Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0886dfe31718f1312abe7961736b291ff1600a92.cer
File:                     0886dfe31718f1312abe7961736b291ff1600a92.cer (raw, json)
Hash identifier:          4ZF5VWox17y1SUoayGmMJhpnbQdjAag6tdH1nP+OzuA=
Subject key identifier:   8B:B7:7C:CF:26:9A:3A:0D:3B:C3:88:37:E0:D1:B9:34:CE:FC:C4:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104605C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/17056018-0b54-4fa3-9975-163ff2b78770/0886dfe31718f1312abe7961736b291ff1600a92.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/17056018-0b54-4fa3-9975-163ff2b78770/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:36:48 +0000
Certificate not after:    Wed 28 May 2025 15:54:49 +0000
Subordinate resources:    AS: 52940
                          AS: 53171
                          AS: 61844
                          AS: 265974
                          IP: 45.177.252.0/22
                          IP: 45.179.20.0/22
                          IP: 138.118.92.0/22
                          IP: 138.255.212.0/22
                          IP: 164.163.212.0/22
                          IP: 168.227.76.0/22
                          IP: 170.244.164.0/22
                          IP: 177.11.92.0/22
                          IP: 177.87.16.0/21
                          IP: 186.224.224.0/20
                          IP: 191.7.28.0/22
                          IP: 201.148.124.0/22
                          IP: 2804:1424::/32
                          IP: 2804:1a30::/32
                          IP: 2804:24e8::/32
                          IP: 2804:40ac::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17064028 (0x104605c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:36:48 2023 GMT
            Not After : May 28 15:54:49 2025 GMT
        Subject: CN=0886dfe31718f1312abe7961736b291ff1600a92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:07:fb:89:e4:e4:90:76:1e:fd:5d:87:62:c6:
                    11:a6:12:58:4a:b8:18:a5:25:ba:6d:e5:5c:27:e7:
                    71:ba:bc:d5:d4:95:4f:11:81:ba:9f:10:dd:ea:19:
                    4d:ee:37:12:f2:d1:12:9d:40:8c:2c:fc:38:f8:86:
                    c5:94:2d:56:6d:b6:d7:a8:5b:77:e6:a4:dd:b5:98:
                    b2:08:f6:5f:3a:9f:8f:e3:7e:7e:2e:ac:8a:68:08:
                    33:3d:2f:89:cd:e4:fe:a0:68:45:17:75:14:96:7f:
                    b1:b6:8f:a9:0e:3a:49:e7:ec:a4:58:91:05:4f:3e:
                    32:b7:19:10:17:12:8e:b4:2d:d5:90:cd:0f:57:bb:
                    84:83:2f:75:ab:42:49:74:fe:4d:5b:3f:85:5a:de:
                    41:13:9b:fa:be:e4:c2:95:ad:bf:96:25:3a:0b:5d:
                    7f:a1:d2:ce:3e:3b:49:8f:fb:00:04:8c:b4:6f:fb:
                    97:25:44:22:e8:f5:4a:00:11:28:44:60:60:64:19:
                    db:19:db:05:3c:cf:9b:4c:7d:64:9c:fa:8a:e4:86:
                    f6:9b:cc:29:05:aa:68:24:fb:9a:29:a7:50:d3:d4:
                    6b:bf:a7:fd:11:56:69:0b:86:6a:03:95:80:82:19:
                    29:9e:e0:00:7b:a3:ac:76:92:97:b3:60:c7:08:7c:
                    f1:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:B7:7C:CF:26:9A:3A:0D:3B:C3:88:37:E0:D1:B9:34:CE:FC:C4:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/17056018-0b54-4fa3-9975-163ff2b78770/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/17056018-0b54-4fa3-9975-163ff2b78770/0886dfe31718f1312abe7961736b291ff1600a92.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.252.0/22
