Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14e8df5502cd05c8d20e95241b1332fb5b1fa842.cer
File:                     14e8df5502cd05c8d20e95241b1332fb5b1fa842.cer (raw, json)
Hash identifier:          3nEbo0rEl5zKRUYOfb3JHTpXlHVhMxRx0Anyf3TQpao=
Subject key identifier:   E9:BB:B8:DD:4E:2E:56:EF:AD:C4:9A:52:5B:FF:80:20:58:BE:F4:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8712A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8b4f758c-1aff-4657-b852-fa80c93bb1ce/14e8df5502cd05c8d20e95241b1332fb5b1fa842.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8b4f758c-1aff-4657-b852-fa80c93bb1ce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 18:42:33 +0000
Certificate not after:    Tue 17 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 4230
                          IP: 179.68.0.0/16
                          IP: 179.136.0.0/13
                          IP: 179.237.0.0 -- 179.237.25.255
                          IP: 186.249.160.0/20
                          IP: 187.28.0.0 -- 187.30.255.255
                          IP: 187.43.0.0/16
                          IP: 189.2.0.0/15
                          IP: 189.16.0.0/15
                          IP: 189.22.0.0/15
                          IP: 189.42.0.0/15
                          IP: 189.52.0.0/15
                          IP: 189.86.0.0 -- 189.88.255.255
                          IP: 191.38.0.0/15
                          IP: 191.56.0.0/13
                          IP: 200.10.159.0/24
                          IP: 200.139.192.0/18
                          IP: 200.166.0.0/15
                          IP: 200.172.0.0 -- 200.174.255.255
                          IP: 200.178.0.0/15
                          IP: 200.182.0.0/15
                          IP: 200.190.0.0 -- 200.192.63.255
                          IP: 200.200.0.0/16
                          IP: 200.208.0.0 -- 200.214.255.255
                          IP: 200.227.0.0 -- 200.228.255.255
                          IP: 200.230.0.0/15
                          IP: 200.241.0.0 -- 200.255.255.255
                          IP: 201.30.0.0/15
                          IP: 201.38.0.0/15
                          IP: 201.44.0.0/15
                          IP: 201.56.0.0/15
                          IP: 201.64.0.0/15
                          IP: 201.72.0.0/15
                          IP: 201.90.0.0/16
                          IP: 2804:a8::/32
                          IP: 2804:17c::/32
                          IP: 2804:1388::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15233322 (0xe8712a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 18:42:33 2023 GMT
            Not After : Sep 17 15:00:00 2024 GMT
        Subject: CN=14e8df5502cd05c8d20e95241b1332fb5b1fa842
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:7f:b0:2e:a4:0f:d2:31:6a:d0:1d:57:f0:c7:
                    0c:ae:56:46:1a:cc:56:1f:8c:32:7a:a3:28:56:b7:
                    56:d6:9a:33:cb:a3:f6:65:fe:c0:b5:37:ee:1b:14:
                    43:c0:6a:68:a3:84:c0:a9:53:65:e7:5f:e2:7c:89:
                    de:6f:24:c1:cf:20:36:8c:27:60:8b:26:d2:81:da:
                    4b:f2:02:51:58:6f:9b:d7:48:76:67:35:fd:df:d2:
                    fd:5f:51:0a:16:6c:71:dd:4c:f6:88:97:01:e4:0f:
                    c9:0a:1f:88:c2:77:94:e4:8f:6d:af:28:fc:99:16:
                    eb:52:57:00:da:86:bc:7c:fb:ff:c8:e8:aa:5c:93:
