Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09a0ff6e67bd13945bbb2c559d52176f5801f883.cer
File:                     09a0ff6e67bd13945bbb2c559d52176f5801f883.cer (raw, json)
Hash identifier:          I0ENu6EhAGIQGvKOvclVcDiFQFEmWO/swWF6GnKk1UU=
Subject key identifier:   D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4EC99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Fri 13 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 52423
                          IP: 138.59.16.0/22
                          IP: 143.202.160.0/22
                          IP: 179.48.248.0/22
                          IP: 190.112.220.0/22
                          IP: 2803:6900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16051353 (0xf4ec99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Sep 13 05:00:00 2024 GMT
        Subject: CN=09a0ff6e67bd13945bbb2c559d52176f5801f883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:f8:32:c2:8d:f3:f7:5c:34:43:6d:0b:8b:11:
                    d0:37:ca:c9:20:0d:a9:9b:0e:c5:5f:f2:c6:ad:35:
                    63:1d:de:41:74:d4:23:e3:49:32:22:e8:ab:c1:92:
                    7e:87:5b:1d:00:a6:54:56:4a:2d:f2:7b:e7:e7:8e:
                    65:18:83:2c:88:9b:e4:22:53:83:b6:c7:72:7d:d2:
                    3c:af:be:0e:9b:38:1a:a8:c9:ec:53:d2:39:46:43:
                    6f:2c:60:31:65:8b:68:cc:a7:06:b6:72:7a:b9:06:
                    cb:9a:fa:41:28:dd:83:6b:aa:e2:88:03:53:a3:97:
                    c8:5c:8a:81:31:5a:f3:e3:34:7a:64:33:4e:0a:02:
                    82:25:1a:8b:5f:46:25:4c:fd:cb:29:20:31:d0:63:
                    fd:bf:07:f7:bd:08:37:2e:33:fd:7e:90:8e:00:0a:
                    dd:22:8c:6b:54:28:84:a5:c5:c2:03:37:52:c7:18:
                    66:81:a6:aa:52:2c:4d:a9:d5:5d:ed:a7:10:df:ac:
                    9c:e8:bd:69:2c:b5:e2:70:e9:66:04:ec:14:18:a0:
                    c7:35:c9:a8:15:94:d0:32:6c:f7:1b:29:d5:48:78:
                    82:3f:0f:59:04:91:53:80:47:60:92:65:ac:5b:2e:
                    44:61:31:27:59:65:c3:70:8c:3d:ec:3e:03:28:a7:
                    f0:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:AF:B0:6F:81:C0:C2:79:06:89:39:35:E2:90:46:BD:82:20:18:94
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/71a706ab-d3ce-4bac-8b51-26963947590e/09a0ff6e67bd13945bbb2c559d52176f5801f883.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.16.0/22
                  143.202.160.0/22
                  179.48.248.0/22
                  190.112.220.0/22
                IPv6:
                  2803:6900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52423

    Signature Algorithm: sha256WithRSAEncryption
         ae:13:3f:4f:22:58:5d:2b:ca:15:c6:b4:81:47:d0:b9:70:2d:
         24:fb:a0:1a:fa:c0:89:bc:6a:9c:5a:56:de:62:13:31:dd:1e:
         a7:e9:16:b4:68:8d:87:88:4f:6c:74:67:12:68:6b:79:0f:6b:
         7c:b5:55:2b:35:d0:86:d3:d9:a1:d9:91:d3:4b:1c:3d:1b:c6:
         5e:35:9f:91:ad:fe:a7:97:4f:1e:f5:43:1b:f4:9f:b9:13:8f:
         68:ee:dd:b5:fa:c3:64:c2:2c:35:d4:22:99:62:f7:79:e3:cb:
         74:6f:95:d5:ad:03:c6:9a:4a:04:92:be:b0:7e:eb:43:88:d3:
         b7:21:18:ce:65:0a:62:57:2d:14:9e:65:8a:c3:a2:e4:9d:06:
         cf:24:3f:5e:48:5f:f5:09:1c:69:39:38:48:d2:9f:58:52:ec:
         4c:f0:ee:6d:2f:7f:38:1e:44:f9:fa:5f:ca:20:cb:69:83:df:
         4c:2e:06:93:04:5f:bf:04:75:93:a3:62:07:ae:3a:6b:15:a7:
         69:28:0e:26:12:b5:4d:e3:fb:16:fe:6c:56:4c:fa:76:7d:ae:
         4d:de:00:1b:eb:ea:f7:ee:7b:f4:c0:c8:41:5d:1c:57:6d:47:
         c1:11:6b:8d:89:fd:e1:f5:fc:5c:92:86:63:0d:2c:e8:b7:8f:
         d9:ab:18:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:21 2024 by rpki-client on console-ams.rpki-client.org