Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33d1fe563540701dba61e3a607b7a5d21144eed7.cer
File:                     33d1fe563540701dba61e3a607b7a5d21144eed7.cer (raw, json)
Hash identifier:          g/0mWI0x7ADTvfFXleZKWZzc+RY/3HGku8rviQN3msc=
Subject key identifier:   FE:6D:A3:F1:F6:67:C8:6D:41:A7:39:AA:A9:12:FE:86:5C:1E:FC:83
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100917B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/33d1fe563540701dba61e3a607b7a5d21144eed7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:06:59 +0000
Certificate not after:    Mon 11 Aug 2025 20:42:02 +0000
Subordinate resources:    AS: 53046
                          AS: 61600
                          IP: 45.186.143.0/24
                          IP: 143.208.160.0/22
                          IP: 177.93.120.0/21
                          IP: 177.101.16.0/20
                          IP: 200.39.64.0/19
                          IP: 2801:80:330::/48
                          IP: 2801:80:37a0::/48
                          IP: 2804:1f04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16814459 (0x100917b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:06:59 2023 GMT
            Not After : Aug 11 20:42:02 2025 GMT
        Subject: CN=33d1fe563540701dba61e3a607b7a5d21144eed7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:cc:21:75:b6:53:dd:46:7e:6a:cc:3c:ea:80:
                    fb:77:3a:05:95:7b:36:1f:d7:47:48:0b:d7:33:99:
                    6f:3d:16:0e:80:40:a7:25:7d:ad:3a:91:d7:dc:0a:
                    05:bb:ac:d0:60:47:69:0d:9c:6b:83:77:b3:d9:12:
                    d8:de:71:cd:4a:39:7a:60:dd:fc:89:c0:44:a1:7e:
                    af:22:3d:27:a6:47:9c:dc:85:f9:da:61:b7:60:a3:
                    9e:46:d6:0a:43:72:62:66:78:09:70:63:d1:c2:d5:
                    d0:fb:86:60:a0:36:52:42:31:9b:d4:c1:93:99:08:
                    e4:07:6f:a9:ee:01:5a:b8:df:73:a0:5c:13:8e:e1:
                    0a:0f:07:35:19:2e:39:0a:7e:64:9c:9a:f2:8f:28:
                    06:84:3a:f1:91:3d:3a:14:6e:ff:1c:44:46:2b:4c:
                    15:49:c2:6a:ef:df:58:45:d9:91:02:06:9d:88:44:
                    01:88:7b:f8:d0:b1:8d:a5:25:57:21:e7:67:5d:9a:
                    5b:57:17:6b:21:83:cd:03:6f:f4:d9:2b:ed:17:17:
                    f7:45:59:5c:93:15:5e:4c:8c:70:f4:1e:d0:8f:e8:
                    71:2b:5b:4c:de:f6:7d:60:31:64:cb:96:58:27:d0:
                    3f:c6:c3:5e:21:89:31:6e:c1:d7:0d:66:16:dc:11:
                    76:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:6D:A3:F1:F6:67:C8:6D:41:A7:39:AA:A9:12:FE:86:5C:1E:FC:83
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/870dedec-9599-47b2-97d9-4cd84082719b/33d1fe563540701dba61e3a607b7a5d21144eed7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.143.0/24
                  143.208.160.0/22
                  177.93.120.0/21
