Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/337d330947d264c81b4503df3b1ef67d45cc2dc4.cer
File:                     337d330947d264c81b4503df3b1ef67d45cc2dc4.cer (raw, json)
Hash identifier:          yGR1XZYG2Q90VKKskgCZPRX0fvtdkFfPtUwiNufisW0=
Subject key identifier:   61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDFB5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:57 +0000
Certificate not after:    Thu 18 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 22368
                          IP: 170.80.8.0/22
                          IP: 181.174.0.0/18
                          IP: 186.183.128.0/17
                          IP: 190.13.0.0/18
                          IP: 190.96.128.0/17
                          IP: 190.124.96.0/19
                          IP: 190.184.128.0/18
                          IP: 201.221.128.0/19
                          IP: 2803:8400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15596382 (0xedfb5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:57 2017 GMT
            Not After : Jul 18 06:00:00 2024 GMT
        Subject: CN=337d330947d264c81b4503df3b1ef67d45cc2dc4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:ed:db:3a:05:b6:3b:6b:ae:58:26:98:0f:9b:
                    c7:aa:b7:dc:85:90:62:f6:8b:6d:ee:07:ce:0c:89:
                    fa:7e:52:13:55:99:75:c0:c9:54:42:0e:03:3c:a2:
                    a1:41:f0:98:20:f6:fd:88:07:cd:0e:5f:96:6d:fd:
                    51:61:9c:67:31:89:ca:f2:d3:03:a1:dc:e5:cf:3d:
                    6f:32:4a:39:a0:60:c7:8c:ad:bc:c8:a8:b5:c8:80:
                    f2:d5:7d:c5:f0:43:a6:5b:48:98:22:d3:38:d0:87:
                    d0:af:38:e3:52:e2:c5:50:99:9a:03:da:94:7b:03:
                    58:5a:6b:08:a6:74:a3:52:51:26:f1:ce:6a:e3:02:
                    49:b8:4e:d6:c7:d6:fa:fb:0e:cd:6d:9d:26:d9:a5:
                    eb:88:15:b1:19:3a:ae:94:9f:44:45:80:94:34:60:
                    5c:71:ef:1a:c6:28:ae:ed:15:96:f4:23:18:1d:3e:
                    69:3a:06:c8:2c:ba:6e:c2:da:fd:0d:a2:54:e4:13:
                    8d:42:ce:9b:85:54:36:70:13:f6:77:3b:da:9e:66:
                    34:ad:e0:ca:db:10:52:94:69:99:c6:1d:83:96:75:
                    94:5e:4f:52:0a:dc:94:3e:2f:68:bb:8d:34:69:2d:
                    ea:b2:0f:fe:d4:49:0a:6a:e9:f7:55:03:52:38:2f:
                    10:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:B6:8D:FD:87:EB:CE:D6:CA:2B:24:E2:AA:8F:F7:07:DA:63:5E:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b3e5dd9e-bbca-4c49-92f5-8c6751165e92/337d330947d264c81b4503df3b1ef67d45cc2dc4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.80.8.0/22
                  181.174.0.0/18
                  186.183.128.0/17
                  190.13.0.0/18
                  190.96.128.0/17
