Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.cer
File:                     0ab335413c1ba3baeef4f7410d98340c0e6acd4c.cer (raw, json)
Hash identifier:          7bQ/DYc6tpFiTuY10QBFk2jLFr6Z8FB8kolQDYVk7Bk=
Subject key identifier:   9E:F2:09:99:59:88:69:41:CF:8E:62:1B:AF:18:6F:BC:93:40:DB:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD115E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 29 Aug 2019 21:30:26 +0000
Certificate not after:    Sun 17 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 23201
                          AS: 28008
                          AS: 52229
                          IP: 181.40.0.0/16
                          IP: 181.120.0.0/13
                          IP: 186.0.188.0/22
                          IP: 186.2.192.0 -- 186.2.239.255
                          IP: 186.16.0.0/15
                          IP: 190.2.192.0/20
                          IP: 190.114.224.0/21
                          IP: 190.121.160.0/20
                          IP: 190.128.128.0/17
                          IP: 200.26.176.0/21
                          IP: 200.85.32.0/19
                          IP: 2800:3a0::/32
                          IP: 2800:c70::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16585054 (0xfd115e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 21:30:26 2019 GMT
            Not After : Nov 17 14:00:00 2024 GMT
        Subject: CN=0ab335413c1ba3baeef4f7410d98340c0e6acd4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:cc:25:64:54:6a:65:ea:5d:1e:53:86:76:2f:
                    20:0f:9e:27:b7:b8:a1:5f:95:ae:7e:c3:a9:ab:8f:
                    51:e6:58:e1:6f:c2:09:fc:e8:06:47:3a:b1:7b:90:
                    db:d5:22:2b:20:42:ab:ba:1d:f7:4f:a0:23:cf:96:
                    e1:89:6c:97:09:4c:f1:7b:5a:91:41:0c:8b:68:9e:
                    ac:8f:96:75:5c:bf:69:06:2e:52:32:27:4d:ce:f0:
                    b6:39:0d:86:67:a7:62:fb:36:c2:b0:91:fd:e1:4a:
                    82:7e:ff:b1:c3:20:df:97:4b:a6:14:f0:a4:a1:06:
                    af:cc:3c:c7:ad:8f:33:db:3e:c1:48:ae:ef:2b:3e:
                    37:68:aa:dd:da:31:2d:68:26:b3:03:75:36:23:47:
                    22:38:3e:d7:37:e5:52:35:95:3f:e9:fd:e8:3b:80:
                    b2:5b:d4:f4:58:8c:a4:10:90:8e:a7:71:89:81:df:
                    12:e0:fd:95:0b:3e:ff:2d:bf:06:8f:5e:c5:db:da:
                    18:8f:c2:60:ff:51:11:bc:01:bc:3c:a2:98:1b:52:
                    85:ba:96:0d:8c:ec:f3:55:5c:d0:78:b1:5a:27:20:
                    79:07:22:01:3e:af:a9:94:12:9b:bf:2c:7d:53:d8:
                    af:f3:21:4e:33:0e:d8:f9:f7:6c:fb:fc:cf:1f:46:
                    9f:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:F2:09:99:59:88:69:41:CF:8E:62:1B:AF:18:6F:BC:93:40:DB:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a27f85c-cd28-4ecd-8846-e806d6045ca9/0ab335413c1ba3baeef4f7410d98340c0e6acd4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.40.0.0/16
                  181.120.0.0/13
                  186.0.188.0/22
                  186.2.192.0-186.2.239.255
