Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/151142b742bbc55ba299a3bbb92ca084a609e3f9.cer
File:                     151142b742bbc55ba299a3bbb92ca084a609e3f9.cer (raw, json)
Hash identifier:          Z1EMAzN6vdqytrI5meptlhCzy/VmD33ncp6cnHJ6pYc=
Subject key identifier:   2E:7A:8E:C7:7D:D4:6C:0B:C4:69:36:51:01:36:54:3C:CD:9C:1C:A6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010082B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8d5f71a1-b4b6-4329-b1c6-f2c07d695165/151142b742bbc55ba299a3bbb92ca084a609e3f9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8d5f71a1-b4b6-4329-b1c6-f2c07d695165/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:04:05 +0000
Certificate not after:    Thu 14 Aug 2025 17:32:43 +0000
Subordinate resources:    AS: 28330
                          IP: 170.81.128.0/22
                          IP: 186.237.128.0/20
                          IP: 189.50.128.0/20
                          IP: 2804:e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16810681 (0x10082b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:04:05 2023 GMT
            Not After : Aug 14 17:32:43 2025 GMT
        Subject: CN=151142b742bbc55ba299a3bbb92ca084a609e3f9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:43:83:ff:0e:9d:4f:be:c0:91:4c:b7:85:84:
                    a5:0f:34:70:37:f3:81:98:cd:2c:20:4b:be:b4:1c:
                    81:fe:f6:7a:ee:e3:be:48:4a:73:81:49:cf:66:1d:
                    43:09:a0:6b:f8:9f:a4:90:ad:79:89:6e:b9:56:41:
                    66:39:f7:bf:f3:e8:85:a4:5c:f7:cb:97:2e:64:f8:
                    e8:cd:85:c1:81:39:d4:e3:a0:7d:39:75:43:14:7b:
                    02:67:53:b1:f5:49:3a:ed:a9:a7:95:9e:b6:a0:f9:
                    e5:25:8b:2f:c7:0f:40:24:0e:25:a1:8f:de:26:a6:
                    72:0b:58:30:ab:ee:97:24:75:ee:14:da:50:1e:d8:
                    b3:94:66:96:ef:ea:3d:3e:d7:1f:bc:9a:ed:a1:51:
                    47:ad:1e:cd:63:a8:36:5b:8b:ae:99:1c:61:22:12:
                    dc:ea:a1:b6:90:00:b9:68:09:05:15:1e:39:09:27:
                    4c:4a:a2:0f:c4:c4:6f:15:cc:49:ed:28:2b:5d:65:
                    21:85:77:15:55:87:59:8c:1a:52:74:4b:0d:98:5f:
                    37:78:3e:24:2f:b0:05:c7:83:8f:90:5c:67:27:47:
                    a7:29:09:b4:d7:4c:97:95:89:f7:0b:a0:f3:c8:bf:
                    f9:39:d6:f8:b5:3a:d9:75:0d:21:01:b7:e2:9c:3b:
                    74:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:7A:8E:C7:7D:D4:6C:0B:C4:69:36:51:01:36:54:3C:CD:9C:1C:A6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8d5f71a1-b4b6-4329-b1c6-f2c07d695165/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8d5f71a1-b4b6-4329-b1c6-f2c07d695165/151142b742bbc55ba299a3bbb92ca084a609e3f9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.81.128.0/22
