Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer
File:                     108230d2c0c6803dc49b4b2c6dece1c0d627941b.cer (raw, json)
Hash identifier:          m12T6Z+WsKeMknlFqMDSYHp+lgNWSx4wJvA2KVuseYI=
Subject key identifier:   F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCCA38
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/108230d2c0c6803dc49b4b2c6dece1c0d627941b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Aug 2021 17:32:35 +0000
Certificate not after:    Thu 22 Feb 2024 18:06:11 +0000
Subordinate resources:    AS: 263821
                          IP: 138.59.4.0/22
                          IP: 138.219.120.0/22
                          IP: 161.0.68.0/22
                          IP: 168.181.52.0/22
                          IP: 170.244.144.0/22
                          IP: 177.234.136.0/21
                          IP: 200.0.60.0/23
                          IP: 200.71.124.0/22
                          IP: 200.189.44.0/22
                          IP: 2803:e680::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14469688 (0xdcca38)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 31 17:32:35 2021 GMT
            Not After : Feb 22 18:06:11 2024 GMT
        Subject: CN=108230d2c0c6803dc49b4b2c6dece1c0d627941b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:3d:44:8f:9a:34:a3:e4:f0:40:93:72:5c:c5:
                    ec:77:d4:5e:72:4b:01:ac:a3:f7:cd:91:ce:a9:cf:
                    39:84:7b:03:9b:49:c0:37:bc:47:3a:98:9d:25:b1:
                    c3:36:69:95:50:c8:75:c6:da:39:57:0e:24:a7:cd:
                    68:bd:02:47:a3:29:03:0f:4a:49:09:8d:24:32:b4:
                    b8:aa:9e:e5:bf:00:f1:2f:97:79:10:e8:7d:09:9c:
                    1b:b8:0e:79:6b:f5:e5:bc:fd:74:8b:0c:e3:b5:79:
                    d9:41:00:cc:1c:f5:e1:ae:dd:6b:2f:46:13:db:2b:
                    f0:7f:e4:82:35:22:cb:37:41:03:d6:9d:c5:2f:b8:
                    07:8e:2a:c3:97:05:86:bb:d0:34:8d:1e:61:8a:74:
                    da:e3:e8:3f:5d:c9:1d:1e:d4:dc:30:19:87:be:90:
                    4f:6d:35:63:5b:ff:a2:1e:2c:61:75:5a:1c:7e:eb:
                    b5:7e:cf:40:a6:7e:b0:29:4c:64:44:65:a7:06:2c:
                    c7:18:68:04:0c:4b:ea:8b:91:5d:5e:73:3d:59:87:
                    b4:39:ea:aa:42:e6:a2:ef:35:dd:b7:6e:1e:d2:6d:
                    4b:58:4a:c1:c9:6f:75:3b:67:79:b7:5c:87:b4:e8:
                    1b:4b:b1:4c:12:11:11:5e:73:e1:d3:89:d8:20:16:
                    66:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:CD:09:4C:F7:EB:2F:97:FD:30:FB:92:37:0C:D6:93:7A:B4:8B:6E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7ff7a6c7-f889-44e7-8c59-11dbe0a2440f/108230d2c0c6803dc49b4b2c6dece1c0d627941b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.4.0/22
                  138.219.120.0/22
                  161.0.68.0/22
                  168.181.52.0/22
