Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d425e0701077d9b4ed04e706fd74259f8427776.cer
File:                     1d425e0701077d9b4ed04e706fd74259f8427776.cer (raw, json)
Hash identifier:          2qMEbH4xnre2QhIG7mfqdSFdvwWXXy+jnmA02adm09w=
Subject key identifier:   EE:3A:B8:1F:3C:A7:02:64:5E:C4:73:74:7E:A0:F4:B3:9E:7C:FB:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C68158
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/1d425e0701077d9b4ed04e706fd74259f8427776.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 May 2022 15:01:09 +0000
Certificate not after:    Wed 10 Jan 2024 19:29:51 +0000
Subordinate resources:    AS: 263735
                          IP: 138.59.204.0/22
                          IP: 138.219.172.0/22
                          IP: 168.227.140.0/22
                          IP: 170.83.232.0/22
                          IP: 2803:9f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13009240 (0xc68158)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 15:01:09 2022 GMT
            Not After : Jan 10 19:29:51 2024 GMT
        Subject: CN=1d425e0701077d9b4ed04e706fd74259f8427776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:ae:9d:2c:17:d4:70:e1:02:f4:fd:23:15:
                    81:17:07:3e:37:35:d4:66:9e:c1:15:bf:63:fb:5e:
                    e9:0d:b9:92:58:50:ef:95:d2:63:c4:9a:1a:46:e9:
                    5d:d1:74:44:24:4b:ce:42:60:31:8a:93:53:aa:23:
                    ec:84:08:a3:1a:17:9a:9a:ff:ff:a0:7a:f6:aa:1a:
                    3d:15:29:28:9e:cd:0b:f1:96:3d:86:10:2a:32:06:
                    3d:f2:69:7c:8d:b4:33:01:0c:cb:fe:83:26:78:88:
                    b5:46:c3:a5:13:89:ca:d7:4b:79:3c:49:ec:6c:95:
                    74:25:b5:06:21:d2:ce:b0:af:96:c2:b1:c1:72:6a:
                    74:3c:0a:eb:00:21:e5:86:10:73:e9:3c:f2:17:a8:
                    39:46:25:ee:1e:fb:2d:88:9e:7b:70:31:64:2f:9d:
                    1d:25:94:6c:65:19:d3:84:21:8a:26:65:f7:06:d5:
                    84:ff:3c:1e:b5:ea:e1:08:57:9f:f9:5d:5f:96:e3:
                    c6:da:64:c8:41:9c:9f:14:ba:18:67:98:f2:5e:ab:
                    ba:6c:4f:3b:f9:a7:c3:ee:42:32:a1:8a:b3:eb:4c:
                    7e:02:3a:b2:97:6c:93:40:22:3d:3b:a9:c7:de:a5:
                    95:3d:94:86:ee:49:da:2b:1f:bb:83:12:bc:1c:7c:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:B8:1F:3C:A7:02:64:5E:C4:73:74:7E:A0:F4:B3:9E:7C:FB:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/1d425e0701077d9b4ed04e706fd74259f8427776.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.204.0/22
                  138.219.172.0/22
                  168.227.140.0/22
                  170.83.232.0/22
                IPv6:
                  2803:9f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263735

    Signature Algorithm: sha256WithRSAEncryption
         7a:e2:7d:1f:c4:68:3d:d1:97:58:6d:4f:e9:7b:19:c7:fb:a2:
         f0:48:aa:ee:fe:ce:ca:ad:ce:54:73:3b:9e:5c:86:5b:d9:f1:
         f2:9e:a0:c4:3a:93:02:80:58:a5:b5:73:11:18:5d:da:52:79:
         ed:da:d7:5c:71:ab:99:71:37:7e:02:f7:d3:ad:6d:6d:67:b7:
         4f:35:7e:db:90:8e:d5:79:00:0b:a1:6b:d7:8b:f0:c1:0a:5f:
         86:58:7b:5c:69:71:c6:d4:23:33:69:56:7b:01:6c:c0:d6:20:
         35:0b:01:ea:1f:1a:5a:90:bf:b6:05:71:ef:47:5c:db:53:27:
         95:04:9a:9a:1b:16:17:c3:aa:6b:bf:dc:c6:da:ad:cd:73:a1:
         db:fa:24:ee:92:ed:18:70:bf:82:c2:f4:a7:b0:1f:d5:4a:61:
         01:a1:9e:fc:b0:94:b2:84:68:fd:4d:48:99:d5:b5:d7:0c:8d:
         14:50:f1:30:d7:16:68:d2:ea:92:b4:e9:91:03:32:cb:40:28:
         97:2a:61:d2:0f:75:c0:7a:97:5e:64:78:4b:21:17:30:22:b6:
         2e:2e:4c:c5:a4:99:b9:7b:17:7c:71:8e:89:aa:e0:a0:7a:95:
         0f:42:e0:30:c0:77:ad:8b:17:da:75:22:ec:f9:31:2f:f1:ef:
         c8:d4:c5:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:32 2024 by rpki-client on console-fra.rpki-client.org