Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer
File:                     1159fdc4276fa3bfc64df717e4ca0a75249cf188.cer (raw, json)
Hash identifier:          1Fe/zpVb/jUAiZg/ttbrkC2d3O8tKQPXwoB5F5f5AcQ=
Subject key identifier:   2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E38F53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:54 +0000
Certificate not after:    Sun 05 May 2024 15:00:00 +0000
Subordinate resources:    AS: 7997
                          AS: 8065
                          AS: 13489
                          AS: 18869
                          AS: 27798
                          AS: 27805
                          IP: 168.0.244.0/22
                          IP: 181.128.0.0/12
                          IP: 186.0.0.0/17
                          IP: 190.0.0.0/18
                          IP: 190.7.128.0/19
                          IP: 190.9.192.0/18
                          IP: 190.28.0.0/15
                          IP: 190.70.0.0/15
                          IP: 190.128.0.0/17
                          IP: 190.151.192.0/18
                          IP: 190.165.0.0/16
                          IP: 190.240.0.0/16
                          IP: 190.248.0.0/14
                          IP: 191.98.0.0/17
                          IP: 200.6.160.0/19
                          IP: 200.13.224.0/19
                          IP: 200.24.32.0/19
                          IP: 200.30.64.0/19
                          IP: 200.31.192.0/19
                          IP: 200.58.192.0 -- 200.58.239.255
                          IP: 200.75.64.0/19
                          IP: 200.114.0.0/18
                          IP: 200.116.0.0/16
                          IP: 200.122.192.0/18
                          IP: 201.184.0.0/15
                          IP: 201.190.64.0/18
                          IP: 201.232.0.0/15
                          IP: 201.236.192.0/18
                          IP: 2800:e0::/28
                          IP: 2803:d80::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14913363 (0xe38f53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:54 2017 GMT
            Not After : May  5 15:00:00 2024 GMT
        Subject: CN=1159fdc4276fa3bfc64df717e4ca0a75249cf188
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:13:fb:c1:02:18:68:b7:9f:c2:91:40:2b:c8:
                    ea:b7:2a:82:45:68:21:21:fa:4e:dd:6f:7e:7a:1f:
                    d3:dd:00:b5:51:e3:55:23:3d:ad:67:c1:7a:3a:01:
                    84:d3:6f:46:ee:6f:be:a9:dc:e4:71:f0:93:20:1e:
                    69:2c:44:8a:41:85:c6:e1:79:21:83:ce:1f:a4:50:
                    be:58:15:eb:a5:77:0f:ff:15:2f:3b:51:6c:cb:95:
                    3e:08:bf:2e:7c:18:92:44:b3:ea:64:c9:7c:d7:6a:
                    ec:6c:7b:fc:f9:42:ca:12:65:2d:75:08:af:62:dd:
                    9a:fc:40:dc:d5:a1:b0:c8:7d:da:b5:b0:8d:bf:3f:
                    90:93:d2:58:02:73:d6:ed:f7:a5:90:71:44:8d:ea:
                    1a:7f:a8:0c:0b:56:38:60:2d:19:a6:c1:06:28:d0:
                    42:38:2d:18:8f:4e:a3:53:aa:f8:0f:ea:ad:28:51:
                    d6:c9:b5:20:52:64:fc:ab:2f:d7:67:4a:1c:2c:af:
                    cd:30:c7:cb:9b:53:9e:84:db:de:c9:57:d4:67:d2:
                    a8:a4:38:88:85:57:43:a2:00:c8:1b:6e:df:84:13:
                    15:0c:d5:ff:15:08:76:07:ea:9e:85:08:93:03:32:
                    c1:23:cb:ee:7d:d9:4b:02:5f:61:f1:c5:d2:55:67:
                    e7:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:D3:D3:7E:8A:EA:10:A8:12:4B:D1:A2:E2:4C:0A:CC:C3:E1:A3:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1cd00567-4106-40ca-bbc1-1b069b60a78e/1159fdc4276fa3bfc64df717e4ca0a75249cf188.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.244.0/22
                  181.128.0.0/12
                  186.0.0.0/17
                  190.0.0.0/18