                  186.16.0.0/15
                  190.2.192.0/20
                  190.114.224.0/21
                  190.121.160.0/20
                  190.128.128.0/17
                  200.26.176.0/21
                  200.85.32.0/19
                IPv6:
                  2800:3a0::/32
                  2800:c70::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23201
                  28008
                  52229

    Signature Algorithm: sha256WithRSAEncryption
         18:62:2f:2b:84:de:06:07:ad:42:e7:2a:4a:65:f1:38:3b:10:
         9d:4f:00:24:6f:f5:df:dd:99:a2:99:ff:1e:46:31:78:a4:f8:
         79:2e:aa:b4:38:46:96:81:90:b2:71:2d:86:17:3b:ff:5e:f2:
         2e:c9:cf:30:d5:2a:71:d2:b3:ab:48:46:32:cb:f0:8a:a5:94:
         14:ca:4a:57:99:03:61:96:08:8e:3e:ca:24:0e:2a:2c:fb:06:
         e7:2e:ac:9e:8f:d1:ed:ad:ae:f5:cb:4c:3c:c6:ce:c4:88:11:
         45:aa:ce:06:eb:61:2b:4c:c0:03:2f:53:73:69:20:4f:68:19:
         c4:a7:49:fd:8e:a3:59:31:91:d6:35:e0:f8:7b:b3:c1:54:f7:
         13:af:4d:53:14:c9:12:24:68:42:58:16:66:c1:d0:41:98:8b:
         30:f0:4c:c5:06:1f:eb:a2:1a:d4:6d:4d:f6:f4:ff:07:02:d1:
         4e:6f:0d:11:40:d4:84:30:3c:26:ab:53:2c:94:d2:70:88:2c:
         c5:da:57:41:57:73:c9:f4:60:fb:31:51:5f:ef:96:db:74:66:
         5a:2b:2c:90:2f:49:ad:0f:95:d0:d0:b5:3c:89:e9:77:e9:bc:
         c3:a4:8e:14:8a:8e:1b:bf:65:34:2e:a4:95:d0:6f:c3:55:4d:
         c1:03:31:19
-----BEGIN CERTIFICATE-----
MIIGKjCCBRKgAwIBAgIEAP0RXjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDgyOTIxMzAyNloXDTI0MTExNzE0MDAw
MFowMzExMC8GA1UEAxMoMGFiMzM1NDEzYzFiYTNiYWVlZjRmNzQxMGQ5ODM0MGMw
ZTZhY2Q0YzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI7MJWRUamXq
XR5ThnYvIA+eJ7e4oV+Vrn7DqauPUeZY4W/CCfzoBkc6sXuQ29UiKyBCq7od90+g
I8+W4YlslwlM8XtakUEMi2ierI+WdVy/aQYuUjInTc7wtjkNhmenYvs2wrCR/eFK
gn7/scMg35dLphTwpKEGr8w8x62PM9s+wUiu7ys+N2iq3doxLWgmswN1NiNHIjg+
1zflUjWVP+n96DuAslvU9FiMpBCQjqdxiYHfEuD9lQs+/y2/Bo9exdvaGI/CYP9R
EbwBvDyimBtShbqWDYzs81Vc0HixWicgeQciAT6vqZQSm78sfVPYr/MhTjMO2Pn3
bPv8zx9GnyECAwEAAaOCA1kwggNVMB0GA1UdDgQWBBSe8gmZWYhpQc+OYhuvGG+8
k0DbFjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yYTI3Zjg1Yy1jZDI4
LTRlY2QtODg0Ni1lODA2ZDYwNDVjYTkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmEyN2Y4NWMtY2QyOC00
ZWNkLTg4NDYtZTgwNmQ2MDQ1Y2E5LzBhYjMzNTQxM2MxYmEzYmFlZWY0Zjc0MTBk
OTgzNDBjMGU2YWNkNGMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB2
BggrBgEFBQcBBwEB/wRnMGUwTQQCAAEwRwMDALUoAwMDtXgDBAK6ALwwDAMEBroC
wAMEBLoC4AMDAboQAwQEvgLAAwQDvnLgAwQEvnmgAwQHvoCAAwQDyBqwAwQFyFUg
MBQEAgACMA4DBQAoAAOgAwUAKAAMcDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgJa
oQICbWgCAwDMBTANBgkqhkiG9w0BAQsFAAOCAQEAGGIvK4TeBgetQucqSmXxODsQ
nU8AJG/1392Zopn/HkYxeKT4eS6qtDhGloGQsnEthhc7/17yLsnPMNUqcdKzq0hG
MsvwiqWUFMpKV5kDYZYIjj7KJA4qLPsG5y6sno/R7a2u9ctMPMbOxIgRRarOButh
K0zAAy9Tc2kgT2gZxKdJ/Y6jWTGR1jXg+HuzwVT3E69NUxTJEiRoQlgWZsHQQZiL
MPBMxQYf66Ia1G1N9vT/BwLRTm8NEUDUhDA8JqtTLJTScIgsxdpXQVdzyfRg+zFR
X++W23RmWisskC9JrQ+V0NC1PInpd+m8w6SOFIqOG79lNC6kldBvw1VNwQMxGQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org