Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
File:                     21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer (raw, json)
Hash identifier:          78QJYgNaKRg/ZDtvnXLng7USgmd49Qz2BpF+FRLy2I8=
Subject key identifier:   F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA6E74
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 May 2018 19:56:38 +0000
Certificate not after:    Thu 25 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 11058
                          AS: 52294
                          AS: 52324
                          AS: 52332
                          AS: 52359 -- 52360
                          AS: 52370
                          AS: 52374 -- 52376
                          AS: 52403 -- 52404
                          AS: 52500
                          AS: 52508 -- 52509
                          AS: 61441
                          AS: 61494 -- 61495
                          AS: 61504 -- 61505
                          AS: 61520 -- 61521
                          AS: 61552 -- 61555
                          AS: 64103 -- 64106
                          AS: 64118
                          IP: 45.68.8.0/21
                          IP: 138.204.244.0 -- 138.204.255.255
                          IP: 138.219.0.0/22
                          IP: 200.0.17.0/24
                          IP: 200.0.19.0/24
                          IP: 200.9.157.0/24
                          IP: 200.13.83.0/24
                          IP: 200.14.37.0 -- 200.14.39.255
                          IP: 200.14.74.0/23
                          IP: 200.115.80.0/20
                          IP: 201.182.128.0/20
                          IP: 2001:13c7:6001::/48
                          IP: 2001:13c7:6007:: -- 2001:13c7:600e:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:13c7:6010::/44
                          IP: 2801:168::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14315124 (0xda6e74)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 19:56:38 2018 GMT
            Not After : Jan 25 05:00:00 2024 GMT
        Subject: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:69:11:d7:c6:1e:e3:a6:61:43:34:b5:0f:
                    07:cc:3c:d1:70:dd:c5:dc:e1:b5:4f:6e:88:e7:2d:
                    79:69:a2:cf:7f:09:29:82:21:ec:5d:62:56:f6:98:
                    4f:d2:74:bd:f3:16:e5:09:4d:1b:08:e2:6d:de:6f:
                    91:f3:bc:ee:4f:0e:0f:58:0d:6a:a8:01:a3:14:b5:
                    46:05:42:e3:48:c6:31:93:3a:e2:4a:c6:f1:8b:8c:
                    21:d8:b8:dd:7c:0c:ed:f7:1b:25:7e:6a:2c:b9:7d:
                    e6:a4:7c:8a:a9:de:05:de:08:78:5d:8a:35:89:e3:
                    56:13:a7:46:0b:87:e0:51:39:30:ac:20:b1:9f:78:
                    c9:44:cc:04:86:8f:c8:cd:47:ca:e9:9a:57:ee:4c:
                    7a:ac:37:1e:13:4b:e9:9d:f3:a5:39:d3:72:b7:a3:
                    02:2c:c4:6d:f0:fe:0e:1e:a7:74:f4:96:eb:8e:0b:
                    42:18:6a:6a:0b:b2:59:5b:ea:0c:f0:67:b3:8b:0f:
                    a7:c4:6f:39:56:1a:ee:13:3a:7c:38:3a:c4:59:f1:
                    a2:ac:de:cf:31:a9:03:90:7a:b1:f8:7e:49:de:a1:
                    dd:33:4c:d2:5c:6d:3f:db:94:01:92:86:15:13:3d:
                    e6:c1:68:a9:9f:51:3f:93:bb:8f:c1:12:80:ae:42:
                    52:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.8.0/21
                  138.204.244.0-138.204.255.255
                  138.219.0.0/22
                  200.0.17.0/24
                  200.0.19.0/24
                  200.9.157.0/24
                  200.13.83.0/24
                  200.14.37.0-200.14.39.255
                  200.14.74.0/23
                  200.115.80.0/20
                  201.182.128.0/20
                IPv6:
                  2001:13c7:6001::/48
                  2001:13c7:6007::-2001:13c7:600e:ffff:ffff:ffff:ffff:ffff
                  2001:13c7:6010::/44
                  2801:168::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11058
                  52294
                  52324
                  52332
                  52359-52360
                  52370
                  52374-52376
                  52403-52404
                  52500
                  52508-52509
                  61441
                  61494-61495
                  61504-61505
                  61520-61521
                  61552-61555
                  64103-64106
                  64118

    Signature Algorithm: sha256WithRSAEncryption
         59:2a:c2:f0:69:cf:e8:43:6c:9d:02:4b:9f:93:02:5b:67:3e:
         7e:9c:db:37:ad:35:ed:4b:6d:eb:5d:09:4a:f3:dc:47:4f:a4:
         3a:12:d1:18:e0:11:cf:f9:b4:5c:42:00:db:ef:68:9d:77:33:
         33:b6:2a:10:cc:04:90:cb:bf:bf:06:d4:ab:d9:ac:3c:5b:5e:
         a0:da:a5:88:e1:89:58:23:28:c4:bd:6a:5b:ff:51:84:ff:80:
         7c:3f:a5:80:69:13:f8:7c:f0:63:16:b3:12:f6:9c:c2:17:28:
         3a:a9:f7:71:5b:02:ab:a4:75:3b:c8:96:73:92:12:d2:aa:80:
         a8:0a:90:14:16:46:6f:fa:e5:bd:c6:a7:14:cb:1e:8d:33:a7:
         c0:9b:05:56:8b:24:82:79:bd:a7:3a:63:d3:57:09:20:de:d9:
         d2:2f:96:86:a9:db:16:a4:26:4e:bf:6b:f4:db:85:ae:19:1c:
         e4:87:52:8b:4d:a0:dd:1e:d9:a4:80:4b:b8:47:cf:ec:3b:24:
         3f:4b:b5:96:fe:6e:04:b3:38:f3:53:1d:7a:2e:40:c9:c8:05:
         c5:15:f3:10:63:0d:6f:a3:03:2e:bc:ec:63:e6:e6:75:19:92:
         d0:d8:20:ab:d9:19:e1:02:de:4f:03:33:ed:10:07:7e:07:ab:
         b1:3f:da:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:24 2024 by rpki-client on console-ams.rpki-client.org