                  190.7.128.0/19
                  190.9.192.0/18
                  190.28.0.0/15
                  190.70.0.0/15
                  190.128.0.0/17
                  190.151.192.0/18
                  190.165.0.0/16
                  190.240.0.0/16
                  190.248.0.0/14
                  191.98.0.0/17
                  200.6.160.0/19
                  200.13.224.0/19
                  200.24.32.0/19
                  200.30.64.0/19
                  200.31.192.0/19
                  200.58.192.0-200.58.239.255
                  200.75.64.0/19
                  200.114.0.0/18
                  200.116.0.0/16
                  200.122.192.0/18
                  201.184.0.0/15
                  201.190.64.0/18
                  201.232.0.0/15
                  201.236.192.0/18
                IPv6:
                  2800:e0::/28
                  2803:d80::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7997
                  8065
                  13489
                  18869
                  27798
                  27805

    Signature Algorithm: sha256WithRSAEncryption
         ac:2a:48:23:2c:c6:46:d0:65:ed:c2:c3:df:b6:54:34:ff:73:
         b3:f2:06:dd:c5:d5:21:04:4a:5a:3e:52:32:7f:a8:10:d9:45:
         5b:75:89:a3:90:20:77:80:7d:83:3a:b1:65:1f:a9:bd:f4:1c:
         2d:b9:e0:0e:d2:e8:7f:41:94:f9:5d:89:81:b9:3b:90:c6:c8:
         a4:cf:55:55:9b:b1:51:75:98:b9:08:7d:f1:22:37:4e:cd:86:
         e1:75:71:5b:b9:71:55:7a:08:70:10:7e:d1:4d:e1:1b:ef:78:
         76:43:b5:15:d6:7d:18:87:96:a9:87:45:a5:f1:2a:93:48:55:
         d9:c2:3f:b2:cc:51:c9:a5:ad:67:14:88:16:75:43:e3:ad:5b:
         bd:5e:26:33:10:e5:01:79:eb:6c:b9:e0:19:fb:42:fe:78:a8:
         1f:99:22:e1:8f:3a:a0:c6:05:e3:93:02:3c:ba:d9:c3:da:66:
         4a:31:75:86:57:1f:ba:35:c7:da:9e:fd:02:2a:05:71:3a:5d:
         a1:d4:cb:b0:49:45:44:76:5b:13:bc:5e:d4:c1:2b:d3:0a:10:
         b7:8b:b4:5e:5a:7c:60:ae:e2:8c:ba:39:e4:b5:74:6f:01:37:
         21:bf:7e:24:cd:be:7c:88:e4:91:76:7d:9f:54:6a:9d:84:64:
         15:67:89:11
-----BEGIN CERTIFICATE-----
MIIGmjCCBYKgAwIBAgIEAOOPUzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NFoXDTI0MDUwNTE1MDAw
MFowMzExMC8GA1UEAxMoMTE1OWZkYzQyNzZmYTNiZmM2NGRmNzE3ZTRjYTBhNzUy
NDljZjE4ODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAM4T+8ECGGi3
n8KRQCvI6rcqgkVoISH6Tt1vfnof090AtVHjVSM9rWfBejoBhNNvRu5vvqnc5HHw
kyAeaSxEikGFxuF5IYPOH6RQvlgV66V3D/8VLztRbMuVPgi/LnwYkkSz6mTJfNdq
7Gx7/PlCyhJlLXUIr2LdmvxA3NWhsMh92rWwjb8/kJPSWAJz1u33pZBxRI3qGn+o
DAtWOGAtGabBBijQQjgtGI9Oo1Oq+A/qrShR1sm1IFJk/Ksv12dKHCyvzTDHy5tT
noTb3slX1GfSqKQ4iIVXQ6IAyBtu34QTFQzV/xUIdgfqnoUIkwMywSPL7n3ZSwJf
YfHF0lVn59MCAwEAAaOCA8kwggPFMB0GA1UdDgQWBBQs09N+iuoQqBJL0aLiTArM
w+Gj0zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xY2QwMDU2Ny00MTA2
LTQwY2EtYmJjMS0xYjA2OWI2MGE3OGUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWNkMDA1NjctNDEwNi00
MGNhLWJiYzEtMWIwNjliNjBhNzhlLzExNTlmZGM0Mjc2ZmEzYmZjNjRkZjcxN2U0
Y2EwYTc1MjQ5Y2YxODgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
2gYIKwYBBQUHAQcBAf8Egcowgccwga4EAgABMIGnAwQCqAD0AwMEtYADBAe6AAAD
BAa+AAADBAW+B4ADBAa+CcADAwG+HAMDAb5GAwQHvoAAAwQGvpfAAwMAvqUDAwC+
8AMDAr74AwQHv2IAAwQFyAagAwQFyA3gAwQFyBggAwQFyB5AAwQFyB/AMAwDBAbI
OsADBATIOuADBAXIS0ADBAbIcgADAwDIdAMEBsh6wAMDAcm4AwQGyb5AAwMByegD
BAbJ7MAwFAQCAAIwDgMFBCgAAOADBQMoAw2AMC0GCCsGAQUFBwEIAQH/BB4wHKAa
MBgCAh89AgIfgQICNLECAkm1AgJslgICbJ0wDQYJKoZIhvcNAQELBQADggEBAKwq
SCMsxkbQZe3Cw9+2VDT/c7PyBt3F1SEESlo+UjJ/qBDZRVt1iaOQIHeAfYM6sWUf
qb30HC254A7S6H9BlPldiYG5O5DGyKTPVVWbsVF1mLkIffEiN07NhuF1cVu5cVV6
CHAQftFN4RvveHZDtRXWfRiHlqmHRaXxKpNIVdnCP7LMUcmlrWcUiBZ1Q+OtW71e
JjMQ5QF562y54Bn7Qv54qB+ZIuGPOqDGBeOTAjy62cPaZkoxdYZXH7o1x9qe/QIq
BXE6XaHUy7BJRUR2WxO8XtTBK9MKELeLtF5afGCu4oy6OeS1dG8BNyG/fiTNvnyI
5JF2fZ9Uap2EZBVniRE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org