RPKI Certificate
Location:                 rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer (download)

Subject key identifier:   D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
Authority key identifier: EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6
Manifest:                 rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
CA Repository:            rpki.afrinic.net/repository/lacnic/
Notification URL:         https://rrdp.afrinic.net/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2025-03-30T00:00:00Z
    Resources:
    1: IP: 200.16.8.0/21

--
$ openssl x509 -text -inform DER -in rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/lacnic-to-afrinic.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17 (0x11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AfriNIC-Root-Certificate
        Validity
            Not Before: Mar 30 14:17:11 2020 GMT
            Not After : Mar 30 00:00:00 2025 GMT
        Subject: CN=LACNICTOAFRINIC/serialNumber=D5BF87DA3466C82D8C6D8E34E3BDD85BCD39D2EB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:ca:1d:2d:54:5b:db:4a:34:8e:3f:83:f8:53:
                    d6:1e:b3:bb:f9:d4:bf:d7:d2:d2:6a:70:27:30:d3:
                    b3:d3:7a:d7:55:8b:93:bc:4a:36:06:12:09:7f:2e:
                    ea:96:90:70:4b:3d:8e:7b:9f:42:b8:f1:aa:08:21:
                    13:dc:1d:87:e1:1e:a9:e4:68:75:35:b3:db:6e:ea:
                    99:8e:36:9b:a0:ed:32:b4:10:54:ae:c6:94:77:f3:
                    47:a6:73:d2:de:cf:d0:92:a4:5a:ad:84:89:61:7e:
                    da:f0:f9:16:4f:8d:69:f9:27:22:e3:c1:b5:30:08:
                    64:6e:9f:ab:e2:44:45:dc:43:39:ac:69:69:70:b6:
                    64:b5:f1:82:ea:5a:de:c7:cc:df:c3:54:8e:7f:c5:
                    22:f9:90:da:fb:6c:3f:e5:d6:b7:9f:0e:60:25:77:
                    33:14:79:fa:ad:a5:40:35:96:65:38:db:56:35:3a:
                    78:a7:d8:3d:cf:b5:ea:1c:30:eb:13:da:94:d5:60:
                    9d:d6:5a:16:72:4d:d1:3d:6e:2b:f9:7a:6d:b1:60:
                    14:88:40:e7:7c:38:a2:89:26:fb:8a:b9:82:3b:f6:
                    9b:02:db:fd:c2:16:bf:80:31:d9:fa:83:e0:01:f4:
                    30:90:79:6d:9b:12:05:5a:1d:7b:70:1d:67:a8:96:
                    9e:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                D5:BF:87:DA:34:66:C8:2D:8C:6D:8E:34:E3:BD:D8:5B:CD:39:D2:EB
            X509v3 Authority Key Identifier: 
                keyid:EB:68:0F:38:F5:D6:C7:1B:B4:B1:06:B8:BD:06:58:50:12:DA:31:B6

            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://rpki.afrinic.net/repository/04E8B0D80F4D11E0B657D8931367AE7D/62gPOPXWxxu0sQa4vQZYUBLaMbY.crl

            Authority Information Access: 
                CA Issuers - URI:rsync://rpki.afrinic.net/repository/AfriNIC.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://rpki.afrinic.net/policy/CPS.pdf

            Subject Information Access: 
                CA Repository - URI:rsync://rpki.afrinic.net/repository/lacnic/
                RPKI Manifest - URI:rsync://rpki.afrinic.net/repository/lacnic/1b-H2jRmyC2MbY40473YW8050us.mft
                RPKI Notify - URI:https://rrdp.afrinic.net/notification.xml

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         af:23:13:2f:a3:36:67:47:75:2f:19:a9:13:74:27:7d:99:0c:
         b2:92:40:23:01:dd:dd:87:34:78:78:ed:93:81:bc:3c:1e:d3:
         85:15:11:28:68:a7:a4:ca:98:74:35:75:ff:ed:e9:ed:1c:2c:
         b4:62:39:69:1e:db:c1:3c:65:f9:2e:0f:a5:f6:2d:76:90:0b:
         4e:c8:8d:a2:ff:ce:7e:8b:a4:90:61:fd:a9:a8:09:ea:53:1a:
         40:4e:0d:51:97:c3:e6:87:17:18:4c:49:eb:36:5f:b3:78:94:
         04:aa:81:7f:45:e8:d7:75:e7:7c:84:71:43:23:3e:d7:90:71:
         67:d9:69:56:db:aa:a1:7b:4a:ac:2d:cb:37:a3:fd:59:8c:0a:
         d6:df:ca:d2:b2:0e:59:a2:14:9d:eb:30:53:a1:09:4b:09:8f:
         c1:80:8b:25:59:d5:a0:9e:c6:8f:60:80:22:ea:92:95:7c:19:
         80:4a:76:d3:83:73:cc:b3:83:f1:78:d3:9a:d8:03:89:f0:63:
         37:1c:2b:46:be:3a:d0:e3:f4:f2:2e:13:70:0b:4c:f2:f7:56:
         d5:a8:7a:b7:88:38:d7:b5:9f:f4:4d:5b:72:b2:07:f3:43:dd:
         b9:5d:e9:c2:11:db:c9:c9:22:f1:0e:a2:66:89:d6:7c:7b:19:
         8b:53:b5:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----

Generated at Sun Jan 30 10:56:23 2022 by LibreSSL & rpki-client.