Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer
File:                     33cc3bdd4edfc498d2c924783a40c9ff255120b8.cer (raw, json)
Hash identifier:          r2RAQVukQibzeDKmXatAkiWeg1Dqfu5eZNErXaKUgoY=
Subject key identifier:   D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC1C58
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:11 +0000
Certificate not after:    Fri 16 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 27738
                          IP: 190.130.128.0 -- 190.131.191.255
                          IP: 191.99.0.0/16
                          IP: 200.124.224.0/19
                          IP: 201.183.0.0/16
                          IP: 2800:440::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14425176 (0xdc1c58)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:11 2017 GMT
            Not After : Feb 16 05:00:00 2024 GMT
        Subject: CN=33cc3bdd4edfc498d2c924783a40c9ff255120b8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:bb:b5:5b:0f:e6:5a:0a:35:d0:49:1d:84:04:
                    97:7f:af:c6:52:db:16:13:18:b2:cb:6d:69:46:d9:
                    af:5e:03:29:0e:ce:e2:6a:3c:66:7d:93:c3:b5:05:
                    f7:e5:d5:9b:34:d7:f0:e4:c7:21:f3:d4:9b:f4:1f:
                    c8:ec:7d:f7:94:d3:01:9a:c0:73:db:4b:bc:3f:f0:
                    34:95:64:ef:15:0b:c9:68:2d:6c:30:5f:ce:a7:86:
                    73:cc:03:ec:37:90:ce:c4:82:f7:a4:db:cd:a0:55:
                    e8:98:4b:10:41:d9:d1:07:df:9f:0a:95:3d:35:87:
                    60:3e:9e:ea:39:3e:cd:20:8c:38:c2:c4:e8:64:8f:
                    a6:41:1f:8e:59:7d:9e:ba:ef:9c:97:20:42:7a:51:
                    96:63:60:a5:11:24:42:17:c4:02:24:3a:bd:72:a1:
                    aa:8a:bc:e3:cc:5b:d9:0d:96:f2:3d:52:5e:ca:3a:
                    fb:be:45:d0:c9:1e:67:07:a0:10:da:9e:9b:71:75:
                    69:31:17:11:98:f1:7f:d3:65:42:e3:b3:87:25:b9:
                    77:63:1f:ef:d0:86:30:46:af:85:1e:c0:02:5c:7d:
                    fa:b0:78:13:23:d4:7b:eb:ad:b9:56:ef:3d:15:ec:
                    b1:6f:26:f8:0b:bd:96:80:5e:6b:18:17:62:31:d9:
                    46:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:AA:7C:35:0C:32:75:1C:5D:77:2D:FB:C4:CD:8D:B3:57:CC:70:93
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc2010c3-415c-4280-bb31-76acc02ed97d/33cc3bdd4edfc498d2c924783a40c9ff255120b8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.130.128.0-190.131.191.255
                  191.99.0.0/16
                  200.124.224.0/19
                  201.183.0.0/16
                IPv6:
                  2800:440::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27738

    Signature Algorithm: sha256WithRSAEncryption
         24:93:2a:00:2e:01:af:36:70:3d:d1:b4:39:03:15:1b:8f:e1:
         4d:00:80:fb:5b:c3:2e:75:8b:c5:64:41:20:cf:f0:b7:7c:c6:
         1c:9f:b1:a5:92:a4:d1:27:2d:88:c1:ea:b8:46:79:5f:40:33:
         38:e8:a4:af:0b:96:e6:08:4a:15:fd:db:ba:ac:e8:15:bc:8d:
         68:71:39:5b:45:bd:20:5d:e1:2a:9c:6a:48:15:b0:01:12:3f:
         31:4a:cf:59:3d:4f:ee:99:83:5c:fa:42:ec:d9:1d:e5:38:39:
         d1:8f:68:67:fc:7c:3e:e7:0a:1c:ba:2e:1c:2b:18:54:e1:62:
         8c:b0:62:03:0a:66:66:b3:c1:36:e3:13:3e:b0:c0:7a:a7:17:
         3b:d3:57:ab:b7:66:48:f5:3b:b3:39:47:e0:85:1b:ec:21:53:
         0d:4d:6a:47:4f:46:5c:53:21:98:8a:ac:b0:56:73:60:48:b9:
         e1:4e:1c:cd:7a:3b:e7:b1:88:3f:c4:82:1c:9f:e6:89:32:01:
         76:75:ec:00:ec:ec:6b:9b:3b:be:c6:35:50:94:4e:d1:f8:34:
         44:90:91:2a:db:cc:7a:9e:19:a7:08:46:22:f1:8c:15:b3:c9:
         98:0e:c0:c9:3d:28:ba:19:82:ae:d9:c5:ff:b8:23:5a:0f:48:
         6f:40:ab:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org