Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2976ad75722b56c555dc377ffc12668912cc9247.cer
File:                     2976ad75722b56c555dc377ffc12668912cc9247.cer (raw, json)
Hash identifier:          7tOBAAq4bKqi1tXI8s8BoZ/QMYiuRoupto7f0zn8aUc=
Subject key identifier:   AB:75:E0:7D:F2:C5:70:28:E6:35:B5:D4:FD:1E:14:9D:10:72:AE:6D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010223A3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b1b6683f-3c01-4053-ab33-e754c8c8a2af/2976ad75722b56c555dc377ffc12668912cc9247.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b1b6683f-3c01-4053-ab33-e754c8c8a2af/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:51:02 +0000
Certificate not after:    Thu 02 Jan 2025 20:20:14 +0000
Subordinate resources:    AS: 22689
                          IP: 138.59.88.0/22
                          IP: 186.236.128.0/18
                          IP: 187.0.64.0/18
                          IP: 187.18.64.0/18
                          IP: 187.62.0.0/18
                          IP: 187.121.128.0/20
                          IP: 189.14.0.0/18
                          IP: 189.76.0.0/18
                          IP: 200.155.32.0/19
                          IP: 200.233.96.0/19
                          IP: 201.23.128.0/19
                          IP: 201.54.64.0/18
                          IP: 201.94.192.0/18
                          IP: 2804:22c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16917411 (0x10223a3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:51:02 2023 GMT
            Not After : Jan  2 20:20:14 2025 GMT
        Subject: CN=2976ad75722b56c555dc377ffc12668912cc9247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:71:67:63:cc:2a:b4:b8:29:18:2c:04:25:85:
                    15:e4:dd:d7:a0:e0:ee:82:db:2f:80:d3:08:19:9a:
                    c1:ce:a4:5b:bb:2c:fe:ad:41:ea:fb:7b:dd:5f:ef:
                    93:17:cf:12:54:82:e1:f1:80:2b:f8:73:a4:12:e2:
                    8f:0e:67:ec:01:33:cf:df:f1:5b:42:c5:3d:87:fc:
                    ed:1f:bd:09:03:39:4d:91:15:2a:53:36:5e:85:f3:
                    0e:a1:58:32:90:89:52:87:08:6d:db:13:30:68:34:
                    8d:37:43:8d:40:09:0d:f3:ba:0f:9a:e1:72:72:d9:
                    55:83:63:77:fc:de:13:10:76:4d:4b:1e:80:be:83:
                    0a:8b:d5:63:61:e8:5a:ed:e8:b0:70:87:21:32:50:
                    0d:d5:1d:af:8d:82:aa:a6:b8:2d:d4:55:13:1c:85:
                    e6:1d:a4:4b:60:55:8d:28:6c:cb:55:7a:82:c3:f2:
                    4e:e4:ad:ee:77:5c:f6:08:bc:36:10:d3:24:ff:a4:
                    e2:f5:bb:19:54:e0:a9:9f:1a:8b:0d:2e:dc:5d:51:
                    dc:ac:83:ab:bb:69:2a:9f:dc:5c:17:40:4b:2f:dd:
                    05:b4:b6:e3:a7:94:e0:58:83:7f:1f:70:65:f8:b2:
                    71:c8:9f:5d:75:59:7f:e0:88:ca:02:80:fe:c7:c0:
                    c2:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:75:E0:7D:F2:C5:70:28:E6:35:B5:D4:FD:1E:14:9D:10:72:AE:6D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b1b6683f-3c01-4053-ab33-e754c8c8a2af/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b1b6683f-3c01-4053-ab33-e754c8c8a2af/2976ad75722b56c555dc377ffc12668912cc9247.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.88.0/22
                  186.236.128.0/18
                  187.0.64.0/18
                  187.18.64.0/18
                  187.62.0.0/18
                  187.121.128.0/20
                  189.14.0.0/18
                  189.76.0.0/18
                  200.155.32.0/19
                  200.233.96.0/19
                  201.23.128.0/19
                  201.54.64.0/18
                  201.94.192.0/18
                IPv6:
                  2804:22c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22689

    Signature Algorithm: sha256WithRSAEncryption
         26:4f:41:32:33:25:3b:85:1d:cc:83:17:7a:8e:d8:aa:6d:d0:
         ae:81:48:0e:78:f4:39:47:9b:e9:4b:c8:a0:70:64:67:0a:2b:
         91:7e:e3:0d:d9:52:0e:18:51:38:3c:2d:71:ae:50:b3:26:15:
         23:2a:d2:43:07:f5:66:9b:b9:a8:56:09:20:ac:65:57:f0:35:
         d0:1e:c9:ad:db:1b:fa:96:48:0c:dc:7d:b8:99:fa:fc:8f:e7:
         2b:5c:df:f3:ae:36:76:bc:5e:89:8b:5e:55:5a:be:ae:7c:14:
         d1:cc:c2:8b:db:96:6a:8f:92:e6:6d:80:68:ce:46:3a:b9:84:
         37:78:30:bd:f0:6f:f2:f4:0f:ff:a9:01:ea:d8:09:dd:2b:91:
         33:de:87:80:04:09:50:95:af:b3:eb:91:1b:d8:5c:2d:22:34:
         7c:ec:04:4e:c9:2d:bd:97:d4:d2:13:00:d2:a1:25:94:dc:ed:
         17:0e:9e:06:8d:24:14:fd:6e:54:c8:42:67:90:cb:c0:c2:b2:
         e4:f2:2a:87:28:61:0a:f7:94:f0:fa:04:9a:ce:7e:29:92:49:
         44:a2:1a:b7:e6:d5:e5:bd:6e:98:5f:67:c5:bf:99:dc:48:3b:
         34:c7:79:84:dd:c2:9d:ce:50:ff:23:f9:68:f1:a7:7d:ec:11:
         a8:c7:fd:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:32 2024 by rpki-client on console-fra.rpki-client.org