                  45.179.20.0/22
                  138.118.92.0/22
                  138.255.212.0/22
                  164.163.212.0/22
                  168.227.76.0/22
                  170.244.164.0/22
                  177.11.92.0/22
                  177.87.16.0/21
                  186.224.224.0/20
                  191.7.28.0/22
                  201.148.124.0/22
                IPv6:
                  2804:1424::/32
                  2804:1a30::/32
                  2804:24e8::/32
                  2804:40ac::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52940
                  53171
                  61844
                  265974

    Signature Algorithm: sha256WithRSAEncryption
         83:c2:dd:ac:62:f5:b1:b4:52:61:a8:05:a0:ef:63:95:1e:c0:
         e2:a6:c5:36:38:2a:ec:10:02:1c:5a:83:de:81:b1:ea:bf:6b:
         a5:99:a6:2e:26:a5:21:a9:91:1a:4e:04:0e:0f:7a:5e:49:6a:
         55:f9:d3:d3:a8:3a:4b:d0:cf:73:87:77:e6:47:6c:b9:90:77:
         f2:b9:a0:b2:6b:32:92:30:f4:e2:de:a5:61:ba:af:f8:6d:fb:
         ee:7d:1a:f5:78:8c:3e:31:73:47:cb:7d:ac:27:69:b9:2c:ae:
         15:a0:76:f9:68:ab:b5:dc:bc:3e:da:46:bf:83:e0:bf:58:47:
         86:54:c0:2a:ec:17:d0:37:57:07:9a:11:69:ed:f2:a9:33:f7:
         14:cf:04:ba:79:57:53:be:f0:e1:a6:eb:56:fb:b9:21:53:18:
         96:f3:0f:7f:e6:d9:10:94:77:04:60:1d:46:ce:88:e1:e9:88:
         fd:d7:a9:8b:b8:af:dd:8c:93:4c:9b:6e:63:71:be:18:f6:47:
         cd:f5:a2:76:f6:fc:36:27:db:95:66:a6:ec:fa:92:fb:b3:7e:
         12:44:22:df:f9:73:6a:db:b5:9c:49:8e:e8:24:82:7a:92:f6:
         6e:f7:d8:f7:90:36:95:12:f2:af:ec:e2:2d:38:30:00:0b:42:
         6e:fc:2d:24
-----BEGIN CERTIFICATE-----
MIIGQTCCBSmgAwIBAgIEAQRgXDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNzIwMzY0OFoXDTI1MDUyODE1NTQ0
OVowMzExMC8GA1UEAxMoMDg4NmRmZTMxNzE4ZjEzMTJhYmU3OTYxNzM2YjI5MWZm
MTYwMGE5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKgH+4nk5JB2
Hv1dh2LGEaYSWEq4GKUlum3lXCfncbq81dSVTxGBup8Q3eoZTe43EvLREp1AjCz8
OPiGxZQtVm2216hbd+ak3bWYsgj2Xzqfj+N+fi6simgIMz0vic3k/qBoRRd1FJZ/
sbaPqQ46SefspFiRBU8+MrcZEBcSjrQt1ZDND1e7hIMvdatCSXT+TVs/hVreQROb
+r7kwpWtv5YlOgtdf6HSzj47SY/7AASMtG/7lyVEIuj1SgARKERgYGQZ2xnbBTzP
m0x9ZJz6iuSG9pvMKQWqaCT7mimnUNPUa7+n/RFWaQuGagOVgIIZKZ7gAHujrHaS
l7Ngxwh88YkCAwEAAaOCA3AwggNsMB0GA1UdDgQWBBSLt3zPJpo6DTvDiDfg0bk0
zvzEBzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xNzA1NjAxOC0wYjU0
LTRmYTMtOTk3NS0xNjNmZjJiNzg3NzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMTcwNTYwMTgtMGI1NC00
ZmEzLTk5NzUtMTYzZmYyYjc4NzcwLzA4ODZkZmUzMTcxOGYxMzEyYWJlNzk2MTcz
NmIyOTFmZjE2MDBhOTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
hQYIKwYBBQUHAQcBAf8EdjB0ME4EAgABMEgDBAItsfwDBAItsxQDBAKKdlwDBAKK
/9QDBAKko9QDBAKo40wDBAKq9KQDBAKxC1wDBAOxVxADBAS64OADBAK/BxwDBALJ
lHwwIgQCAAIwHAMFACgEFCQDBQAoBBowAwUAKAQk6AMFACgEQKwwKQYIKwYBBQUH
AQgBAf8EGjAYoBYwFAIDAM7MAgMAz7MCAwDxlAIDBA72MA0GCSqGSIb3DQEBCwUA
A4IBAQCDwt2sYvWxtFJhqAWg72OVHsDipsU2OCrsEAIcWoPegbHqv2ulmaYuJqUh
qZEaTgQOD3peSWpV+dPTqDpL0M9zh3fmR2y5kHfyuaCyazKSMPTi3qVhuq/4bfvu
fRr1eIw+MXNHy32sJ2m5LK4VoHb5aKu13Lw+2ka/g+C/WEeGVMAq7BfQN1cHmhFp
7fKpM/cUzwS6eVdTvvDhputW+7khUxiW8w9/5tkQlHcEYB1Gzojh6Yj916mLuK/d
jJNMm25jcb4Y9kfN9aJ29vw2J9uVZqbs+pL7s34SRCLf+XNq27WcSY7oJIJ6kvZu
99j3kDaVEvKv7OItODAAC0Ju/C0k
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org