87:E3:56:32:C3:DB:AB:0D:4B:98:DD:5C:12:0E:34:A9:48:38:30:49
X509v3 Authority Key Identifier:
keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
X509v3 Basic Constraints: critical
CA:TRUE
X509v3 Key Usage: critical
Certificate Sign, CRL Sign
Authority Information Access:
CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Subject Information Access:
RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/
RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fd2d280b-6bac-4cce-b0e1-c95b4cdd050c/d62baf1d43712ef5f3860b21d04e8534536fa164.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4:
179.2.0.0-179.4.255.255
186.20.0.0/15
186.172.0.0/14
190.110.128.0/19
191.116.0.0/14
IPv6:
2800:540::/32
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
27995
Signature Algorithm: sha256WithRSAEncryption
4e:5f:1f:0d:41:bf:6a:00:f8:e7:eb:0d:83:f1:9b:5a:cc:e4:
a0:0a:33:69:8c:90:85:8c:dc:02:ed:b8:fd:c2:b7:84:1a:fe:
6d:98:32:06:d7:13:55:50:82:5c:58:ef:1b:2a:2b:1e:1f:e5:
e1:cd:bc:fa:28:b4:5b:a5:3d:d3:97:14:7e:55:8a:89:66:3f:
43:5a:0e:58:25:5a:d3:b1:4b:bc:ac:4d:31:c3:43:22:0a:02:
23:7d:42:ce:35:52:f6:53:02:d0:e1:07:69:fc:eb:43:14:65:
3b:9f:e7:2a:6f:75:ed:8e:51:47:04:b0:11:ba:49:24:fa:7a:
5f:d8:d5:6e:d5:c9:01:f4:2c:df:80:db:d4:42:36:7d:3c:0d:
28:b3:d5:be:13:91:75:2a:c8:25:49:35:b6:81:a4:d1:e1:9d:
c6:79:dc:80:f2:e1:2f:d3:62:8a:4c:78:71:8c:fe:ab:ce:2c:
fc:a6:47:f4:8e:85:9a:9a:0c:fc:29:d9:67:88:e9:7a:77:1d:
06:27:40:7a:ee:77:04:88:c5:b1:d4:aa:b9:7c:dc:02:9a:80:
12:05:b9:9a:8b:92:f9:04:63:83:2e:06:94:54:59:e2:05:41:
20:17:6b:fc:63:06:b7:e0:50:a7:c4:62:77:21:db:33:b1:07:
a7:4f:79:ae
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIEAO8R6jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0NVoXDTI0MDcyMzA2MDAw
MFowMzExMC8GA1UEAxMoZDYyYmFmMWQ0MzcxMmVmNWYzODYwYjIxZDA0ZTg1MzQ1
MzZmYTE2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANfj9viIwEYi
35dsRVatxww7VvztmWvnNooPMhiTRZ2+Iv3Qh4B6pXpTwEvRCvehotA8fKTYAuGl
2uBL6kG6mGHiO8aNimxltt3DzWuzSxc7z4cYmCIlwQFJfk7sB7YaRupizX0AYY5C
ZXRNH0gxlL7COI8UYvIM9trgZ+ujj3+BfI58geP13pSdKCU+NOkPok4qT/7ATFdA
AsYS54DmyiLHZwwzPssf6p8KwZTxALp0/zh3blPy71h3uSeS8rMiwmyJGjKAF4DL
JFfReJL+2i9hDXZRxGa+spmFF/CkI5NYnrJDebApY5/wCKrDptX7apT5Zalrr4xO
SJLkrma5fS0CAwEAAaOCAyMwggMfMB0GA1UdDgQWBBSH41Yyw9urDUuY3VwSDjSp
SDgwSTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mZDJkMjgwYi02YmFj
LTRjY2UtYjBlMS1jOTViNGNkZDA1MGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZmQyZDI4MGItNmJhYy00
Y2NlLWIwZTEtYzk1YjRjZGQwNTBjL2Q2MmJhZjFkNDM3MTJlZjVmMzg2MGIyMWQw
NGU4NTM0NTM2ZmExNjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwJwQCAAEwITAKAwMBswIDAwCzBAMDAboUAwMCuqwD
BAW+boADAwK/dDANBAIAAjAHAwUAKAAFQDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJtWzANBgkqhkiG9w0BAQsFAAOCAQEATl8fDUG/agD45+sNg/GbWszkoAozaYyQ
hYzcAu24/cK3hBr+bZgyBtcTVVCCXFjvGyorHh/l4c28+ii0W6U905cUflWKiWY/
Q1oOWCVa07FLvKxNMcNDIgoCI31CzjVS9lMC0OEHafzrQxRlO5/nKm917Y5RRwSw
EbpJJPp6X9jVbtXJAfQs34Db1EI2fTwNKLPVvhORdSrIJUk1toGk0eGdxnncgPLh
L9Niikx4cYz+q84s/KZH9I6FmpoM/CnZZ4jpencdBidAeu53BIjFsdSquXzcApqA
EgW5mouS+QRjgy4GlFRZ4gVBIBdr/GMGt+BQp8RidyHbM7EHp095rg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org