Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d22cc49db918d10383d16f3a1f83aa1e2a5567b7.cer
File:                     d22cc49db918d10383d16f3a1f83aa1e2a5567b7.cer (raw, json)
Hash identifier:          TqbJ2qbt8U7QhpjF+e5dMKJu8U9S3GQhk323S6k/e9I=
Subject key identifier:   CA:B2:DD:CB:EA:02:99:21:D9:53:0C:A6:A2:68:5C:12:F4:57:57:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D733A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91f0feda-4e2a-41b7-bf51-e657a5264035/d22cc49db918d10383d16f3a1f83aa1e2a5567b7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91f0feda-4e2a-41b7-bf51-e657a5264035/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Fri 15 Dec 2023 14:00:00 +0000
Subordinate resources:    AS: 27882
                          IP: 131.0.196.0/22
                          IP: 143.137.228.0/22
                          IP: 177.222.32.0/19
                          IP: 177.222.96.0/19
                          IP: 181.114.96.0/19
                          IP: 181.188.128.0/18
                          IP: 190.104.0.0/19
                          IP: 200.73.96.0/21
                          IP: 2800:320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14103458 (0xd733a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Dec 15 14:00:00 2023 GMT
        Subject: CN=d22cc49db918d10383d16f3a1f83aa1e2a5567b7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:35:b4:63:87:10:84:19:2d:68:04:fa:7c:a8:
                    89:eb:ac:c1:bf:8a:a9:d8:98:81:0b:75:77:30:61:
                    66:a4:12:04:05:ce:e4:a4:ce:6b:1c:b9:1c:4d:bc:
                    4a:b8:79:b4:ae:d9:ba:d4:af:d0:e5:12:50:34:9e:
                    ee:12:f4:ef:0a:57:1c:9d:ad:18:57:c6:93:e5:48:
                    64:c2:77:56:cf:70:74:3c:a1:26:83:6b:87:07:88:
                    bf:7e:66:3a:25:65:0c:09:93:7c:4e:d8:90:e3:62:
                    3f:1c:d1:ee:e7:52:ef:3f:7f:cf:c0:c9:cb:0b:42:
                    aa:c6:76:ee:d8:f4:f4:9e:ee:73:f0:a9:6b:5b:63:
                    67:62:d4:b9:37:cb:0a:22:72:4a:3a:37:0f:51:16:
                    29:d3:e0:cc:74:c1:c9:ee:bd:0b:58:e2:22:e3:bf:
                    86:8c:d1:ea:af:fe:72:71:36:87:ce:df:db:77:92:
                    10:72:c4:96:2d:95:5a:eb:fc:63:1a:78:80:f5:bf:
                    ac:5d:13:fd:c6:f8:9a:a6:1a:13:52:d4:0a:09:48:
                    b6:ab:9d:5c:10:28:8d:1f:7b:59:b1:89:4c:74:79:
                    2c:9a:1e:65:41:a2:e9:c2:80:0b:62:7c:b1:87:b1:
                    51:28:a2:ef:69:2f:97:69:ed:39:b3:d8:b2:23:13:
                    59:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:B2:DD:CB:EA:02:99:21:D9:53:0C:A6:A2:68:5C:12:F4:57:57:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91f0feda-4e2a-41b7-bf51-e657a5264035/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91f0feda-4e2a-41b7-bf51-e657a5264035/d22cc49db918d10383d16f3a1f83aa1e2a5567b7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.196.0/22
                  143.137.228.0/22
                  177.222.32.0/19
                  177.222.96.0/19
                  181.114.96.0/19
                  181.188.128.0/18
                  190.104.0.0/19
                  200.73.96.0/21
                IPv6:
                  2800:320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27882

    Signature Algorithm: sha256WithRSAEncryption
         6a:f4:ee:3a:f8:bc:c5:ea:d2:2a:9b:68:6d:44:40:2f:36:1f:
         29:d8:f1:bc:a2:28:fc:01:6c:f7:29:1d:b4:5c:60:b0:32:ac:
         ff:a8:33:93:c6:84:bb:56:6b:c2:3e:ee:32:bf:50:4d:42:71:
         56:cf:89:c8:fc:e1:a7:4c:f4:dc:b9:e2:d2:bc:9b:22:b3:80:
         ef:d0:48:17:ee:c5:26:bb:b3:73:98:c9:d5:da:f1:27:ef:ee:
         7d:c3:56:c5:40:68:f9:d2:8f:41:94:dd:95:a2:10:8b:b1:9c:
         39:34:c4:8b:6d:71:76:a6:1f:1c:7e:cf:3a:f1:05:95:1c:4a:
         e7:10:54:00:94:41:38:05:74:36:74:ed:7a:73:c8:67:18:95:
         21:92:2c:2e:70:bf:6a:f3:77:ae:81:48:6b:e5:ac:c2:2d:39:
         58:b0:06:e5:6f:f9:a2:19:82:97:c8:87:b1:13:f5:66:54:a0:
         7f:db:b3:7c:8c:63:f4:45:0e:60:49:39:d0:e3:70:d1:88:f7:
         96:96:ff:ab:02:e5:e3:f9:a5:db:fb:3f:a0:4c:46:06:87:d4:
         c1:7d:0b:eb:d6:3c:48:37:4b:fe:63:0e:81:90:49:27:40:91:
         6e:cc:06:cb:2c:9d:3e:5c:2b:dc:c8:91:15:27:2c:e2:67:5b:
         d9:88:58:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org