                  170.244.144.0/22
                  177.234.136.0/21
                  200.0.60.0/23
                  200.71.124.0/22
                  200.189.44.0/22
                IPv6:
                  2803:e680::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263821

    Signature Algorithm: sha256WithRSAEncryption
         88:be:af:37:15:39:80:35:70:d1:4b:21:dd:b5:0b:ae:c7:bd:
         e2:cc:f3:16:50:20:28:62:49:5e:3f:b2:7d:4c:a2:d1:dd:2d:
         cd:0b:d5:8b:14:b7:2d:82:fc:bd:e0:16:43:c8:d0:4a:70:70:
         53:3c:9d:21:1f:e7:34:12:4e:32:b8:ce:d1:4f:d6:5e:9f:4f:
         3a:24:1e:8a:9b:eb:24:f8:87:8f:6f:b7:95:fb:4f:23:3c:b1:
         28:a3:ee:7d:86:d4:11:5c:7c:7d:8d:fd:13:1a:a8:c2:d3:86:
         3f:67:ec:5a:0d:61:2a:d6:90:24:62:55:10:27:fc:8f:72:f8:
         02:2c:a9:12:4b:1e:79:c1:42:51:10:8c:c4:cd:84:3b:cb:56:
         a9:31:68:0c:d3:92:f3:7d:c4:45:97:81:00:95:5f:cc:d3:72:
         94:cb:7e:5a:27:1c:c6:d4:92:a5:fb:11:25:05:6f:5b:80:52:
         03:8c:5a:ca:6e:77:5f:b2:1c:4a:86:84:72:44:c0:db:57:06:
         7a:5b:fd:55:f7:85:95:fa:ff:c5:32:2a:01:5a:cd:a4:f0:57:
         69:ca:9c:eb:8e:ec:99:5e:b0:37:de:d8:64:56:c1:7a:85:79:
         b3:44:e5:b6:21:d2:a9:16:f5:d5:4c:32:ea:8d:2b:84:3c:53:
         f7:87:4f:cd
-----BEGIN CERTIFICATE-----
MIIGCjCCBPKgAwIBAgIEANzKODANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMDgzMTE3MzIzNVoXDTI0MDIyMjE4MDYx
MVowMzExMC8GA1UEAxMoMTA4MjMwZDJjMGM2ODAzZGM0OWI0YjJjNmRlY2UxYzBk
NjI3OTQxYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKw9RI+aNKPk
8ECTclzF7HfUXnJLAayj982RzqnPOYR7A5tJwDe8RzqYnSWxwzZplVDIdcbaOVcO
JKfNaL0CR6MpAw9KSQmNJDK0uKqe5b8A8S+XeRDofQmcG7gOeWv15bz9dIsM47V5
2UEAzBz14a7day9GE9sr8H/kgjUiyzdBA9adxS+4B44qw5cFhrvQNI0eYYp02uPo
P13JHR7U3DAZh76QT201Y1v/oh4sYXVaHH7rtX7PQKZ+sClMZERlpwYsxxhoBAxL
6ouRXV5zPVmHtDnqqkLmou813bduHtJtS1hKwclvdTtnebdch7ToG0uxTBIREV5z
4dOJ2CAWZo0CAwEAAaOCAzkwggM1MB0GA1UdDgQWBBTzzQlM9+svl/0w+5I3DNaT
erSLbjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83ZmY3YTZjNy1mODg5
LTQ0ZTctOGM1OS0xMWRiZTBhMjQ0MGYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN2ZmN2E2YzctZjg4OS00
NGU3LThjNTktMTFkYmUwYTI0NDBmLzEwODIzMGQyYzBjNjgwM2RjNDliNGIyYzZk
ZWNlMWMwZDYyNzk0MWIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBe
BggrBgEFBQcBBwEB/wRPME0wPAQCAAEwNgMEAoo7BAMEAorbeAMEAqEARAMEAqi1
NAMEAqr0kAMEA7HqiAMEAcgAPAMEAshHfAMEAsi9LDANBAIAAjAHAwUAKAPmgDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBo0wDQYJKoZIhvcNAQELBQADggEBAIi+
rzcVOYA1cNFLId21C67HveLM8xZQIChiSV4/sn1MotHdLc0L1YsUty2C/L3gFkPI
0EpwcFM8nSEf5zQSTjK4ztFP1l6fTzokHoqb6yT4h49vt5X7TyM8sSij7n2G1BFc
fH2N/RMaqMLThj9n7FoNYSrWkCRiVRAn/I9y+AIsqRJLHnnBQlEQjMTNhDvLVqkx
aAzTkvN9xEWXgQCVX8zTcpTLflonHMbUkqX7ESUFb1uAUgOMWspud1+yHEqGhHJE
wNtXBnpb/VX3hZX6/8UyKgFazaTwV2nKnOuO7JlesDfe2GRWwXqFebNE5bYh0qkW
9dVMMuqNK4Q8U/eHT80=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org