Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1866c45b21787e12af4deafc085303e786f50b2f.cer
File:                     1866c45b21787e12af4deafc085303e786f50b2f.cer (raw, json)
Hash identifier:          olaOox0GRC+n/pM3ko7HKWsTT7MF9697fugP8Awqa+8=
Subject key identifier:   C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E4FFC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:51 +0000
Certificate not after:    Mon 19 May 2025 06:00:00 +0000
Subordinate resources:    AS: 10620
                          AS: 14080
                          AS: 26603
                          AS: 27864
                          IP: 181.48.0.0/12
                          IP: 186.80.0.0/13
                          IP: 186.144.0.0/14
                          IP: 190.8.192.0/18
                          IP: 190.84.0.0/15
                          IP: 190.143.0.0/17
                          IP: 190.144.0.0/14
                          IP: 190.156.0.0/14
                          IP: 200.26.128.0/19
                          IP: 200.71.32.0/19
                          IP: 200.74.128.0/19
                          IP: 200.89.224.0/19
                          IP: 200.118.0.0/16
                          IP: 201.216.0.0/18
                          IP: 201.221.160.0/19
                          IP: 2800:480::/29

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17715196 (0x10e4ffc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:51 2017 GMT
            Not After : May 19 06:00:00 2025 GMT
        Subject: CN=1866c45b21787e12af4deafc085303e786f50b2f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:41:ed:8b:6b:0f:2e:e0:b7:68:7b:6a:01:65:
                    23:61:63:41:b2:ac:5e:44:fa:6c:fc:c8:e2:a4:72:
                    d6:2a:b4:ad:15:2c:23:ac:26:6b:21:8b:c7:dc:f5:
                    b3:bc:73:a8:ba:6b:94:2a:56:3b:92:16:d5:b1:f4:
                    bd:36:a4:15:f4:9e:10:e2:6e:df:48:bb:ac:6c:f8:
                    9a:76:95:2f:db:36:4f:e2:59:19:c1:8c:79:64:59:
                    64:f3:80:ca:39:e0:e1:5b:f8:42:1f:10:82:2a:02:
                    ff:3e:4f:57:93:73:d0:43:75:22:53:8b:ca:59:f4:
                    f1:86:75:08:08:db:9e:ce:7b:12:e2:ab:43:2c:61:
                    55:4a:74:24:1f:f2:b8:ea:e7:60:28:aa:1e:1e:f0:
                    b0:50:7b:4e:7a:b5:f8:be:93:6a:74:7c:d6:b1:52:
                    8c:cd:ed:8c:24:09:d9:79:e6:a6:e9:d4:0e:f5:48:
                    9d:3b:04:13:98:7c:d7:06:5b:ee:fc:78:80:b9:88:
                    0a:a0:3e:65:3a:a1:16:41:01:51:08:8f:26:7d:d8:
                    56:26:8f:d1:28:8d:0e:28:3c:9b:c0:0a:e9:97:10:
                    9e:0d:fb:1a:f0:b9:99:eb:f7:5a:4b:5c:9f:f2:95:
                    66:bf:1f:d3:cd:0d:f6:33:23:3c:30:8d:57:10:e2:
                    97:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:D2:73:A6:7C:06:1F:63:0B:31:28:A0:40:4C:BE:EC:ED:22:31:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02419b92-fbba-404b-a229-f3865d57a46a/1866c45b21787e12af4deafc085303e786f50b2f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.48.0.0/12
                  186.80.0.0/13
                  186.144.0.0/14
                  190.8.192.0/18
                  190.84.0.0/15
                  190.143.0.0/17
                  190.144.0.0/14
                  190.156.0.0/14
                  200.26.128.0/19
                  200.71.32.0/19
                  200.74.128.0/19
                  200.89.224.0/19
                  200.118.0.0/16
                  201.216.0.0/18
                  201.221.160.0/19
                IPv6:
                  2800:480::/29

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10620
                  14080
                  26603
                  27864

