Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34e18d3ea5dcb7f18e4fa6049246285773a042da.cer
File:                     34e18d3ea5dcb7f18e4fa6049246285773a042da.cer (raw, json)
Hash identifier:          taknM3Wdn2vXxfxkFowwR43iFiDZVFo6x6cmYya1Vhs=
Subject key identifier:   AA:AD:87:D3:42:14:36:ED:8B:86:6F:E7:43:38:C0:BE:1E:0F:2D:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01008640
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72f6cce7-9a01-411f-865f-e827ebee1137/34e18d3ea5dcb7f18e4fa6049246285773a042da.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72f6cce7-9a01-411f-865f-e827ebee1137/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:04:22 +0000
Certificate not after:    Fri 27 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 13878
                          AS: 15180
                          AS: 18644
                          AS: 19089
                          AS: 21911
                          IP: 187.18.48.0/20
                          IP: 187.95.192.0/20
                          IP: 189.36.0.0/17
                          IP: 189.89.96.0/19
                          IP: 189.89.192.0/20
                          IP: 200.99.0.0/16
                          IP: 200.143.0.0/18
                          IP: 200.162.0.0/17
                          IP: 200.169.96.0/20
                          IP: 200.189.160.0/19
                          IP: 200.192.160.0/20
                          IP: 200.198.64.0/18
                          IP: 200.202.112.0/20
                          IP: 200.215.176.0/20
                          IP: 200.225.80.0/20
                          IP: 201.77.192.0/18
                          IP: 201.84.0.0/15
                          IP: 2001:12c8::/32
                          IP: 2804:38::/32
                          IP: 2804:144::/32
                          IP: 2804:2ae4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16811584 (0x1008640)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:04:22 2023 GMT
            Not After : Sep 27 15:00:00 2024 GMT
        Subject: CN=34e18d3ea5dcb7f18e4fa6049246285773a042da
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:a4:f6:95:9b:89:14:04:d5:17:5c:a1:7b:20:
                    ea:bc:a8:4d:e6:49:cb:bd:f3:23:d2:62:2b:9d:2b:
                    95:9d:07:9e:dd:37:8d:c5:62:78:79:d1:ca:19:cf:
                    86:d0:8e:f7:4d:03:8e:f6:22:a7:d1:f2:e6:9d:b0:
                    16:7b:30:6a:05:84:ad:81:35:b0:37:40:27:a3:ac:
                    31:c1:1d:cc:80:0e:88:59:16:e3:cc:fe:be:9b:ac:
                    41:8c:d6:d1:d8:06:a1:be:31:05:11:05:63:9c:c7:
                    43:1f:72:c1:e1:36:79:98:41:b9:24:66:c9:f5:96:
                    5b:3f:e9:c0:d7:d7:52:0c:4f:5e:38:d0:7e:f8:b5:
                    29:75:3b:e2:b2:87:cd:49:b1:a9:57:70:1f:05:16:
                    ce:8e:69:f2:80:4e:17:18:89:a3:85:89:49:9c:0a:
                    05:a0:34:5e:8f:d4:2e:31:f5:f0:d7:31:44:86:09:
                    a7:1b:49:a0:96:90:5e:ca:ee:e7:77:ac:e8:88:74:
                    91:c2:94:f0:d6:1d:11:62:17:60:c0:ac:3d:d4:97:
                    e5:d0:19:59:e2:ca:8b:fe:71:5a:6f:ad:9e:9c:c0:
                    3c:49:4e:8f:f6:f4:0a:9d:82:b8:37:52:51:9c:19:
                    ab:d9:17:f8:22:ed:0b:bd:e8:13:12:af:a6:a8:db:
                    d4:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:AD:87:D3:42:14:36:ED:8B:86:6F:E7:43:38:C0:BE:1E:0F:2D:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72f6cce7-9a01-411f-865f-e827ebee1137/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72f6cce7-9a01-411f-865f-e827ebee1137/34e18d3ea5dcb7f18e4fa6049246285773a042da.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.18.48.0/20
