Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0346440b241d40bd970699e1c0567cf9a1f8b922.cer
File:                     0346440b241d40bd970699e1c0567cf9a1f8b922.cer (raw, json)
Hash identifier:          D/G6/fgLw2NmYeLohoWQ+g4U67OOig8IbyuQhyGQFnE=
Subject key identifier:   30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB881A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 May 2019 21:35:33 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 8151
                          AS: 28412 -- 28413
                          AS: 28513
                          AS: 28550
                          AS: 265512 -- 265514
                          IP: 148.221.0.0/16
                          IP: 148.223.0.0/16
                          IP: 148.233.0.0/16
                          IP: 148.235.0.0/16
                          IP: 187.128.0.0/11
                          IP: 187.168.0.0/13
                          IP: 187.192.0.0 -- 187.239.255.255
                          IP: 189.128.0.0/10
                          IP: 189.224.0.0/11
                          IP: 192.100.232.0/23
                          IP: 200.33.136.0 -- 200.33.151.255
                          IP: 200.34.32.0/20
                          IP: 200.34.133.0/24
                          IP: 200.36.32.0/19
                          IP: 200.38.128.0/19
                          IP: 200.38.192.0/19
                          IP: 200.64.0.0/15
                          IP: 200.66.128.0 -- 200.67.255.255
                          IP: 200.78.0.0/17
                          IP: 200.79.0.0/17
                          IP: 200.95.0.0/17
                          IP: 201.96.0.0 -- 201.129.255.255
                          IP: 201.130.80.0/24
                          IP: 201.131.52.0/22
                          IP: 201.131.76.0/24
                          IP: 201.133.0.0 -- 201.138.255.255
                          IP: 201.139.160.0/21
                          IP: 201.144.0.0/14
                          IP: 201.152.0.0/14
                          IP: 207.248.128.0/19
                          IP: 2001:1208::/32
                          IP: 2806:238::/48
                          IP: 2806:2c0::/32
                          IP: 2806:1000::/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16484378 (0xfb881a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  9 21:35:33 2019 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=0346440b241d40bd970699e1c0567cf9a1f8b922
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:64:f7:c1:da:e6:71:f9:c1:57:bb:5c:9b:86:
                    80:cf:85:f7:97:30:74:d9:1e:1e:db:f7:58:c9:e6:
                    80:67:f3:09:61:af:ed:ef:5e:9a:a7:20:8e:a2:da:
                    b1:2b:b8:a0:18:65:68:9d:68:ed:a5:59:95:07:b2:
                    98:c8:b7:2b:ca:aa:e7:cf:35:bf:f9:86:89:91:38:
                    82:96:be:60:40:70:b9:c3:2f:62:50:9b:d8:e2:a8:
                    ab:56:07:9f:7d:8e:92:9e:19:7c:8e:b1:38:69:c4:
                    32:b7:3a:77:0f:32:5f:30:8a:bd:ef:98:7d:e5:b0:
                    c2:3b:55:08:06:60:19:90:7c:dc:fa:11:1b:89:b3:
                    d5:7e:1b:2c:d6:88:96:c1:0e:9b:81:c0:04:30:b8:
                    fb:5a:9b:f1:80:ea:a4:71:66:b9:05:b4:24:da:f4:
                    60:51:2a:14:14:4f:19:8c:4c:f6:4a:d4:02:ff:84:
                    3f:61:82:98:09:17:52:9f:9d:3e:c9:52:27:5b:8e:
                    92:9a:6f:bf:50:a8:a4:03:31:00:22:39:8b:9f:6e:
                    d5:37:9f:04:f7:77:63:aa:e0:08:9e:7e:d6:d9:73:
                    e8:97:7b:70:0c:3a:ee:21:40:c8:77:6e:a6:f4:e4:
                    40:86:21:26:05:89:e1:04:71:10:90:76:ac:34:80:
                    ad:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:4A:94:E6:DD:FD:B1:05:A7:94:2B:9E:D6:EB:00:82:65:62:5F:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/95490ec3-36af-4d63-9b38-c4d83d8fd853/0346440b241d40bd970699e1c0567cf9a1f8b922.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.221.0.0/16
                  148.223.0.0/16
                  148.233.0.0/16
                  148.235.0.0/16
                  187.128.0.0/11
                  187.168.0.0/13
                  187.192.0.0-187.239.255.255
                  189.128.0.0/10
                  189.224.0.0/11
                  192.100.232.0/23
                  200.33.136.0-200.33.151.255
                  200.34.32.0/20
                  200.34.133.0/24
                  200.36.32.0/19
                  200.38.128.0/19
                  200.38.192.0/19
                  200.64.0.0/15
                  200.66.128.0-200.67.255.255
                  200.78.0.0/17
                  200.79.0.0/17
                  200.95.0.0/17
                  201.96.0.0-201.129.255.255
                  201.130.80.0/24
                  201.131.52.0/22
                  201.131.76.0/24
                  201.133.0.0-201.138.255.255
                  201.139.160.0/21
                  201.144.0.0/14
                  201.152.0.0/14
                  207.248.128.0/19
                IPv6:
                  2001:1208::/32
                  2806:238::/48
                  2806:2c0::/32
                  2806:1000::/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8151
                  28412-28413
                  28513
                  28550
                  265512-265514

    Signature Algorithm: sha256WithRSAEncryption
         91:5f:c2:bb:a3:0c:ec:71:3a:48:5a:e9:73:39:37:a4:d0:00:
         88:4d:13:31:33:7d:df:78:57:f5:cc:37:81:e5:f3:c8:f2:5b:
         83:cd:48:80:1c:2e:b9:7f:e4:fc:2e:0b:c9:df:89:91:c8:1e:
         bc:ad:f6:ca:03:76:11:99:5a:42:b2:b7:08:57:63:69:d7:bc:
         08:9b:0c:d0:7f:4f:3d:46:9d:c3:e2:53:b4:e5:10:f4:52:1f:
         46:be:87:8c:db:f5:a0:af:de:a1:fd:fe:9f:ff:03:d8:cc:29:
         c7:66:6d:89:33:f0:52:25:8f:37:ee:11:d8:ef:b7:31:36:07:
         e2:9a:84:7e:80:9e:50:b1:44:d8:72:b0:e7:77:a2:91:6a:c8:
         8a:59:d7:37:cd:d0:44:98:87:dc:22:0f:10:18:db:78:a1:0d:
         e1:07:3a:8c:18:e3:36:e4:28:e2:4a:f4:79:f5:5b:9a:58:10:
         1f:55:b8:ec:6f:9e:e0:0c:81:77:ee:81:f8:2d:81:38:31:e9:
         46:a2:01:17:86:04:e8:e2:27:21:a6:58:7f:87:8b:9d:ce:34:
         4b:8d:9f:bd:66:1d:65:b6:26:e1:f7:4e:e7:49:9d:b2:2a:72:
         80:16:25:02:09:c0:9f:8b:11:2d:38:e4:3a:ed:2a:9b:5d:dd:
         05:f7:83:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org