                  190.124.96.0/19
                  190.184.128.0/18
                  201.221.128.0/19
                IPv6:
                  2803:8400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22368

    Signature Algorithm: sha256WithRSAEncryption
         0b:ec:23:6c:b6:1b:97:b6:54:2a:d4:fb:89:fe:0f:52:5c:e5:
         8b:93:07:3f:03:33:dd:c7:66:a1:9d:32:ed:cf:dd:8f:79:7f:
         03:88:11:12:33:da:fa:60:a0:8d:9e:a3:9b:9d:67:36:8b:69:
         c6:d1:e5:5d:b1:4d:9b:b7:82:48:13:02:68:15:ed:29:a0:f3:
         ce:ec:4d:84:dd:04:83:4b:ca:f7:8e:a9:95:eb:37:40:57:e7:
         32:a6:bb:2e:90:28:aa:47:dd:a5:23:f8:27:30:f9:6f:70:d8:
         4c:44:0b:e9:03:a2:42:d8:7f:32:ca:6e:70:3a:85:81:32:57:
         18:4f:10:2b:c1:c8:84:86:23:ed:df:df:d0:28:1e:d7:9e:92:
         64:14:f3:f2:69:53:41:1d:eb:56:a4:1e:95:76:80:75:8f:ef:
         79:98:e6:6c:b4:51:05:7c:29:eb:e2:3b:58:74:c7:1a:81:c1:
         ce:20:fb:d7:a8:5f:0f:c4:3e:39:dc:05:74:76:99:41:fd:be:
         e8:8e:88:cd:6d:d0:5e:f1:3a:86:9e:06:e3:62:9b:64:d3:c6:
         b6:61:25:26:2d:64:74:03:ce:d0:a2:1f:ab:84:bf:7a:0e:0c:
         de:56:c6:b6:13:93:c9:0f:61:a7:45:02:91:ca:36:0b:8e:7c:
         1c:3b:e9:f6
-----BEGIN CERTIFICATE-----
MIIGAzCCBOugAwIBAgIEAO37XjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1N1oXDTI0MDcxODA2MDAw
MFowMzExMC8GA1UEAxMoMzM3ZDMzMDk0N2QyNjRjODFiNDUwM2RmM2IxZWY2N2Q0
NWNjMmRjNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOTt2zoFtjtr
rlgmmA+bx6q33IWQYvaLbe4HzgyJ+n5SE1WZdcDJVEIOAzyioUHwmCD2/YgHzQ5f
lm39UWGcZzGJyvLTA6Hc5c89bzJKOaBgx4ytvMiotciA8tV9xfBDpltImCLTONCH
0K8441LixVCZmgPalHsDWFprCKZ0o1JRJvHOauMCSbhO1sfW+vsOzW2dJtml64gV
sRk6rpSfREWAlDRgXHHvGsYoru0VlvQjGB0+aToGyCy6bsLa/Q2iVOQTjULOm4VU
NnAT9nc72p5mNK3gytsQUpRpmcYdg5Z1lF5PUgrclD4vaLuNNGkt6rIP/tRJCmrp
91UDUjgvENECAwEAAaOCAzIwggMuMB0GA1UdDgQWBBRhto39h+vO1sorJOKqj/cH
2mNeGTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iM2U1ZGQ5ZS1iYmNh
LTRjNDktOTJmNS04YzY3NTExNjVlOTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjNlNWRkOWUtYmJjYS00
YzQ5LTkyZjUtOGM2NzUxMTY1ZTkyLzMzN2QzMzA5NDdkMjY0YzgxYjQ1MDNkZjNi
MWVmNjdkNDVjYzJkYzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBY
BggrBgEFBQcBBwEB/wRJMEcwNgQCAAEwMAMEAqpQCAMEBrWuAAMEB7q3gAMEBr4N
AAMEB75ggAMEBb58YAMEBr64gAMEBcndgDANBAIAAjAHAwUAKAOEADAZBggrBgEF
BQcBCAEB/wQKMAigBjAEAgJXYDANBgkqhkiG9w0BAQsFAAOCAQEAC+wjbLYbl7ZU
KtT7if4PUlzli5MHPwMz3cdmoZ0y7c/dj3l/A4gREjPa+mCgjZ6jm51nNotpxtHl
XbFNm7eCSBMCaBXtKaDzzuxNhN0Eg0vK946ples3QFfnMqa7LpAoqkfdpSP4JzD5
b3DYTEQL6QOiQth/MspucDqFgTJXGE8QK8HIhIYj7d/f0Cge156SZBTz8mlTQR3r
VqQelXaAdY/veZjmbLRRBXwp6+I7WHTHGoHBziD716hfD8Q+OdwFdHaZQf2+6I6I
zW3QXvE6hp4G42KbZNPGtmElJi1kdAPO0KIfq4S/eg4M3lbGthOTyQ9hp0UCkco2
C458HDvp9g==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org