RPKI Certificate
Location:                 rsync/repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23091c63c58ba27ebd4d56345b541e6a9f5d1923.cer (download)

Subject key identifier:   FC:C5:DE:7D:91:EE:FC:28:49:91:6D:DA:53:BB:B7:7D:16:F9:53:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Manifest:                 repository.lacnic.net/rpki/lacnic/fe0a37a0-166a-4a06-a48b-44df7521fa4e/23091c63c58ba27ebd4d56345b541e6a9f5d1923.mft
CA Repository:            repository.lacnic.net/rpki/lacnic/fe0a37a0-166a-4a06-a48b-44df7521fa4e/
Notification URL:         https://rrdp.lacnic.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 28017
    1: IP: 200.0.20.0/23
    2: IP: 2001:13c7:6004::/47

--
$ openssl x509 -text -inform DER -in rsync/repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/23091c63c58ba27ebd4d56345b541e6a9f5d1923.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9297877 (0x8ddfd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:16 2017 GMT
            Not After : Sep 13 05:00:00 2022 GMT
        Subject: CN=23091c63c58ba27ebd4d56345b541e6a9f5d1923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:27:96:35:57:0d:97:5c:82:c6:e7:6f:62:de:
                    e3:73:70:df:9f:db:fb:ae:12:3f:9c:a3:d4:82:0c:
                    c0:5b:8e:0d:ea:30:e2:a1:55:9e:ee:2d:a0:5b:de:
                    75:74:09:b2:98:16:c1:b4:8b:7a:12:e9:f6:fa:6b:
                    80:16:82:eb:6b:7c:8e:4b:fe:25:ef:58:28:7e:10:
                    c3:b9:a1:0b:3a:d2:95:2b:44:b8:2c:16:8d:24:6e:
                    d2:c7:32:50:dd:1e:1c:f5:13:4b:64:a2:f7:f9:61:
                    f2:f8:c4:1e:c7:3d:ab:23:15:48:38:7b:6c:41:e7:
                    41:87:43:49:8b:0b:b3:22:17:8c:1a:de:16:1a:84:
                    5d:ef:34:39:97:ea:cd:74:71:88:9e:34:20:9b:67:
                    b4:48:e8:0a:a9:42:c6:7b:89:7f:d5:3b:20:bd:68:
                    1c:0f:ce:7d:b7:d5:6f:da:be:0d:bd:fc:55:28:35:
                    04:af:cd:21:9e:67:7e:e7:91:00:93:94:85:3e:6a:
                    62:58:38:c4:c2:23:cb:fb:e9:20:fc:ec:f2:76:f2:
                    c8:b4:8c:a5:a6:c9:82:d2:f1:be:5e:a7:eb:7b:fd:
                    ec:27:99:da:ed:73:05:03:fa:b8:73:7c:ad:ed:dc:
                    b9:18:1b:30:77:6d:4f:89:9a:aa:9d:16:85:8c:72:
                    32:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                FC:C5:DE:7D:91:EE:FC:28:49:91:6D:DA:53:BB:B7:7D:16:F9:53:2B
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fe0a37a0-166a-4a06-a48b-44df7521fa4e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fe0a37a0-166a-4a06-a48b-44df7521fa4e/23091c63c58ba27ebd4d56345b541e6a9f5d1923.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.20.0/23
                IPv6:
                  2001:13c7:6004::/47

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28017

    Signature Algorithm: sha256WithRSAEncryption
         6f:ba:04:70:84:b4:9e:2d:13:b8:67:a4:96:2e:41:17:bf:7d:
         d4:14:2c:8b:9b:37:0d:18:56:c7:55:cd:df:e0:4f:48:fe:81:
         eb:74:bf:1e:37:1e:f8:d2:27:9a:94:01:ff:b9:53:d1:36:37:
         b0:62:4e:da:07:83:10:f8:91:35:d6:81:c7:67:40:e2:af:be:
         db:52:4a:7e:ff:f7:38:f7:5d:17:0c:41:d1:79:5b:d6:45:a7:
         66:e4:de:56:fa:91:89:d4:d4:3f:fb:55:51:bc:65:f2:83:4a:
         7c:77:1d:06:28:44:82:d0:cc:38:1d:d6:30:e6:d6:13:1a:68:
         3b:1e:6e:a3:38:19:c2:42:a9:c6:63:0a:76:1c:fd:d4:2a:ee:
         09:c9:18:dc:f9:6e:4a:95:f8:20:f5:77:ed:3b:08:e4:87:97:
         d0:aa:81:9a:86:60:8e:68:70:10:ff:ac:75:44:53:73:88:2e:
         e1:2b:29:9f:42:bd:32:8b:d4:11:c2:db:3c:41:41:e8:86:51:
         e0:07:e7:32:84:0c:b5:11:74:9f:15:8c:76:4b:67:48:89:7e:
         32:bb:1e:f4:1d:7b:75:6c:3c:d3:20:90:9f:1b:41:ff:69:25:
         23:50:64:93:80:ad:90:fa:11:a9:fa:8a:9f:b3:25:61:19:d2:
         e9:cd:52:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----