    Signature Algorithm: sha256WithRSAEncryption
         15:26:eb:0e:bd:24:46:27:f3:ab:9f:13:5b:83:17:20:3f:d8:
         e1:07:e6:aa:d8:65:62:54:dd:70:9e:6c:d3:c4:7f:78:19:c3:
         c1:1a:31:37:c2:ec:e1:59:da:f2:4e:ed:14:0f:8f:b8:5a:a4:
         f6:a6:f4:8d:9e:92:61:33:33:d6:58:fd:d0:0c:de:d6:8a:23:
         d8:5c:fd:ad:b2:0c:31:6f:29:f3:04:8f:c3:43:44:c5:a1:3b:
         44:b8:64:68:e1:29:b9:90:30:a6:e5:dc:a0:02:c5:a5:a9:35:
         0d:c5:48:0a:32:b9:ee:c1:16:22:72:bc:d8:ac:0d:27:51:10:
         ac:51:67:a5:e1:8b:0f:e2:c4:4a:e1:42:9a:c3:6b:14:33:a1:
         79:8d:47:88:b0:36:6d:59:70:84:28:14:b6:d0:98:c6:2c:ca:
         d8:0f:f6:2b:41:75:6c:fa:e4:31:3d:65:1c:ee:43:c1:85:bc:
         68:e1:8d:b8:be:bc:01:ab:ef:47:76:a7:f1:b6:c1:54:a2:38:
         27:0b:a1:8e:3a:bc:ce:7a:c6:97:16:c2:26:a6:89:ef:f0:c3:
         85:92:5e:42:ca:5a:b5:75:eb:55:13:23:48:1f:c5:b9:cf:cc:
         fa:d1:23:ee:e9:21:b0:76:53:3e:8e:c8:2f:29:09:3d:73:6b:
         32:43:c8:dd
-----BEGIN CERTIFICATE-----
MIIGMjCCBRqgAwIBAgIEAQ5P/DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1MVoXDTI1MDUxOTA2MDAw
MFowMzExMC8GA1UEAxMoMTg2NmM0NWIyMTc4N2UxMmFmNGRlYWZjMDg1MzAzZTc4
NmY1MGIyZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKxB7YtrDy7g
t2h7agFlI2FjQbKsXkT6bPzI4qRy1iq0rRUsI6wmayGLx9z1s7xzqLprlCpWO5IW
1bH0vTakFfSeEOJu30i7rGz4mnaVL9s2T+JZGcGMeWRZZPOAyjng4Vv4Qh8QgioC
/z5PV5Nz0EN1IlOLyln08YZ1CAjbns57EuKrQyxhVUp0JB/yuOrnYCiqHh7wsFB7
Tnq1+L6TanR81rFSjM3tjCQJ2XnmpunUDvVInTsEE5h81wZb7vx4gLmICqA+ZTqh
FkEBUQiPJn3YViaP0SiNDig8m8AK6ZcQng37GvC5mev3Wktcn/KVZr8f080N9jMj
PDCNVxDilwMCAwEAAaOCA2EwggNdMB0GA1UdDgQWBBTC0nOmfAYfYwsxKKBATL7s
7SIxiDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMjQxOWI5Mi1mYmJh
LTQwNGItYTIyOS1mMzg2NWQ1N2E0NmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDI0MTliOTItZmJiYS00
MDRiLWEyMjktZjM4NjVkNTdhNDZhLzE4NjZjNDViMjE3ODdlMTJhZjRkZWFmYzA4
NTMwM2U3ODZmNTBiMmYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB7
BggrBgEFBQcBBwEB/wRsMGowWQQCAAEwUwMDBLUwAwMDulADAwK6kAMEBr4IwAMD
Ab5UAwQHvo8AAwMCvpADAwK+nAMEBcgagAMEBchHIAMEBchKgAMEBchZ4AMDAMh2
AwQGydgAAwQFyd2gMA0EAgACMAcDBQMoAASAMCUGCCsGAQUFBwEIAQH/BBYwFKAS
MBACAil8AgI3AAICZ+sCAmzYMA0GCSqGSIb3DQEBCwUAA4IBAQAVJusOvSRGJ/Or
nxNbgxcgP9jhB+aq2GViVN1wnmzTxH94GcPBGjE3wuzhWdryTu0UD4+4WqT2pvSN
npJhMzPWWP3QDN7WiiPYXP2tsgwxbynzBI/DQ0TFoTtEuGRo4Sm5kDCm5dygAsWl
qTUNxUgKMrnuwRYicrzYrA0nURCsUWel4YsP4sRK4UKaw2sUM6F5jUeIsDZtWXCE
KBS20JjGLMrYD/YrQXVs+uQxPWUc7kPBhbxo4Y24vrwBq+9HdqfxtsFUojgnC6GO
OrzOesaXFsImponv8MOFkl5Cylq1detVEyNIH8W5z8z60SPu6SGwdlM+jsgvKQk9
c2syQ8jd
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org