RPKI Certificate
Location:                 rsync/repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b3896c526901b5ef8601c8920a18798a6a04a9.cer (download)

Subject key identifier:   2C:C3:5B:33:C3:16:C4:7D:4C:4D:DA:59:0C:9F:FE:84:D7:90:F0:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Manifest:                 repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/85b3896c526901b5ef8601c8920a18798a6a04a9.mft
CA Repository:            repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/
Notification URL:         https://rrdp.lacnic.net/rrdp/notification.xml
Subordinate resources:
    1: AS: 28522
    2: AS: 28539
    1: IP: 138.186.200.0/22
    2: IP: 170.247.172.0/22
    3: IP: 201.150.0.0--201.150.11.255
    4: IP: 201.159.96.0/20
    5: IP: 201.159.124.0/22
    6: IP: 2806:211::/32

--
$ openssl x509 -text -inform DER -in rsync/repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85b3896c526901b5ef8601c8920a18798a6a04a9.cer
Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 10086566 (0x99e8a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:25 2017 GMT
            Not After : May 11 15:00:00 2022 GMT
        Subject: CN=85b3896c526901b5ef8601c8920a18798a6a04a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:17:ad:73:e8:9c:b1:88:cf:21:55:6b:ab:a4:
                    ac:9b:3d:67:e3:51:8c:58:99:2a:b9:9b:01:36:05:
                    d0:1f:16:dd:fc:05:be:25:2b:00:0d:01:a6:70:81:
                    76:5d:4a:eb:bb:8d:22:be:53:cf:58:06:4e:c2:f4:
                    09:8b:25:61:46:b1:43:06:bc:2c:60:f3:b6:46:c7:
                    df:ea:01:a2:b3:c4:dd:e9:9f:25:00:8a:4d:b1:46:
                    0f:da:a5:38:76:b5:e2:05:e4:a1:cf:d9:53:d2:08:
                    28:40:78:61:eb:1e:63:82:43:a3:7a:9e:e1:0c:cc:
                    56:c8:7a:5d:f6:d1:cb:30:0d:9f:40:0b:53:c0:4d:
                    c9:01:34:fa:f1:8e:27:99:e0:d7:de:86:69:6d:0d:
                    cb:27:1c:0c:30:7f:90:7d:cd:0e:2c:ba:23:46:da:
                    9e:d9:f7:cd:b3:69:4f:0c:ef:94:21:40:f7:e5:53:
                    8d:ed:95:ae:e1:43:b5:86:df:b0:c1:1f:10:cc:e3:
                    72:86:a4:c5:e2:b5:20:08:90:4b:c7:b8:63:d8:5c:
                    c5:6c:c2:78:91:02:f7:60:33:83:3e:a0:3c:98:8e:
                    8f:31:e8:92:90:f2:c3:a5:5d:d8:2d:6f:41:4f:2d:
                    77:8b:f0:d4:17:d3:ed:e4:f2:d3:ef:38:5b:d8:a5:
                    28:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier: 
                2C:C3:5B:33:C3:16:C4:7D:4C:4D:DA:59:0C:9F:FE:84:D7:90:F0:CA
            X509v3 Authority Key Identifier: 
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access: 
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access: 
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/089e197f-8382-4e8e-8029-12083966c90e/85b3896c526901b5ef8601c8920a18798a6a04a9.mft

            X509v3 CRL Distribution Points: 

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.200.0/22
                  170.247.172.0/22
                  201.150.0.0-201.150.11.255
                  201.159.96.0/20
                  201.159.124.0/22
                IPv6:
                  2806:211::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28522
                  28539

    Signature Algorithm: sha256WithRSAEncryption
         8e:42:09:f5:e2:ee:9d:45:a7:93:7c:fd:1b:c8:04:06:d4:13:
         57:a2:8b:47:90:31:64:c6:f6:10:ea:6d:8a:2e:a9:54:1a:87:
         a5:41:72:d8:1b:80:7d:d5:5a:4d:62:b7:02:6d:d7:3e:5e:3c:
         fa:00:f2:af:42:79:94:df:c5:34:ee:ca:ce:c4:f2:87:b8:c0:
         6e:c0:d2:fb:ec:21:c0:c5:46:cf:4c:57:51:65:a8:94:a2:4e:
         c0:97:2e:ef:a8:9d:88:b8:ab:45:1a:b5:54:23:e1:ba:39:5d:
         4d:b0:4d:a7:83:8f:87:3e:29:0e:e5:0d:6b:15:18:15:6f:75:
         41:c9:41:77:81:0e:9b:09:fa:73:22:6c:a8:38:d1:a1:d4:06:
         86:24:8b:32:b7:0a:b8:8c:77:4a:2c:09:da:b1:e2:f5:5b:2e:
         74:d0:ae:9c:43:de:1b:c4:d3:02:86:a4:38:ca:69:b7:51:ee:
         1c:a2:38:21:ae:3c:e1:6d:6d:8d:d5:eb:c6:48:c9:86:85:f8:
         65:6b:b8:53:3a:89:1c:4a:fd:da:30:3a:d8:8e:02:ac:24:8b:
         5d:88:9f:9a:e5:6e:dd:88:9e:1e:42:97:39:de:5b:98:00:a4:
         bf:3f:a5:ad:8c:69:99:ff:ce:b3:53:99:db:59:91:01:d5:c3:
         f5:7d:59:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----