RPKI Certificate
Location:                 ./rsync/repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer (download)

Subject key identifier:   F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Manifest:                 repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.mft
CA Repository:            repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/
Notification URL:         https://rrdp.lacnic.net/rrdp/notification.xml
Subject Public Key Info:  
Subordinate resources:
    until: 2023-01-25T05:00:00Z
    Resources:
    1: AS: 11058
    2: AS: 52294
    3: AS: 52324
    4: AS: 52332
    5: AS: 52359 -- 52360
    6: AS: 52370
    7: AS: 52374 -- 52376
    8: AS: 52403 -- 52404
    9: AS: 52500
    10: AS: 52508 -- 52509
    11: AS: 61441
    12: AS: 61494 -- 61495
    13: AS: 61504 -- 61505
    14: AS: 61520 -- 61521
    15: AS: 61552 -- 61555
    16: AS: 64103 -- 64106
    17: AS: 64118
    1: IP: 45.68.8.0/21
    2: IP: 138.204.244.0 -- 138.204.255.255
    3: IP: 138.219.0.0/22
    4: IP: 200.0.17.0/24
    5: IP: 200.0.19.0/24
    6: IP: 200.9.157.0/24
    7: IP: 200.13.83.0/24
    8: IP: 200.14.37.0 -- 200.14.39.255
    9: IP: 200.14.74.0/23
    10: IP: 200.115.80.0/20
    11: IP: 201.182.128.0/20
    12: IP: 2001:13c7:6001::/48
    13: IP: 2001:13c7:6007:: -- 2001:13c7:600e:ffff:ffff:ffff:ffff:ffff
    14: IP: 2001:13c7:6010::/44
    15: IP: 2801:168::/40

--
$ openssl x509 -text -inform DER -in ./rsync/repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12346550 (0xbc64b6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 19:56:38 2018 GMT
            Not After : Jan 25 05:00:00 2023 GMT
        Subject: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:69:11:d7:c6:1e:e3:a6:61:43:34:b5:0f:
                    07:cc:3c:d1:70:dd:c5:dc:e1:b5:4f:6e:88:e7:2d:
                    79:69:a2:cf:7f:09:29:82:21:ec:5d:62:56:f6:98:
                    4f:d2:74:bd:f3:16:e5:09:4d:1b:08:e2:6d:de:6f:
                    91:f3:bc:ee:4f:0e:0f:58:0d:6a:a8:01:a3:14:b5:
                    46:05:42:e3:48:c6:31:93:3a:e2:4a:c6:f1:8b:8c:
                    21:d8:b8:dd:7c:0c:ed:f7:1b:25:7e:6a:2c:b9:7d:
                    e6:a4:7c:8a:a9:de:05:de:08:78:5d:8a:35:89:e3:
                    56:13:a7:46:0b:87:e0:51:39:30:ac:20:b1:9f:78:
                    c9:44:cc:04:86:8f:c8:cd:47:ca:e9:9a:57:ee:4c:
                    7a:ac:37:1e:13:4b:e9:9d:f3:a5:39:d3:72:b7:a3:
                    02:2c:c4:6d:f0:fe:0e:1e:a7:74:f4:96:eb:8e:0b:
                    42:18:6a:6a:0b:b2:59:5b:ea:0c:f0:67:b3:8b:0f:
                    a7:c4:6f:39:56:1a:ee:13:3a:7c:38:3a:c4:59:f1:
                    a2:ac:de:cf:31:a9:03:90:7a:b1:f8:7e:49:de:a1:
                    dd:33:4c:d2:5c:6d:3f:db:94:01:92:86:15:13:3d:
                    e6:c1:68:a9:9f:51:3f:93:bb:8f:c1:12:80:ae:42:
                    52:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.8.0/21
                  138.204.244.0-138.204.255.255
                  138.219.0.0/22
                  200.0.17.0/24
                  200.0.19.0/24
                  200.9.157.0/24
                  200.13.83.0/24
                  200.14.37.0-200.14.39.255
                  200.14.74.0/23
                  200.115.80.0/20
                  201.182.128.0/20
                IPv6:
                  2001:13c7:6001::/48
                  2001:13c7:6007::-2001:13c7:600e:ffff:ffff:ffff:ffff:ffff
                  2001:13c7:6010::/44
                  2801:168::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11058
                  52294
                  52324
                  52332
                  52359-52360
                  52370
                  52374-52376
                  52403-52404
                  52500
                  52508-52509
                  61441
                  61494-61495
                  61504-61505
                  61520-61521
                  61552-61555
                  64103-64106
                  64118

