Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14ca70169ff8886e815bd50416068dfdf2827fa6.cer
File:                     14ca70169ff8886e815bd50416068dfdf2827fa6.cer (raw, json)
Hash identifier:          0RU7duhTlsvCgYjA/mnWOwTNqn6ZRp2Ax+mkd4sSQf0=
Subject key identifier:   47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3F6BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/14ca70169ff8886e815bd50416068dfdf2827fa6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:14 +0000
Certificate not after:    Wed 04 Sep 2024 17:25:28 +0000
Subordinate resources:    AS: 27919
                          IP: 170.238.0.0/22
                          IP: 190.52.192.0/20
                          IP: 200.107.248.0/21
                          IP: 2803:b4c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15988414 (0xf3f6be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:14 2017 GMT
            Not After : Sep  4 17:25:28 2024 GMT
        Subject: CN=14ca70169ff8886e815bd50416068dfdf2827fa6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:e8:d6:13:a6:6a:76:ee:04:54:5d:42:0e:61:
                    3d:16:18:12:dc:5e:ae:76:e1:ac:9d:52:84:6b:b1:
                    24:73:16:67:28:c2:1d:6c:00:5f:20:e5:72:3f:65:
                    9d:01:4d:5f:e8:f8:e5:e1:6f:0b:e6:e5:5b:15:ef:
                    57:a8:9b:84:cd:43:84:10:97:e2:bc:33:ed:e2:63:
                    2b:7e:ef:67:35:2b:28:ac:1a:b8:b8:0d:83:47:76:
                    a2:8d:ba:79:d3:aa:3a:ba:49:c8:41:ad:be:a9:76:
                    3e:64:84:57:ff:cc:83:73:7c:ab:e7:04:6b:3f:48:
                    42:fc:f5:3f:87:9b:62:f6:a2:a1:9d:cb:b1:c0:f9:
                    52:fa:da:d1:7a:98:c0:4b:dc:80:42:76:21:21:8b:
                    fe:8d:8d:63:a1:56:94:46:2e:91:d6:82:d8:c1:03:
                    f0:61:c4:da:43:03:9f:44:f5:84:54:cd:eb:49:0e:
                    07:f3:14:98:f5:11:b9:a7:7e:a7:d5:07:d0:c2:c7:
                    67:eb:ff:67:53:7b:ae:45:64:3d:1d:dc:21:70:6f:
                    a1:57:8e:f3:13:a2:b8:39:c1:74:b3:51:1b:b9:53:
                    51:6f:7a:3d:5d:80:52:7d:e1:07:2b:1d:1f:88:26:
                    1e:1c:e8:a8:c6:c6:92:80:af:d9:cd:95:6c:20:61:
                    4d:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:75:C8:0B:31:4F:EB:1D:0E:5B:F6:2F:C2:44:8A:2F:33:F4:5A:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72bbf07a-f618-48a8-9872-49c924d9b6a5/14ca70169ff8886e815bd50416068dfdf2827fa6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.0.0/22
                  190.52.192.0/20
                  200.107.248.0/21
                IPv6:
                  2803:b4c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27919

    Signature Algorithm: sha256WithRSAEncryption
         30:a5:41:a0:cf:cf:14:62:bf:5d:df:be:44:c9:6e:55:e0:80:
         05:c1:94:44:38:52:28:71:4b:04:7f:0f:25:63:1b:0b:23:3c:
         db:ed:27:87:c6:87:f4:0d:af:cb:d0:c8:3a:f8:a7:9e:c7:a6:
         76:ac:6e:28:bd:11:7f:f2:7d:1c:cd:07:d3:4a:9f:79:2b:a4:
         be:b5:ee:d7:22:85:fa:f9:77:2f:0d:e9:dc:0a:b2:43:33:c4:
         52:4a:45:27:d0:b7:b1:e8:74:fe:a7:8a:21:7f:fa:39:7a:58:
         1d:0e:5f:b2:bc:4e:30:87:d2:a0:f8:a4:36:3b:75:18:b9:f8:
         dd:2e:88:bd:c4:02:96:88:25:97:ca:10:b0:0a:fa:81:9a:47:
         18:01:b4:72:45:5d:a4:ce:96:61:55:f0:96:b5:a2:c3:0b:1d:
         e2:fd:da:ce:0f:98:8d:5b:9e:f5:a8:b2:cd:07:f4:15:f6:76:
         f7:4b:17:f1:bb:e0:22:f4:73:04:03:91:8a:c8:80:d3:8e:aa:
         e2:6a:6d:42:24:54:2c:c8:61:40:87:62:92:61:8e:f7:4f:45:
         c5:34:e2:b1:82:d5:7e:ba:c9:87:f1:fe:e2:c1:fa:c4:6d:6e:
         0f:28:38:ff:cf:b9:4c:c3:32:e3:24:56:6d:28:d7:df:49:c0:
         0b:9b:fd:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:22 2024 by rpki-client on console-ams.rpki-client.org