Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00dcc15f372aaa9cbcd2f28c589db57bd7b9d031.cer
File:                     00dcc15f372aaa9cbcd2f28c589db57bd7b9d031.cer (raw, json)
Hash identifier:          PJl35pLmujDXarENe1091jIFxSCqyx7mhOfFGZm1C6E=
Subject key identifier:   AF:55:4A:51:46:DA:5C:D6:A8:00:A2:19:0E:F5:27:A6:03:20:7F:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8B40B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4fc8e79-6e94-40bb-a893-e7b5a7599f7c/00dcc15f372aaa9cbcd2f28c589db57bd7b9d031.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4fc8e79-6e94-40bb-a893-e7b5a7599f7c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Wed 05 Jun 2024 18:33:01 +0000
Subordinate resources:    AS: 61478
                          AS: 264811
                          IP: 45.237.88.0/22
                          IP: 131.72.76.0/22
                          IP: 168.195.120.0/22
                          IP: 170.246.160.0/22
                          IP: 2803:cd80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15250443 (0xe8b40b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Jun  5 18:33:01 2024 GMT
        Subject: CN=00dcc15f372aaa9cbcd2f28c589db57bd7b9d031
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:a4:61:4b:5e:c7:d7:1d:a4:d5:80:3f:b8:a6:
                    e2:ee:d8:c3:94:be:95:56:0c:ad:7d:40:b5:63:7e:
                    24:10:47:fa:56:07:5d:6c:66:1c:d2:01:a7:8f:78:
                    11:a1:80:24:84:b9:b3:0f:cb:af:e8:54:03:6a:03:
                    be:67:02:9c:87:06:7a:c1:e1:2c:08:58:c8:1a:5f:
                    fe:57:1c:2d:a3:e9:4e:90:da:5c:bb:50:ef:ba:75:
                    b3:9d:68:94:17:9d:c7:66:1b:bf:9c:c5:13:d3:75:
                    e0:1c:f3:35:10:a2:e1:5c:cd:0c:a0:75:50:3e:51:
                    51:6d:9c:d5:f3:bd:57:db:00:0f:c1:57:66:c3:6b:
                    71:ca:98:a9:9a:11:f3:e1:79:d4:f4:6a:5e:d9:4e:
                    5d:ae:8c:f3:3b:a0:f3:08:41:ed:9b:bd:d4:3c:89:
                    d4:8b:a5:ba:7a:78:bc:09:cb:77:2e:8b:d1:54:2c:
                    c2:3d:a7:ba:5f:7b:10:ca:1a:4c:99:28:42:24:d1:
                    e9:bc:2e:ba:dd:d1:6a:1e:6d:3d:93:67:7e:01:5b:
                    9b:2e:48:75:d3:31:1d:c7:17:14:67:46:13:e3:75:
                    40:e9:cb:7f:0e:57:c4:bb:be:6a:7f:4d:fb:fa:28:
                    65:31:67:18:1f:d5:c0:5d:4e:d0:37:e6:ca:9b:4f:
                    c1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:55:4A:51:46:DA:5C:D6:A8:00:A2:19:0E:F5:27:A6:03:20:7F:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4fc8e79-6e94-40bb-a893-e7b5a7599f7c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4fc8e79-6e94-40bb-a893-e7b5a7599f7c/00dcc15f372aaa9cbcd2f28c589db57bd7b9d031.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.88.0/22
                  131.72.76.0/22
                  168.195.120.0/22
                  170.246.160.0/22
                IPv6:
                  2803:cd80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61478
                  264811

    Signature Algorithm: sha256WithRSAEncryption
         6c:ba:4f:d3:81:76:a3:b4:3d:b4:6a:19:d4:f1:20:53:14:36:
         2e:c6:32:db:7f:e0:74:40:36:1e:56:13:d2:52:c8:41:cd:8c:
         ee:05:57:9c:bf:d3:50:1c:ee:d5:f0:52:d2:b3:79:43:7a:ad:
         13:56:2d:35:db:6c:ed:ce:c4:83:50:c7:4a:f0:f5:1c:8d:b6:
         00:4c:86:71:49:f2:5e:cd:e7:8e:1d:8e:c4:5d:77:6c:cc:74:
         a1:1e:b0:ec:19:6f:54:2f:32:4d:06:1e:09:e6:41:1f:64:14:
         93:88:53:d4:4a:56:13:c2:8c:a8:36:74:68:38:00:e1:5f:24:
         80:de:0a:e6:1c:07:62:93:67:80:8e:e7:56:c0:89:dc:62:02:
         a4:53:fa:2d:b3:6b:3c:e7:63:f7:ae:1a:fd:63:fa:27:62:ee:
         c9:9b:1b:33:1e:8c:91:03:dd:69:f4:e9:47:b8:35:34:61:71:
         15:8d:de:0c:14:84:30:dc:00:24:17:a9:d9:92:09:bd:5f:a5:
         43:48:7d:71:17:70:0e:43:44:6c:e2:36:62:d7:d9:47:72:87:
         28:29:af:8b:4b:41:05:be:9d:d5:8d:55:ef:6c:90:f8:12:8f:
         79:f3:6e:a0:a3:0c:d5:35:37:13:04:4d:1f:2b:92:79:fc:82:
         32:ff:ed:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org