Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1034a2eadc759845b0599fd410ba1e4691a1ea9e.cer
File:                     1034a2eadc759845b0599fd410ba1e4691a1ea9e.cer (raw, json)
Hash identifier:          gXwb/Pn3L8skghdxaZMO0YOde6tlsamd4r+WAzX0Uhs=
Subject key identifier:   DC:65:2D:66:4B:B7:E8:A2:15:54:3E:D2:85:30:B3:3B:47:AC:11:6B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E32E3C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/1034a2eadc759845b0599fd410ba1e4691a1ea9e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:24 +0000
Certificate not after:    Fri 03 May 2024 17:54:07 +0000
Subordinate resources:    AS: 28066
                          IP: 138.185.112.0/22
                          IP: 179.63.200.0/21
                          IP: 190.122.192.0 -- 190.122.215.255
                          IP: 2803:1f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14888508 (0xe32e3c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:24 2017 GMT
            Not After : May  3 17:54:07 2024 GMT
        Subject: CN=1034a2eadc759845b0599fd410ba1e4691a1ea9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:de:19:9d:7b:92:fa:01:d7:36:d0:ae:cc:7c:
                    d8:52:7f:0b:a7:1b:48:d5:8c:77:20:0f:a1:35:a9:
                    2b:fe:21:af:f1:d6:45:a1:ed:c9:d6:d5:75:89:52:
                    4a:03:6e:58:6d:30:d6:de:62:bf:a3:1c:b8:1a:06:
                    b3:4a:76:7f:2a:6e:49:1b:3a:05:e3:97:0d:f8:9b:
                    d8:c0:61:95:1a:0d:a8:14:38:bc:84:12:53:28:5a:
                    83:04:a1:81:dd:91:93:db:64:a2:cd:df:a5:55:0a:
                    2e:a3:79:21:aa:85:bf:44:68:47:a4:6a:a7:10:27:
                    70:6f:b9:45:d8:1a:c3:29:3a:8c:24:f9:91:5b:26:
                    83:ec:7e:58:3b:88:2a:d1:85:8d:18:c4:d3:0f:15:
                    91:f9:a1:60:55:5a:7f:f2:bf:40:fa:02:3f:be:88:
                    59:70:3a:ad:a9:e5:58:fe:b6:f3:54:55:0e:97:8f:
                    6e:d9:f9:bf:94:3b:c6:d2:3b:70:ad:d6:87:2a:db:
                    96:30:25:07:66:9d:49:5e:08:5e:59:55:fa:76:fb:
                    e6:3b:15:39:46:35:3d:63:8c:eb:63:1d:7f:54:90:
                    01:40:dd:b9:e1:c2:06:0e:3a:5f:52:a5:c8:b4:59:
                    ee:f2:eb:18:6c:96:e5:2f:58:92:05:ad:80:86:49:
                    02:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:65:2D:66:4B:B7:E8:A2:15:54:3E:D2:85:30:B3:3B:47:AC:11:6B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f5b6b4bd-1ef5-449f-a77c-255917c3f589/1034a2eadc759845b0599fd410ba1e4691a1ea9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.112.0/22
                  179.63.200.0/21
                  190.122.192.0-190.122.215.255
                IPv6:
                  2803:1f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28066

    Signature Algorithm: sha256WithRSAEncryption
         29:0a:81:f5:46:8c:27:95:4e:2b:7a:90:db:94:3d:86:68:6a:
         e9:09:43:32:3c:d8:e2:96:ed:28:aa:35:ce:06:8a:09:af:38:
         1e:61:92:ab:be:22:b1:f1:83:30:e3:e4:80:60:9f:69:e7:a6:
         ac:33:c7:23:83:4c:4c:66:fe:83:b0:1b:77:0f:c5:54:b1:2b:
         be:93:cb:60:32:b0:49:e7:82:2b:24:9c:2a:37:6a:fb:02:41:
         f8:1a:d4:86:a9:dd:0e:28:45:cd:a8:b5:6b:71:5b:5d:5b:b1:
         9c:4b:c6:02:2f:38:6b:24:b7:31:cc:7c:16:06:6f:ae:b7:3d:
         bb:7c:71:c4:4a:c8:b1:a6:3f:c2:df:8d:81:bc:18:f0:18:f7:
         ca:f4:6e:73:ab:60:08:c1:65:6a:52:72:02:e9:55:7f:78:cc:
         bf:be:39:b2:cb:f0:76:a0:86:17:e4:ea:49:3c:02:53:a1:97:
         07:59:c2:27:0e:1f:35:88:41:0f:4b:a2:14:0b:07:a3:82:a1:
         38:82:9f:d2:8a:51:f8:9f:8e:c7:b0:9e:8e:61:25:34:4b:c9:
         ad:da:60:30:7f:e6:3f:30:3a:d0:b3:af:3c:e1:4f:3d:da:08:
         29:9e:70:e5:ab:46:3f:ca:6b:c0:0f:d6:d2:d5:e2:34:ff:cf:
         15:dd:9f:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:32 2024 by rpki-client on console-fra.rpki-client.org