    Signature Algorithm: sha256WithRSAEncryption
         15:c1:04:fb:75:02:2c:4d:0c:29:7d:a5:70:98:24:63:b8:52:
         5a:ef:5b:95:57:d8:ac:ee:cb:26:97:b3:4e:66:27:84:54:cd:
         fa:5d:8f:a4:de:23:3f:63:1f:55:df:67:de:29:3d:76:04:ff:
         44:0b:f9:e2:55:7f:a9:5a:37:41:0e:7e:0e:7b:a1:0e:66:f5:
         22:2b:16:db:6e:c3:38:9b:3b:20:5c:98:8a:ea:0b:9d:80:9c:
         b4:d5:61:91:3b:75:e7:ef:33:f7:17:ee:28:20:55:f1:da:99:
         d1:ac:eb:3a:a8:31:3e:c3:f2:2e:dc:21:6a:2e:64:c5:ad:7a:
         2b:c6:28:cf:b2:6c:cd:ef:e6:8c:68:df:b9:13:a7:81:dd:e7:
         39:19:8e:07:40:f7:71:bc:7c:8e:3d:24:ca:80:6c:6b:fe:71:
         6e:3c:93:63:23:a4:95:01:24:0d:0f:55:ac:26:2e:15:af:26:
         19:11:e0:7c:d9:cd:80:85:38:69:fc:57:31:e9:a7:16:00:32:
         7b:2c:a5:6f:02:9b:e5:f7:0f:7f:97:ba:69:d4:a8:83:f3:bb:
         b3:7d:31:ce:7a:43:30:14:b0:96:f9:24:fd:a6:26:fb:df:04:
         40:ff:8b:c6:cf:e7:f0:25:8f:f7:50:a9:6f:b6:41:66:9d:1d:
         d2:97:c1:b9
-----BEGIN CERTIFICATE-----
MIIG4jCCBcqgAwIBAgIEALxktjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDUzMDE5NTYzOFoXDTIzMDEyNTA1MDAw
MFowMzExMC8GA1UEAxMoMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhi
ZDIwYWU3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJLlaRHXxh7j
pmFDNLUPB8w80XDdxdzhtU9uiOcteWmiz38JKYIh7F1iVvaYT9J0vfMW5QlNGwji
bd5vkfO87k8OD1gNaqgBoxS1RgVC40jGMZM64krG8YuMIdi43XwM7fcbJX5qLLl9
5qR8iqneBd4IeF2KNYnjVhOnRguH4FE5MKwgsZ94yUTMBIaPyM1HyumaV+5Meqw3
HhNL6Z3zpTnTcrejAizEbfD+Dh6ndPSW644LQhhqaguyWVvqDPBns4sPp8RvOVYa
7hM6fDg6xFnxoqzezzGpA5B6sfh+Sd6h3TNM0lxtP9uUAZKGFRM95sFoqZ9RP5O7
j8ESgK5CUnMCAwEAAaOCBBEwggQNMB0GA1UdDgQWBBT4/nNHXHvIFEgcbP+98Rl3
fgvZXjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04Zjhk
LTQ3NzktOWUyNy04M2IxYmQzMDI2ZTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00
Nzc5LTllMjctODNiMWJkMzAyNmUxLzIxMTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0
ODljZWY4YmQyMGFlNzMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
ogYIKwYBBQUHAQcBAf8EgZIwgY8wVwQCAAEwUQMEAy1ECDALAwQCisz0AwMAiswD
BAKK2wADBADIABEDBADIABMDBADICZ0DBADIDVMwDAMEAMgOJQMEA8gOIAMEAcgO
SgMEBMhzUAMEBMm2gDA0BAIAAjAuAwcAIAETx2ABMBIDBwAgARPHYAcDBwAgARPH
YA4DBwQgARPHYBADBgAoAQFoADCBrAYIKwYBBQUHAQgBAf8EgZwwgZmggZYwgZMC
AisyAgMAzEYCAwDMZAIDAMxsMAoCAwDMhwIDAMyIAgMAzJIwCgIDAMyWAgMAzJgw
CgIDAMyzAgMAzLQCAwDNFDAKAgMAzRwCAwDNHQIDAPABMAoCAwDwNgIDAPA3MAoC
AwDwQAIDAPBBMAoCAwDwUAIDAPBRMAoCAwDwcAIDAPBzMAoCAwD6ZwIDAPpqAgMA
+nYwDQYJKoZIhvcNAQELBQADggEBABXBBPt1AixNDCl9pXCYJGO4UlrvW5VX2Kzu
yyaXs05mJ4RUzfpdj6TeIz9jH1XfZ94pPXYE/0QL+eJVf6laN0EOfg57oQ5m9SIr
FttuwzibOyBcmIrqC52AnLTVYZE7defvM/cX7iggVfHamdGs6zqoMT7D8i7cIWou
ZMWteivGKM+ybM3v5oxo37kTp4Hd5zkZjgdA93G8fI49JMqAbGv+cW48k2MjpJUB
JA0PVawmLhWvJhkR4HzZzYCFOGn8VzHppxYAMnsspW8Cm+X3D3+XumnUqIPzu7N9
Mc56QzAUsJb5JP2mJvvfBED/i8bP5/Alj/dQqW+2QWadHdKXwbk=
-----END CERTIFICATE-----

Generated at Sat Dec 25 06:44:46 2021 by LibreSSL & rpki-client.