Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0fad4a15350b39e4e1d5c65aa5b2937ce5983841.cer
File:                     0fad4a15350b39e4e1d5c65aa5b2937ce5983841.cer (raw, json)
Hash identifier:          k8AA8pi6IoUucdwcWtbx/0mHOr5MjBNYLxpExVEh+BI=
Subject key identifier:   B8:4B:77:02:09:D5:13:91:CF:7C:07:B7:09:A7:2C:E7:94:B8:CC:21
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF024C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aeb8dc53-ae39-4526-931e-aa5afe755ac9/0fad4a15350b39e4e1d5c65aa5b2937ce5983841.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aeb8dc53-ae39-4526-931e-aa5afe755ac9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 18:10:39 +0000
Certificate not after:    Sat 19 Apr 2025 14:08:49 +0000
Subordinate resources:    AS: 269073
                          IP: 45.179.36.0/22
                          IP: 138.94.124.0/22
                          IP: 138.97.120.0/22
                          IP: 168.121.132.0/22
                          IP: 187.86.192.0 -- 187.86.194.255
                          IP: 187.110.144.0/21
                          IP: 201.150.144.0/22
                          IP: 207.248.28.0/22
                          IP: 2804:5f0c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15663692 (0xef024c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 18:10:39 2023 GMT
            Not After : Apr 19 14:08:49 2025 GMT
        Subject: CN=0fad4a15350b39e4e1d5c65aa5b2937ce5983841
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:13:2c:91:42:a1:25:58:f8:29:e2:8c:e4:92:
                    14:38:c4:87:1f:03:d1:69:e0:93:de:a8:81:21:9b:
                    23:92:51:ba:b7:38:a4:6f:62:db:31:f2:bd:ee:df:
                    7a:e3:9d:8f:10:60:a2:bb:48:22:11:f7:aa:ac:d1:
                    41:71:a8:62:1d:ad:c2:86:a8:bd:8f:5d:fd:38:34:
                    80:ec:6a:20:1f:88:48:36:86:aa:09:63:a4:cd:1f:
                    f8:61:00:38:91:69:45:d4:43:a6:f7:70:f5:db:9e:
                    2e:45:7d:9f:ab:9d:53:c8:80:54:63:40:11:01:95:
                    d1:f1:11:ba:2c:37:e6:f6:20:ac:c5:09:02:c1:65:
                    6a:c3:76:9b:d5:12:18:98:09:a6:83:f5:fc:e0:37:
                    f4:f7:52:76:0b:3a:7a:63:d2:fa:84:27:9e:e8:46:
                    25:0c:e3:12:58:e2:eb:0f:02:b6:e7:27:07:36:d8:
                    8f:19:f9:31:04:33:e3:c6:65:62:37:28:30:12:3e:
                    8a:65:c6:07:82:67:29:ac:b0:d0:e5:0d:53:73:d9:
                    1d:0e:be:72:1a:c5:a6:ff:01:76:10:52:81:42:0e:
                    ba:e9:3b:4b:59:30:3e:f0:ea:fc:6e:84:9d:6f:aa:
                    c7:9a:ac:14:58:ca:e3:fc:a1:54:d3:b4:ad:e8:52:
                    21:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:4B:77:02:09:D5:13:91:CF:7C:07:B7:09:A7:2C:E7:94:B8:CC:21
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aeb8dc53-ae39-4526-931e-aa5afe755ac9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aeb8dc53-ae39-4526-931e-aa5afe755ac9/0fad4a15350b39e4e1d5c65aa5b2937ce5983841.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.36.0/22
                  138.94.124.0/22
                  138.97.120.0/22
                  168.121.132.0/22
                  187.86.192.0-187.86.194.255
                  187.110.144.0/21
                  201.150.144.0/22
                  207.248.28.0/22
                IPv6:
                  2804:5f0c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269073

    Signature Algorithm: sha256WithRSAEncryption
         40:16:a0:9f:df:b7:81:e8:08:19:53:d9:69:19:b9:10:65:f1:
         88:93:cf:59:0a:ad:d2:ec:42:ab:27:81:0e:40:05:47:18:7f:
         4a:79:dd:b7:9f:ce:91:d0:9a:b7:a8:08:a3:7b:ac:aa:21:b9:
         8b:e8:db:4b:d1:05:9d:c4:39:00:41:7e:23:8f:e6:ac:11:a9:
         e3:5f:5f:76:aa:69:0d:81:c6:14:ef:49:ce:bb:bf:fb:98:67:
         f6:d3:de:10:8c:24:ff:2c:c9:d2:35:a6:2e:18:a1:44:b7:7e:
         97:45:d9:f3:81:70:fe:b6:33:23:71:22:97:29:0a:9c:39:a1:
         ea:07:f9:88:46:3a:74:3c:db:52:22:1a:a7:bd:ec:84:9a:46:
         7b:6f:cf:83:f1:e3:8c:b0:a7:07:a7:00:55:87:a8:2b:28:7c:
         fd:8a:f3:89:33:1c:c3:25:43:e0:91:a8:4f:83:ce:e0:b9:15:
         2a:a4:99:5e:65:00:0e:f0:5c:03:c2:f7:7a:55:1d:ee:9e:bd:
         61:25:18:be:e0:29:6e:cb:79:0f:6a:2a:16:8d:e5:26:c7:03:
         d0:5e:4d:7f:a8:5e:52:d0:09:6a:bb:6e:36:84:91:74:ff:7f:
         f0:54:55:ec:e9:14:5b:df:51:61:06:66:24:ef:a7:f1:0c:83:
         16:55:73:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org