                  177.101.16.0/20
                  200.39.64.0/19
                IPv6:
                  2801:80:330::/48
                  2801:80:37a0::/48
                  2804:1f04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53046
                  61600

    Signature Algorithm: sha256WithRSAEncryption
         4a:50:2b:17:6e:5d:a8:f2:95:b3:ce:96:f6:04:0f:8e:b7:20:
         77:cb:41:61:24:f2:20:84:b7:9f:22:3b:37:1f:e7:a0:b4:ed:
         71:f1:12:ef:48:6a:51:f6:9a:41:e3:28:7e:35:d0:0e:d9:26:
         33:89:1a:c4:1f:50:31:db:da:0f:a2:b3:5c:cb:6d:f9:6f:2e:
         11:16:83:22:7b:8d:76:ab:9f:2c:76:38:ee:c8:56:15:53:44:
         3f:53:b9:b2:9e:61:f7:4d:87:f7:20:6b:0e:2a:48:90:63:46:
         7f:f0:7e:b4:80:f8:c2:c5:6e:af:70:00:a2:07:3e:0d:4c:51:
         bc:e4:bd:c4:54:aa:7d:d1:f2:60:b2:6e:8c:4c:95:45:4c:69:
         95:73:7a:22:da:36:26:f8:11:e6:d1:16:e5:7a:b7:06:c5:16:
         08:d0:b3:01:eb:f9:71:dd:db:99:9e:57:e3:0b:c0:1b:f2:fb:
         5c:0a:bf:4b:6a:29:fd:23:f4:21:8a:30:68:db:83:e9:de:42:
         7c:4c:88:35:3d:63:ff:be:50:96:39:80:26:e9:b5:21:03:0d:
         94:92:f9:66:e2:7d:53:7e:cc:f0:13:e6:1b:13:15:13:90:6d:
         8f:00:0c:bd:2b:9e:7c:e1:13:79:69:6f:35:2e:9a:3f:d3:4d:
         f8:fb:05:71
-----BEGIN CERTIFICATE-----
MIIGCTCCBPGgAwIBAgIEAQCRezANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTEwNzE5MDY1OVoXDTI1MDgxMTIwNDIw
MlowMzExMC8GA1UEAxMoMzNkMWZlNTYzNTQwNzAxZGJhNjFlM2E2MDdiN2E1ZDIx
MTQ0ZWVkNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAK/MIXW2U91G
fmrMPOqA+3c6BZV7Nh/XR0gL1zOZbz0WDoBApyV9rTqR19wKBbus0GBHaQ2ca4N3
s9kS2N5xzUo5emDd/InARKF+ryI9J6ZHnNyF+dpht2CjnkbWCkNyYmZ4CXBj0cLV
0PuGYKA2UkIxm9TBk5kI5Advqe4BWrjfc6BcE47hCg8HNRkuOQp+ZJya8o8oBoQ6
8ZE9OhRu/xxERitMFUnCau/fWEXZkQIGnYhEAYh7+NCxjaUlVyHnZ12aW1cXayGD
zQNv9Nkr7RcX90VZXJMVXkyMcPQe0I/ocStbTN72fWAxZMuWWCfQP8bDXiGJMW7B
1w1mFtwRdlcCAwEAAaOCAzgwggM0MB0GA1UdDgQWBBT+baPx9mfIbUGnOaqpEv6G
XB78gzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84NzBkZWRlYy05NTk5
LTQ3YjItOTdkOS00Y2Q4NDA4MjcxOWIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODcwZGVkZWMtOTU5OS00
N2IyLTk3ZDktNGNkODQwODI3MTliLzMzZDFmZTU2MzU0MDcwMWRiYTYxZTNhNjA3
YjdhNWQyMTE0NGVlZDcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBY
BggrBgEFBQcBBwEB/wRJMEcwJAQCAAEwHgMEAC26jwMEAo/QoAMEA7FdeAMEBLFl
EAMEBcgnQDAfBAIAAjAZAwcAKAEAgAMwAwcAKAEAgDegAwUAKAQfBDAfBggrBgEF
BQcBCAEB/wQQMA6gDDAKAgMAzzYCAwDwoDANBgkqhkiG9w0BAQsFAAOCAQEASlAr
F25dqPKVs86W9gQPjrcgd8tBYSTyIIS3nyI7Nx/noLTtcfES70hqUfaaQeMofjXQ
DtkmM4kaxB9QMdvaD6KzXMtt+W8uERaDInuNdqufLHY47shWFVNEP1O5sp5h902H
9yBrDipIkGNGf/B+tID4wsVur3AAogc+DUxRvOS9xFSqfdHyYLJujEyVRUxplXN6
Ito2JvgR5tEW5Xq3BsUWCNCzAev5cd3bmZ5X4wvAG/L7XAq/S2op/SP0IYowaNuD
6d5CfEyINT1j/75QljmAJum1IQMNlJL5ZuJ9U37M8BPmGxMVE5BtjwAMvSuefOET
eWlvNS6aP9NN+PsFcQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org