Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2139b93c961e917531800c656c4712fedf3342d0.cer
File:                     2139b93c961e917531800c656c4712fedf3342d0.cer (raw, json)
Hash identifier:          8B6TQ9c+sFrSpjIT+2JcUGSXfDa1Wn2u+FWAAH4AeCM=
Subject key identifier:   3E:D5:B5:D2:04:5A:22:29:F4:98:B7:BC:46:89:D6:FE:8B:F4:41:20
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102F33A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d92e6b08-1822-4a51-901a-793bf93f3f9c/2139b93c961e917531800c656c4712fedf3342d0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d92e6b08-1822-4a51-901a-793bf93f3f9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 11 Jul 2021 17:57:01 +0000
Certificate not after:    Sun 05 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 6065
                          AS: 6135
                          AS: 12034
                          AS: 13544
                          AS: 19278
                          AS: 21888
                          AS: 23020
                          AS: 27706
                          AS: 28388 -- 28389
                          AS: 28401
                          AS: 28430
                          AS: 28450
                          AS: 28470 -- 28471
                          AS: 28473
                          AS: 28527
                          AS: 28542
                          AS: 28562
                          AS: 28565
                          AS: 28568
                          AS: 262919
                          AS: 262969
                          AS: 265507
                          AS: 265528
                          AS: 265536 -- 265537
                          AS: 265557 -- 265558
                          AS: 265563
                          IP: 2801:c4:22::/48
                          IP: 2801:c4:40::/48
                          IP: 2806:201::/32
                          IP: 2806:204::/32
                          IP: 2806:216::/48
                          IP: 2806:218::/32
                          IP: 2806:23c::/32
                          IP: 2806:28d::/32
                          IP: 2806:2e8::/31
                          IP: 2806:2ef::/32
                          IP: 2806:2f1:: -- 2806:2f3:ffff:ffff:ffff:ffff:ffff:ffff
                          IP: 2806:2f5::/32
                          IP: 2806:309::/32
                          IP: 2806:340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16970554 (0x102f33a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 17:57:01 2021 GMT
            Not After : Jan  5 14:00:00 2025 GMT
        Subject: CN=2139b93c961e917531800c656c4712fedf3342d0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:bd:2f:bc:9f:8b:4d:f1:59:86:12:08:e2:fb:
                    af:76:f5:35:db:0d:81:63:80:52:4f:62:bd:d4:41:
                    86:bc:3a:2f:e2:f1:00:ec:c1:cb:bc:a7:63:eb:92:
                    d8:75:7d:98:2e:6a:d6:9b:20:63:06:55:15:20:f2:
                    15:38:af:fd:30:ad:62:7c:75:12:0b:6b:72:e3:6b:
                    1e:85:97:72:ee:1e:74:83:fd:50:9a:df:ea:43:43:
                    6a:a6:14:d9:01:34:c8:4d:2f:6f:da:68:c4:7f:fa:
                    9c:42:91:f4:3f:be:d2:81:fc:1e:be:ca:2f:80:85:
                    a6:db:bf:ac:08:0a:5c:d9:16:d8:ee:75:42:a3:63:
                    74:32:ff:3e:24:c5:07:9e:3f:a4:12:66:c8:8c:84:
                    62:1b:18:19:32:ed:8a:58:56:24:f6:de:4b:bf:c1:
                    79:2f:17:ee:6b:42:1d:5f:b1:9e:af:d9:74:48:ee:
                    7a:a4:93:40:9c:54:f8:87:82:eb:b0:dc:74:05:bb:
                    fd:15:62:05:12:9f:6f:d9:83:84:80:42:ef:fe:db:
                    60:34:da:c1:9c:de:18:f9:03:fc:8a:5b:ec:01:57:
                    18:07:aa:82:b1:2a:80:d2:af:6d:30:ef:44:7f:ae:
                    1c:c9:a7:f6:2b:e3:fa:a9:4b:ed:2c:83:4e:33:e9:
                    ad:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:D5:B5:D2:04:5A:22:29:F4:98:B7:BC:46:89:D6:FE:8B:F4:41:20
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d92e6b08-1822-4a51-901a-793bf93f3f9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d92e6b08-1822-4a51-901a-793bf93f3f9c/2139b93c961e917531800c656c4712fedf3342d0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:c4:22::/48
                  2801:c4:40::/48
                  2806:201::/32
                  2806:204::/32
                  2806:216::/48
                  2806:218::/32
                  2806:23c::/32
                  2806:28d::/32
                  2806:2e8::/31
                  2806:2ef::/32
                  2806:2f1::-2806:2f3:ffff:ffff:ffff:ffff:ffff:ffff
                  2806:2f5::/32
                  2806:309::/32
                  2806:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6065
                  6135
                  12034
                  13544
                  19278
                  21888
                  23020
                  27706
                  28388-28389
                  28401
                  28430
                  28450
                  28470-28471
                  28473
                  28527
                  28542
                  28562
                  28565
                  28568
                  262919
                  262969
                  265507
                  265528
                  265536-265537
                  265557-265558
                  265563

    Signature Algorithm: sha256WithRSAEncryption
         0a:61:33:a7:a8:ad:78:e0:2e:97:54:d2:7d:fc:de:20:ae:87:
         65:d9:e6:91:82:57:79:59:03:cd:6c:07:35:e7:a6:90:1d:c1:
         67:9d:c3:ba:7e:58:40:92:06:29:6e:e4:f1:cb:9a:aa:0c:e1:
         58:6f:c1:63:5d:53:8b:79:44:ac:39:d1:a6:49:1a:b4:55:70:
         d1:8e:30:1e:01:45:a0:8d:b7:3b:a3:9d:f8:e0:70:af:3f:ad:
         61:42:7a:dc:61:43:c1:d7:d6:e2:9e:6c:ca:33:14:f0:21:5d:
         d9:f6:a9:53:09:f8:45:44:5d:2c:4d:19:7e:ec:c0:db:74:88:
         3c:66:22:cb:63:e8:54:cd:b9:c9:e3:ed:38:20:4f:0e:a4:aa:
         d7:f1:b1:e8:3d:ff:ed:58:0b:ee:ec:4a:0c:2e:84:c1:0a:83:
         8d:10:b5:42:00:7d:19:cd:70:85:34:0a:66:88:10:30:5d:4d:
         5f:2c:9e:1c:7a:b7:4d:93:14:db:50:e8:9f:22:35:8d:9a:e4:
         cc:d9:4d:ff:71:c5:b2:47:6e:65:b9:0c:67:63:c2:0c:25:02:
         f4:2c:64:a5:00:8b:9f:08:c0:1a:32:c9:2b:c9:3f:56:34:ac:
         c9:41:da:8f:76:b9:e3:72:ed:70:1d:1e:b3:de:2e:c3:35:b3:
         d2:60:f1:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:10 2024 by rpki-client on console-fra.rpki-client.org