                  187.95.192.0/20
                  189.36.0.0/17
                  189.89.96.0/19
                  189.89.192.0/20
                  200.99.0.0/16
                  200.143.0.0/18
                  200.162.0.0/17
                  200.169.96.0/20
                  200.189.160.0/19
                  200.192.160.0/20
                  200.198.64.0/18
                  200.202.112.0/20
                  200.215.176.0/20
                  200.225.80.0/20
                  201.77.192.0/18
                  201.84.0.0/15
                IPv6:
                  2001:12c8::/32
                  2804:38::/32
                  2804:144::/32
                  2804:2ae4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13878
                  15180
                  18644
                  19089
                  21911

    Signature Algorithm: sha256WithRSAEncryption
         73:aa:c8:1a:a4:83:40:7e:02:be:87:72:49:c0:67:65:70:c8:
         00:ec:53:7b:00:ad:b3:e8:9f:62:71:52:66:c9:5a:ea:96:24:
         81:dd:57:99:1e:3a:4b:81:7e:de:a1:3f:12:a5:09:c3:f1:97:
         9d:83:71:8a:6f:73:d9:97:87:e1:31:94:d1:a2:c3:57:72:e2:
         cf:59:7f:7b:f8:00:cc:aa:33:74:19:60:98:88:e6:b8:82:9b:
         65:db:ce:84:47:87:e3:a5:0e:d2:dc:ac:18:e5:69:71:c7:c2:
         0e:0e:16:4e:b5:39:c0:3b:59:f4:26:ae:b9:70:15:e9:27:92:
         cb:fb:85:1f:56:a1:04:0f:ac:55:7f:6b:e3:ad:be:a3:74:df:
         d6:16:67:d5:21:f3:4a:6d:93:00:11:9c:81:2d:a6:97:85:e9:
         bc:90:e8:0a:f6:52:df:c8:e7:a6:59:68:8a:f5:e8:dc:6b:c3:
         de:a8:fb:e2:dd:ab:94:87:0c:87:66:8d:63:df:ec:ae:e9:f6:
         1a:f4:46:d4:d4:4f:e8:23:9f:e2:79:e1:ec:34:ac:a1:01:f2:
         5a:83:c1:09:c3:77:b3:00:a3:f3:28:f0:3d:b4:05:eb:55:6b:
         63:02:e6:05:ec:8b:d5:82:96:b9:2e:32:36:8c:fa:c6:9a:8d:
         14:13:6c:88
-----BEGIN CERTIFICATE-----
MIIGXzCCBUegAwIBAgIEAQCGQDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTEwNzE5MDQyMloXDTI0MDkyNzE1MDAw
MFowMzExMC8GA1UEAxMoMzRlMThkM2VhNWRjYjdmMThlNGZhNjA0OTI0NjI4NTc3
M2EwNDJkYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIGk9pWbiRQE
1RdcoXsg6ryoTeZJy73zI9JiK50rlZ0Hnt03jcVieHnRyhnPhtCO900DjvYip9Hy
5p2wFnswagWErYE1sDdAJ6OsMcEdzIAOiFkW48z+vpusQYzW0dgGob4xBREFY5zH
Qx9yweE2eZhBuSRmyfWWWz/pwNfXUgxPXjjQfvi1KXU74rKHzUmxqVdwHwUWzo5p
8oBOFxiJo4WJSZwKBaA0Xo/ULjH18NcxRIYJpxtJoJaQXsru53es6Ih0kcKU8NYd
EWIXYMCsPdSX5dAZWeLKi/5xWm+tnpzAPElOj/b0Cp2CuDdSUZwZq9kX+CLtC73o
ExKvpqjb1H8CAwEAAaOCA44wggOKMB0GA1UdDgQWBBSqrYfTQhQ27YuGb+dDOMC+
Hg8tfDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83MmY2Y2NlNy05YTAx
LTQxMWYtODY1Zi1lODI3ZWJlZTExMzcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzJmNmNjZTctOWEwMS00
MTFmLTg2NWYtZTgyN2ViZWUxMTM3LzM0ZTE4ZDNlYTVkY2I3ZjE4ZTRmYTYwNDky
NDYyODU3NzNhMDQyZGEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
owYIKwYBBQUHAQcBAf8EgZMwgZAwagQCAAEwZAMEBLsSMAMEBLtfwAMEB70kAAME
Bb1ZYAMEBL1ZwAMDAMhjAwQGyI8AAwQHyKIAAwQEyKlgAwQFyL2gAwQEyMCgAwQG
yMZAAwQEyMpwAwQEyNewAwQEyOFQAwQGyU3AAwMByVQwIgQCAAIwHAMFACABEsgD
BQAoBAA4AwUAKAQBRAMFACgEKuQwKQYIKwYBBQUHAQgBAf8EGjAYoBYwFAICNjYC
AjtMAgJI1AICSpECAlWXMA0GCSqGSIb3DQEBCwUAA4IBAQBzqsgapINAfgK+h3JJ
wGdlcMgA7FN7AK2z6J9icVJmyVrqliSB3VeZHjpLgX7eoT8SpQnD8Zedg3GKb3PZ
l4fhMZTRosNXcuLPWX97+ADMqjN0GWCYiOa4gptl286ER4fjpQ7S3KwY5Wlxx8IO
DhZOtTnAO1n0Jq65cBXpJ5LL+4UfVqEED6xVf2vjrb6jdN/WFmfVIfNKbZMAEZyB
LaaXhem8kOgK9lLfyOemWWiK9ejca8PeqPvi3auUhwyHZo1j3+yu6fYa9EbU1E/o
I5/ieeHsNKyhAfJag8EJw3ezAKPzKPA9tAXrVWtjAuYF7IvVgpa5LjI2jPrGmo0U
E2yI
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org