                  186.237.128.0/20
                  189.50.128.0/20
                IPv6:
                  2804:e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28330

    Signature Algorithm: sha256WithRSAEncryption
         84:ce:a9:ee:74:ae:56:a1:29:56:10:46:3a:74:df:39:a2:38:
         4a:cb:26:e6:d4:c6:f4:51:f9:de:0e:d9:5c:6b:f3:d1:92:57:
         c0:c1:fe:b0:08:51:e6:df:58:f0:77:e4:07:52:67:91:f3:54:
         9c:82:5c:f4:57:1c:d1:0f:ec:09:67:44:e8:38:c2:74:96:0a:
         3a:c3:30:0c:0c:68:57:81:ab:6a:14:89:ab:f5:1e:81:98:1e:
         52:7f:7a:bc:d7:e7:fb:9f:49:fd:2d:2f:7a:ef:e6:c2:80:64:
         fa:82:a5:e8:fe:2e:53:24:0e:d9:58:0f:a1:ac:c8:38:43:4b:
         32:a0:d9:d4:1e:1b:8c:ce:60:52:4e:66:36:32:e8:b9:98:8e:
         8c:19:be:da:7c:42:14:63:04:d2:76:ea:74:79:54:ac:2f:c0:
         26:66:81:22:50:c2:25:0f:4c:12:c6:fc:cc:03:12:5c:1d:3c:
         4a:8a:6a:55:84:5a:5a:4c:93:6a:fb:b2:bc:cf:82:0a:57:78:
         81:90:55:0c:ab:b5:37:68:3d:ab:2e:7d:a5:9c:a6:e1:c7:b9:
         74:4f:08:06:38:db:f1:04:a9:eb:04:31:a2:52:01:ba:03:74:
         93:08:c4:21:ad:c2:7a:13:8d:3c:70:c1:65:a1:c9:e0:a5:a4:
         f0:6e:f9:37
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIEAQCCuTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTEwNzE5MDQwNVoXDTI1MDgxNDE3MzI0
M1owMzExMC8GA1UEAxMoMTUxMTQyYjc0MmJiYzU1YmEyOTlhM2JiYjkyY2EwODRh
NjA5ZTNmOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKZDg/8OnU++
wJFMt4WEpQ80cDfzgZjNLCBLvrQcgf72eu7jvkhKc4FJz2YdQwmga/ifpJCteYlu
uVZBZjn3v/PohaRc98uXLmT46M2FwYE51OOgfTl1QxR7AmdTsfVJOu2pp5WetqD5
5SWLL8cPQCQOJaGP3iamcgtYMKvulyR17hTaUB7Ys5Rmlu/qPT7XH7ya7aFRR60e
zWOoNluLrpkcYSIS3OqhtpAAuWgJBRUeOQknTEqiD8TEbxXMSe0oK11lIYV3FVWH
WYwaUnRLDZhfN3g+JC+wBceDj5BcZydHpykJtNdMl5WJ9wug88i/+TnW+LU62XUN
IQG34pw7dNECAwEAAaOCAxQwggMQMB0GA1UdDgQWBBQueo7HfdRsC8RpNlEBNlQ8
zZwcpjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84ZDVmNzFhMS1iNGI2
LTQzMjktYjFjNi1mMmMwN2Q2OTUxNjUvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOGQ1ZjcxYTEtYjRiNi00
MzI5LWIxYzYtZjJjMDdkNjk1MTY1LzE1MTE0MmI3NDJiYmM1NWJhMjk5YTNiYmI5
MmNhMDg0YTYwOWUzZjkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAqpRgAMEBLrtgAMEBL0ygDANBAIA
AjAHAwUAKAQA4DAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJuqjANBgkqhkiG9w0B
AQsFAAOCAQEAhM6p7nSuVqEpVhBGOnTfOaI4Sssm5tTG9FH53g7ZXGvz0ZJXwMH+
sAhR5t9Y8HfkB1JnkfNUnIJc9Fcc0Q/sCWdE6DjCdJYKOsMwDAxoV4GrahSJq/Ue
gZgeUn96vNfn+59J/S0veu/mwoBk+oKl6P4uUyQO2VgPoazIOENLMqDZ1B4bjM5g
Uk5mNjLouZiOjBm+2nxCFGME0nbqdHlUrC/AJmaBIlDCJQ9MEsb8zAMSXB08Sopq
VYRaWkyTavuyvM+CCld4gZBVDKu1N2g9qy59pZym4ce5dE8IBjjb8QSp6wQxolIB
ugN0kwjEIa3CehONPHDBZaHJ4KWk8G75Nw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:22 2024 by rpki-client on console-ams.rpki-client.org