Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ebf4f954df853c586ff3cefa4d08c8fbcfd84c7.cer
File:                     0ebf4f954df853c586ff3cefa4d08c8fbcfd84c7.cer (raw, json)
Hash identifier:          nAX9ZOAByvO2G1IWCZ6k1iJkzjHOLZHFNliCOPTAySY=
Subject key identifier:   DA:33:52:F4:23:06:2D:21:9F:6B:6D:68:D8:25:B1:22:70:BE:CD:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FECABB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/302c2e6a-1cfb-4e84-a3e1-b2a7c29df70f/0ebf4f954df853c586ff3cefa4d08c8fbcfd84c7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/302c2e6a-1cfb-4e84-a3e1-b2a7c29df70f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:30:33 +0000
Certificate not after:    Thu 03 Jul 2025 15:16:03 +0000
Subordinate resources:    AS: 11835
                          AS: 52760
                          AS: 52845
                          AS: 262756
                          AS: 266058
                          IP: 45.4.236.0/22
                          IP: 45.160.108.0/22
                          IP: 131.196.88.0/22
                          IP: 138.59.68.0/22
                          IP: 138.59.104.0/22
                          IP: 138.99.192.0/22
                          IP: 167.249.72.0/22
                          IP: 170.80.216.0/22
                          IP: 177.21.224.0/19
                          IP: 177.38.232.0/21
                          IP: 177.66.72.0/22
                          IP: 177.86.240.0/22
                          IP: 179.107.16.0/20
                          IP: 186.224.32.0/20
                          IP: 187.16.32.0/19
                          IP: 189.85.16.0/20
                          IP: 200.23.68.0/22
                          IP: 200.124.188.0/22
                          IP: 200.192.208.0/21
                          IP: 200.192.248.0/21
                          IP: 200.219.150.0 -- 200.219.153.255
                          IP: 201.20.176.0/20
                          IP: 2804:15c::/32
                          IP: 2804:b40::/32
                          IP: 2804:182c::/32
                          IP: 2804:2250::/32
                          IP: 2804:39e8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16698043 (0xfecabb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:30:33 2023 GMT
            Not After : Jul  3 15:16:03 2025 GMT
        Subject: CN=0ebf4f954df853c586ff3cefa4d08c8fbcfd84c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:62:ed:83:bf:fd:78:51:78:ff:11:b8:9f:7d:
                    05:7e:a2:8c:06:77:ba:81:3f:af:14:c8:57:70:c1:
                    2a:83:24:11:4a:17:24:70:28:45:98:75:10:29:88:
                    3a:6b:7e:72:75:6a:c8:77:da:a7:1e:e4:2c:6f:dc:
                    bc:51:82:4c:ca:93:37:69:35:f1:5c:82:e5:46:2e:
                    e9:13:82:bd:48:13:bc:97:92:ae:24:8f:88:f3:78:
                    88:74:a5:4d:50:fc:c6:17:cb:77:a5:3d:9c:6a:6d:
                    f2:bf:4f:91:b8:98:92:58:03:03:37:03:dd:9b:8e:
                    a2:1e:b6:9e:98:97:75:19:6d:d3:1a:cb:d7:ef:b2:
                    97:a4:5c:93:e7:82:47:f1:e9:83:be:d5:12:22:94:
                    99:73:a9:31:83:a3:03:53:a6:99:cc:79:90:d0:41:
                    11:ed:7c:ba:54:56:f7:98:40:dd:fa:cf:f8:bf:a6:
                    af:20:00:04:38:25:44:4e:50:7b:85:7e:3c:9c:47:
                    85:88:90:99:6d:ca:c0:45:2f:90:1e:fb:3a:90:23:
                    74:b4:cd:7b:02:b6:a4:29:40:9f:fd:03:d7:dc:ca:
                    d0:1b:b2:e3:f1:12:a2:f0:39:43:4a:6f:b4:a8:e6:
                    9f:35:03:07:9f:1e:ca:bb:b8:7a:71:57:5c:d7:38:
                    7c:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:33:52:F4:23:06:2D:21:9F:6B:6D:68:D8:25:B1:22:70:BE:CD:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/302c2e6a-1cfb-4e84-a3e1-b2a7c29df70f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/302c2e6a-1cfb-4e84-a3e1-b2a7c29df70f/0ebf4f954df853c586ff3cefa4d08c8fbcfd84c7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.236.0/22
                  45.160.108.0/22
                  131.196.88.0/22
                  138.59.68.0/22
                  138.59.104.0/22
                  138.99.192.0/22
                  167.249.72.0/22
                  170.80.216.0/22
                  177.21.224.0/19
                  177.38.232.0/21
                  177.66.72.0/22
                  177.86.240.0/22
                  179.107.16.0/20
                  186.224.32.0/20
                  187.16.32.0/19
                  189.85.16.0/20
                  200.23.68.0/22
                  200.124.188.0/22
                  200.192.208.0/21
                  200.192.248.0/21
                  200.219.150.0-200.219.153.255
                  201.20.176.0/20
                IPv6:
                  2804:15c::/32
                  2804:b40::/32
                  2804:182c::/32
                  2804:2250::/32
                  2804:39e8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11835
                  52760
                  52845
                  262756
                  266058

    Signature Algorithm: sha256WithRSAEncryption
         85:fb:a1:11:bc:b6:c4:c6:ea:a0:65:99:ec:b9:82:9b:a2:fe:
         79:b1:8b:67:44:54:43:e1:93:b5:21:d4:d5:2a:91:a7:74:fd:
         e1:29:9a:8a:4d:89:7f:ab:ed:e8:62:d8:42:65:1f:e3:75:ff:
         29:c8:43:49:55:50:73:d5:68:72:08:7c:32:41:eb:6d:80:43:
         ef:e7:71:5c:40:52:c6:19:03:e6:21:19:cc:ad:fc:01:a6:bd:
         14:db:36:0e:e1:23:1a:0b:28:36:9a:5b:8e:02:cb:3c:6d:f3:
         56:1d:08:c3:d3:cf:50:8a:7f:35:2d:4d:eb:fb:e2:74:de:0d:
         38:43:19:5f:8c:d8:bd:96:48:3a:83:03:4d:a5:33:25:53:ef:
         86:f7:58:64:eb:32:7e:a6:15:c3:f8:da:74:20:43:4d:4d:14:
         84:85:ee:dc:59:eb:4a:6e:90:6e:f2:af:31:e7:c4:71:8e:9c:
         e1:2f:e0:0c:ae:f6:16:66:e4:95:a4:c8:a0:55:fc:8e:43:75:
         ea:9d:0c:ba:35:57:0f:ae:fb:cd:18:dd:63:b3:5c:54:2b:6b:
         30:9e:0a:8f:f1:07:a7:a2:d3:e4:4e:d0:f7:9d:b1:b8:f3:42:
         ff:2f:ac:e1:fb:52:11:b9:b3:c3:c6:56:a3:e5:f3:ca:a6:92:
         18:52:4e:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org