                    ad:1d:91:39:2f:76:17:22:b5:03:75:ed:28:71:84:
                    8b:28:ea:a0:81:f4:63:95:25:24:d6:7e:80:09:b7:
                    81:99:d6:4c:62:a7:cc:61:9c:1a:70:00:74:03:fb:
                    db:f2:06:42:b9:54:93:4d:01:12:a1:ae:24:03:0e:
                    89:57:b9:18:5f:67:d0:e0:70:8f:6a:f2:61:09:ef:
                    77:47:ce:4e:e7:9b:98:1b:cb:16:1d:20:88:65:63:
                    6d:d4:76:a8:31:05:ca:c1:15:20:2f:bc:6a:e7:3a:
                    22:0e:be:3b:b3:ca:5e:f3:6f:53:d0:7a:07:2a:63:
                    cb:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:BB:B8:DD:4E:2E:56:EF:AD:C4:9A:52:5B:FF:80:20:58:BE:F4:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8b4f758c-1aff-4657-b852-fa80c93bb1ce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8b4f758c-1aff-4657-b852-fa80c93bb1ce/14e8df5502cd05c8d20e95241b1332fb5b1fa842.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.68.0.0/16
                  179.136.0.0/13
                  179.237.0.0-179.237.25.255
                  186.249.160.0/20
                  187.28.0.0-187.30.255.255
                  187.43.0.0/16
                  189.2.0.0/15
                  189.16.0.0/15
                  189.22.0.0/15
                  189.42.0.0/15
                  189.52.0.0/15
                  189.86.0.0-189.88.255.255
                  191.38.0.0/15
                  191.56.0.0/13
                  200.10.159.0/24
                  200.139.192.0/18
                  200.166.0.0/15
                  200.172.0.0-200.174.255.255
                  200.178.0.0/15
                  200.182.0.0/15
                  200.190.0.0-200.192.63.255
                  200.200.0.0/16
                  200.208.0.0-200.214.255.255
                  200.227.0.0-200.228.255.255
                  200.230.0.0/15
                  200.241.0.0-200.255.255.255
                  201.30.0.0/15
                  201.38.0.0/15
                  201.44.0.0/15
                  201.56.0.0/15
                  201.64.0.0/15
                  201.72.0.0/15
                  201.90.0.0/16
                IPv6:
                  2804:a8::/32
                  2804:17c::/32
                  2804:1388::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4230

    Signature Algorithm: sha256WithRSAEncryption
         05:bf:82:4c:e1:7b:da:47:6a:9d:96:86:af:f5:13:fb:8a:ec:
         52:b0:37:d4:1d:30:0a:fd:d1:c7:e6:a7:0f:ab:40:54:5d:db:
         6f:ec:4b:cc:9b:c1:26:6c:09:b5:b4:13:6c:42:b2:ad:bc:cd:
         4e:89:51:11:13:a7:5d:b7:ad:ff:2d:73:ab:32:6e:db:c5:14:
         f8:8a:55:e1:0d:0d:0a:39:0c:db:91:cc:c5:08:cc:04:6b:e4:
         72:06:4c:53:f3:be:de:5a:bd:3d:b4:a2:1a:0a:de:92:86:f2:
         a5:e1:16:4a:d1:71:1f:2e:ac:89:ab:bb:a4:ae:dd:af:61:05:
         b9:28:70:68:5d:7e:7f:65:fd:d4:4f:fc:c5:a7:41:4a:a1:b2:
         78:d8:bb:4b:80:2a:79:3e:1c:95:c8:ec:08:fe:fe:1a:ea:13:
         da:c6:fb:60:5c:cc:ec:2b:d7:98:74:42:eb:b9:1d:24:a2:eb:
         7f:a4:8b:18:ab:08:60:ef:cd:1d:2e:5b:78:6a:e8:3c:05:72:
         54:b3:98:aa:b8:43:51:fe:e5:7f:95:f4:7d:20:d7:85:9b:e6:
         bb:11:6e:5d:a6:76:86:0c:82:54:9e:26:64:05:64:de:79:b9:
         35:b2:c6:f9:bb:6d:0e:80:b3:64:ab:03:9d:8b:3f:1a:39:11:
         f0:49:c6:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:22 2024 by rpki-client on console-ams.rpki-client.org