Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07ba915c573517ed9f62e1b3c065f3503a8e3040.cer
File:                     07ba915c573517ed9f62e1b3c065f3503a8e3040.cer (raw, json)
Hash identifier:          0xseeovGmqIHVZo3oMEDu+8ftuPmGk7o899h+9n8sVw=
Subject key identifier:   F0:78:29:76:17:A5:13:D8:55:B7:66:A0:C5:DD:53:C1:A9:34:19:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FECBED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4b92367-c0fd-4c25-897d-72719decbc1e/07ba915c573517ed9f62e1b3c065f3503a8e3040.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4b92367-c0fd-4c25-897d-72719decbc1e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:30:41 +0000
Certificate not after:    Mon 04 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 14840
                          AS: 26622
                          AS: 61889
                          IP: 177.152.184.0/22
                          IP: 186.211.128.0/17
                          IP: 187.103.96.0/19
                          IP: 200.0.32.0/20
                          IP: 200.143.64.0/18
                          IP: 200.195.224.0/19
                          IP: 200.215.208.0/20
                          IP: 201.16.0.0/17
                          IP: 2804:8::/30
                          IP: 2804:e34::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16698349 (0xfecbed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:30:41 2023 GMT
            Not After : Nov  4 14:00:00 2024 GMT
        Subject: CN=07ba915c573517ed9f62e1b3c065f3503a8e3040
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:44:2f:3e:61:1e:d7:16:c4:03:ae:03:ab:e5:
                    ac:d5:45:45:1f:49:9b:e7:b5:37:51:43:04:30:49:
                    55:2a:51:89:f4:52:df:a8:6e:c7:7c:7d:72:b0:9c:
                    cc:a8:64:00:9b:46:27:5b:7c:2f:f2:b7:f9:75:3a:
                    64:05:f2:5b:e7:ac:be:79:25:82:38:04:60:88:fe:
                    63:e9:cb:8e:37:61:1f:a5:35:45:f5:88:44:db:3c:
                    2f:e8:21:b0:e6:ce:20:da:32:80:6e:96:62:76:fe:
                    91:71:26:e8:7b:26:2f:ff:59:65:a0:bf:08:e1:85:
                    27:b1:61:d9:4f:e1:65:4b:80:44:92:6f:c0:8f:e3:
                    b3:28:30:a3:83:c1:7f:e5:6d:3d:44:f0:60:62:75:
                    1a:9b:70:85:6e:10:86:ef:4c:6b:9a:9d:cc:4a:97:
                    92:dd:f0:59:3f:48:cb:3a:db:8c:fe:08:1f:a8:d0:
                    d0:67:88:48:aa:58:2f:65:06:43:8b:5b:91:4d:9a:
                    6e:2d:13:5d:ee:8a:d1:93:aa:8e:18:11:cc:e3:17:
                    a8:7f:03:bb:f5:a3:a8:8d:75:19:70:bb:f4:0e:7d:
                    9c:8b:c1:4b:45:d9:da:e7:88:10:dc:eb:ef:df:e5:
                    0f:4e:d6:bf:b0:90:6a:99:39:53:2f:02:71:43:91:
                    52:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:78:29:76:17:A5:13:D8:55:B7:66:A0:C5:DD:53:C1:A9:34:19:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4b92367-c0fd-4c25-897d-72719decbc1e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4b92367-c0fd-4c25-897d-72719decbc1e/07ba915c573517ed9f62e1b3c065f3503a8e3040.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.152.184.0/22
                  186.211.128.0/17
                  187.103.96.0/19
                  200.0.32.0/20
                  200.143.64.0/18
                  200.195.224.0/19
                  200.215.208.0/20
                  201.16.0.0/17
                IPv6:
                  2804:8::/30
                  2804:e34::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14840
                  26622
                  61889

    Signature Algorithm: sha256WithRSAEncryption
         9f:15:44:97:7c:d0:79:63:79:2c:26:d8:47:36:ed:f5:b7:ba:
         f4:b1:87:7f:30:9a:40:ac:8a:5b:d3:3f:0e:66:7c:42:36:ff:
         40:f1:f8:84:e3:c4:65:40:d3:75:80:7e:2d:02:af:fa:b0:b1:
         d4:7f:71:37:69:c6:b0:4e:42:e7:a1:d1:c7:fa:20:bf:84:07:
         3f:e7:bf:58:d9:bc:fc:4d:38:08:64:dd:e7:d7:51:61:8e:d7:
         b9:24:ef:bc:42:fd:5d:e8:aa:88:a6:f9:69:a0:8d:5c:43:68:
         ca:a8:41:4f:12:ae:d1:94:05:0c:11:8b:cd:41:2b:c9:45:0b:
         60:8d:4f:c3:f7:be:4f:fb:aa:09:59:40:8c:84:8b:cc:76:b5:
         87:79:fc:d2:0a:15:89:0f:78:61:c8:54:f6:4a:8e:b3:31:8f:
         9c:d9:87:be:62:f6:3d:85:d0:92:3d:46:dc:c4:00:a9:39:8f:
         d4:35:e2:7d:ed:f1:04:3f:7b:bd:18:af:c0:72:60:3b:17:6a:
         03:46:4a:bb:0a:ae:d5:be:50:ec:4a:c0:a1:b7:d9:58:5e:99:
         99:38:4a:3c:14:46:c7:db:8c:a2:d3:cb:ba:86:70:8e:b9:3b:
         05:8a:ff:92:ec:e5:cf:53:21:d7:8f:d0:9c:9d:f2:99:cb:46:
         ed:77:50:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org