Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17ad69d5e226c4e4367e1ed072ec012708bb9a30.cer
File:                     17ad69d5e226c4e4367e1ed072ec012708bb9a30.cer (raw, json)
Hash identifier:          lopWS1Q4FNboBn5g0NqeOFILPY6Aj9iKGFk8l8jRaDI=
Subject key identifier:   BE:88:64:55:24:A3:1B:F4:C0:9B:04:DC:B2:F5:52:75:A8:24:D8:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010F8BD3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/17ad69d5e226c4e4367e1ed072ec012708bb9a30.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:18 +0000
Certificate not after:    Wed 20 Aug 2025 21:38:16 +0000
Subordinate resources:    AS: 273190
                          IP: 45.225.104.0/22
                          IP: 2803:aa20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17796051 (0x10f8bd3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:18 2017 GMT
            Not After : Aug 20 21:38:16 2025 GMT
        Subject: CN=17ad69d5e226c4e4367e1ed072ec012708bb9a30
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:ce:4c:12:4b:1d:35:fd:d8:4d:0c:97:40:c3:
                    6f:cb:c9:c7:25:cc:af:94:08:a0:7d:fa:66:49:22:
                    88:42:ba:73:fe:db:e2:2f:86:03:9f:2d:ff:60:3d:
                    5e:7d:80:77:5d:37:c1:b2:a3:6b:ae:d3:8c:0d:87:
                    12:06:9e:aa:b0:46:7b:f1:58:33:71:73:18:8f:f8:
                    f3:dd:e9:4d:0b:94:f5:fd:11:fb:e4:3c:90:32:40:
                    ee:8e:e6:92:d5:11:7b:1b:28:71:ae:8a:f8:2c:9e:
                    d7:99:8d:7a:91:eb:79:8f:9a:54:68:76:b8:af:6c:
                    16:09:51:34:5f:eb:f3:6c:bd:65:9f:a6:1b:25:b1:
                    1f:b5:c0:dd:cb:2c:a4:54:fa:12:3d:28:68:91:a2:
                    5c:96:04:d6:3f:8a:4f:e1:d1:44:1e:1b:a6:c5:23:
                    62:ee:8e:28:d7:b6:86:da:c5:75:87:17:a4:c5:b6:
                    fb:23:21:68:7b:ce:76:6c:2e:55:fb:cd:05:11:ef:
                    e7:73:b1:60:f3:c6:4b:9b:59:ad:01:f1:1d:2a:4c:
                    00:b3:65:dc:b7:e6:5b:6e:73:f2:80:72:b0:ce:a3:
                    04:29:4f:94:b0:e3:b1:60:cb:4c:0c:83:35:13:17:
                    d4:20:47:b4:c1:90:b6:75:79:72:a0:76:2b:71:c7:
                    8a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:88:64:55:24:A3:1B:F4:C0:9B:04:DC:B2:F5:52:75:A8:24:D8:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c53d6f63-91e1-44ed-afcd-1622060c784c/17ad69d5e226c4e4367e1ed072ec012708bb9a30.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.225.104.0/22
                IPv6:
                  2803:aa20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273190

    Signature Algorithm: sha256WithRSAEncryption
         6f:40:63:ff:0e:68:a8:da:ba:86:1a:96:ea:e6:b9:87:14:e3:
         c0:12:c4:f3:83:aa:75:ff:bc:8a:6d:fa:c5:cb:26:53:b8:a5:
         28:ab:5b:a5:98:59:c6:32:f9:fd:b0:7c:15:37:3f:f9:79:7e:
         9d:7d:dc:0c:c3:ab:32:db:58:eb:8a:cb:d1:93:af:21:89:c8:
         ae:af:00:fe:ee:7e:33:94:82:cc:00:26:c3:7d:f3:b0:7a:b0:
         a8:fd:77:31:fe:14:d5:e1:a8:50:46:7c:e4:e0:b4:10:ca:e8:
         d0:af:48:31:90:6d:21:29:62:17:46:39:fb:09:67:9f:0c:68:
         7a:4d:d8:fc:18:9d:a3:c9:fc:77:07:44:92:d2:d7:4f:50:fa:
         53:a0:4d:18:8f:c1:52:c4:a6:45:59:9f:46:7f:2c:cd:ac:ee:
         a4:b1:d5:64:e9:60:fb:95:c6:fa:d8:c6:63:86:64:e6:73:af:
         bc:81:aa:3f:74:48:cb:ea:c1:55:64:bb:70:b2:9b:9d:dd:70:
         98:30:f7:e9:01:b5:bf:75:f2:09:72:f1:28:6f:de:ef:36:73:
         75:6b:a4:c8:83:56:d1:33:09:81:cc:5b:ba:c6:81:40:83:ad:
         94:79:0b:cd:7e:78:13:25:49:56:a7:c7:c9:03:9d:3c:69:61:
         78:3f:8c:a6
-----BEGIN CERTIFICATE-----
MIIF2jCCBMKgAwIBAgIEAQ+L0zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcxOFoXDTI1MDgyMDIxMzgx
NlowMzExMC8GA1UEAxMoMTdhZDY5ZDVlMjI2YzRlNDM2N2UxZWQwNzJlYzAxMjcw
OGJiOWEzMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALrOTBJLHTX9
2E0Ml0DDb8vJxyXMr5QIoH36ZkkiiEK6c/7b4i+GA58t/2A9Xn2Ad103wbKja67T
jA2HEgaeqrBGe/FYM3FzGI/4893pTQuU9f0R++Q8kDJA7o7mktURexsoca6K+Cye
15mNepHreY+aVGh2uK9sFglRNF/r82y9ZZ+mGyWxH7XA3csspFT6Ej0oaJGiXJYE
1j+KT+HRRB4bpsUjYu6OKNe2htrFdYcXpMW2+yMhaHvOdmwuVfvNBRHv53OxYPPG
S5tZrQHxHSpMALNl3LfmW25z8oBysM6jBClPlLDjsWDLTAyDNRMX1CBHtMGQtnV5
cqB2K3HHii8CAwEAAaOCAwkwggMFMB0GA1UdDgQWBBS+iGRVJKMb9MCbBNyy9VJ1
qCTYuDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jNTNkNmY2My05MWUx
LTQ0ZWQtYWZjZC0xNjIyMDYwYzc4NGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzUzZDZmNjMtOTFlMS00
NGVkLWFmY2QtMTYyMjA2MGM3ODRjLzE3YWQ2OWQ1ZTIyNmM0ZTQzNjdlMWVkMDcy
ZWMwMTI3MDhiYjlhMzAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi3haDANBAIAAjAHAwUAKAOqIDAa
BggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEKyYwDQYJKoZIhvcNAQELBQADggEBAG9A
Y/8OaKjauoYalurmuYcU48ASxPODqnX/vIpt+sXLJlO4pSirW6WYWcYy+f2wfBU3
P/l5fp193AzDqzLbWOuKy9GTryGJyK6vAP7ufjOUgswAJsN987B6sKj9dzH+FNXh
qFBGfOTgtBDK6NCvSDGQbSEpYhdGOfsJZ58MaHpN2PwYnaPJ/HcHRJLS109Q+lOg
TRiPwVLEpkVZn0Z/LM2s7qSx1WTpYPuVxvrYxmOGZOZzr7yBqj90SMvqwVVku3Cy
m53dcJgw9+kBtb918gly8Shv3u82c3VrpMiDVtEzCYHMW7rGgUCDrZR5C81+eBMl
SVanx8kDnTxpYXg/jKY=
-----END CERTIFICATE-----