RPKI Certificate
Location:                 rsync/repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer (download)

Subject key identifier:   AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Manifest:                 repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.mft
CA Repository:            repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/
Notification URL:         https://rrdp.lacnic.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 22889
    1: IP: 167.249.116.0/22
    2: IP: 170.150.12.0/22
    3: IP: 170.247.224.0/22
    4: IP: 187.251.0.0/19
    5: IP: 201.174.0.0/16
    6: IP: 2806:20d::/32

--
$ openssl x509 -text -inform DER -in rsync/repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10094395 (0x9a073b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 15:30:35 2019 GMT
            Not After : Dec 14 14:00:00 2022 GMT
        Subject: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:17:f3:6d:7e:13:9a:cc:00:5f:89:5f:05:
                    56:7c:f7:ce:ab:28:b2:3e:d2:60:ca:31:fc:84:00:
                    3b:f0:5b:a7:cf:ce:d0:20:3d:17:c7:ac:54:d1:54:
                    0b:58:3c:45:c3:bf:18:ae:67:72:f9:3d:6a:bd:14:
                    62:37:57:69:d1:b4:f4:0b:14:42:ba:3d:8a:0e:57:
                    ef:2c:67:bf:aa:68:f6:c0:87:5e:b4:bd:76:4b:c1:
                    a2:ea:ca:18:c3:21:ec:45:34:c8:1a:af:dd:3d:31:
                    d5:de:4e:1e:20:c3:96:23:d2:36:0a:2e:49:a9:bf:
                    33:6f:fd:31:52:99:bc:ca:5f:a9:96:bf:dc:f4:bc:
                    d4:77:45:ee:dc:16:d6:f4:cf:e5:0d:df:6a:22:b6:
                    65:43:57:e9:57:84:58:bc:4b:ed:b8:a5:d4:9c:e6:
                    ec:a7:6b:68:5a:6f:14:e4:4f:0c:38:79:fc:af:78:
                    2f:7b:19:7c:2c:51:2e:98:d7:b8:28:84:4f:73:17:
                    08:44:43:52:1d:62:7b:7b:47:bc:d2:e6:92:1f:a3:
                    57:bc:47:13:dc:85:fe:7f:64:d5:16:d7:ff:a8:42:
                    03:ee:74:2a:69:ee:1f:0f:89:45:2d:6a:5b:52:41:
                    d6:1f:e3:23:0d:77:d5:cc:db:24:a8:4c:52:a2:d6:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.116.0/22
                  170.150.12.0/22
                  170.247.224.0/22
                  187.251.0.0/19
                  201.174.0.0/16
                IPv6:
                  2806:20d::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22889

    Signature Algorithm: sha256WithRSAEncryption
         13:e1:8f:d3:47:69:69:7f:51:82:f5:f9:3b:08:f8:4b:87:a4:
         bd:eb:db:ad:38:83:d6:1d:e3:f1:18:2e:b6:ed:f5:4c:66:11:
         be:15:c5:22:f8:67:ca:52:da:c7:a5:7c:35:14:f3:ed:a4:ef:
         f2:59:9c:c0:9e:2f:0d:29:ce:d4:13:26:6c:ad:5a:de:7b:fb:
         de:78:71:01:a6:11:a8:5e:0e:e1:26:2d:62:48:6e:a0:0f:a8:
         94:be:02:d9:a7:c5:b5:72:41:80:27:51:b3:30:1b:f4:a8:a6:
         c0:89:8c:89:d5:fe:1b:8e:e9:8a:5f:11:de:0d:48:a2:04:3e:
         19:07:de:01:3b:25:17:d4:55:1b:34:d1:f5:fc:b2:bb:40:06:
         8b:cc:c5:e3:07:8d:4e:97:0d:2c:c4:44:98:f4:54:f7:a5:53:
         40:f0:4f:1f:48:14:0f:f5:1a:f3:38:83:f3:62:13:ed:f9:39:
         98:4c:3e:99:57:8b:b0:4d:04:ce:70:6f:5a:74:a7:f1:dc:dd:
         ad:51:dd:f2:95:f8:d0:a5:ec:a9:d6:6d:ca:34:d0:e0:3a:44:
         1a:7a:55:26:b0:3b:22:f9:6d:b8:3d:4c:b5:00:26:cb:ac:b3:
         cd:e4:60:e3:be:45:25:bd:ec:ba:c3:6a:8a:84:1b:d2:53:ff:
         99:51:c2:c7
-----BEGIN CERTIFICATE-----
MIIF8DCCBNigAwIBAgIEAJoHOzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MTAwOTE1MzAzNVoXDTIyMTIxNDE0MDAw
MFowMzExMC8GA1UEAxMoM2NkYjllN2E4N2Q3MmM5MGJhNzU4YTBkYzcwZjA5YjMy
ODFjYjBmMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKm+F/NtfhOa
zABfiV8FVnz3zqsosj7SYMox/IQAO/Bbp8/O0CA9F8esVNFUC1g8RcO/GK5ncvk9
ar0UYjdXadG09AsUQro9ig5X7yxnv6po9sCHXrS9dkvBourKGMMh7EU0yBqv3T0x
1d5OHiDDliPSNgouSam/M2/9MVKZvMpfqZa/3PS81HdF7twW1vTP5Q3faiK2ZUNX
6VeEWLxL7bil1Jzm7KdraFpvFORPDDh5/K94L3sZfCxRLpjXuCiET3MXCERDUh1i
e3tHvNLmkh+jV7xHE9yF/n9k1RbX/6hCA+50KmnuHw+JRS1qW1JB1h/jIw131czb
JKhMUqLWbvECAwEAAaOCAx8wggMbMB0GA1UdDgQWBBSsfX1+oJ6IUSWJC0/RYyPO
nzaB5zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82ZGViMzliMi1lZTQ5
LTQ2MTktOTk4Zi03MzY4ODYxNjk2OTQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNmRlYjM5YjItZWU0OS00
NjE5LTk5OGYtNzM2ODg2MTY5Njk0LzNjZGI5ZTdhODdkNzJjOTBiYTc1OGEwZGM3
MGYwOWIzMjgxY2IwZjEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBF
BggrBgEFBQcBBwEB/wQ2MDQwIwQCAAEwHQMEAqf5dAMEAqqWDAMEAqr34AMEBbv7
AAMDAMmuMA0EAgACMAcDBQAoBgINMBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAllp
MA0GCSqGSIb3DQEBCwUAA4IBAQAT4Y/TR2lpf1GC9fk7CPhLh6S969utOIPWHePx
GC627fVMZhG+FcUi+GfKUtrHpXw1FPPtpO/yWZzAni8NKc7UEyZsrVree/veeHEB
phGoXg7hJi1iSG6gD6iUvgLZp8W1ckGAJ1GzMBv0qKbAiYyJ1f4bjumKXxHeDUii
BD4ZB94BOyUX1FUbNNH1/LK7QAaLzMXjB41Olw0sxESY9FT3pVNA8E8fSBQP9Rrz
OIPzYhPt+TmYTD6ZV4uwTQTOcG9adKfx3N2tUd3ylfjQpeyp1m3KNNDgOkQaelUm
sDsi+W24PUy1ACbLrLPN5GDjvkUlvey6w2qKhBvSU/+ZUcLH
-----END CERTIFICATE-----

Generated at Sun Sep 26 12:38:53 2021 by LibreSSL & rpki-client.