Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/38187bd30f7a646eb9e9a8aafec0015a95a9041f.cer
File:                     38187bd30f7a646eb9e9a8aafec0015a95a9041f.cer (raw, json)
Hash identifier:          37yQsYMrFIBcXuzPvjw0HL0n0VVWlQ2b4+d0H/V6trg=
Subject key identifier:   81:EB:9C:2D:68:02:3B:A8:7B:E6:55:CA:14:18:1A:1E:91:C7:F2:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010592A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a9d737e6-7ccc-48b7-90fc-4bdea117b181/38187bd30f7a646eb9e9a8aafec0015a95a9041f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a9d737e6-7ccc-48b7-90fc-4bdea117b181/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 15:13:58 +0000
Certificate not after:    Tue 16 Sep 2025 15:00:00 +0000
Subordinate resources:    AS: 27674
                          IP: 200.16.116.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17142438 (0x10592a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  2 15:13:58 2024 GMT
            Not After : Sep 16 15:00:00 2025 GMT
        Subject: CN=38187bd30f7a646eb9e9a8aafec0015a95a9041f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:36:cd:57:01:aa:1a:56:00:12:f5:bf:87:51:
                    4b:7c:4c:95:b7:b0:8b:08:63:71:1d:da:f4:db:14:
                    c4:51:27:0e:48:24:96:73:0c:c7:06:ac:55:19:ee:
                    3d:2b:f4:47:5e:2e:90:32:47:b0:47:4d:90:e3:92:
                    62:b0:b0:15:bc:8b:77:80:f7:fc:43:9d:8d:7c:f4:
                    ff:78:fd:07:ca:5c:66:3b:6d:92:30:5c:9a:32:0f:
                    d7:bd:bd:10:11:1c:26:fd:04:31:eb:89:d8:c8:96:
                    d1:ff:bb:5a:3d:ed:07:0e:f9:e1:8e:26:45:dc:9c:
                    37:a5:5f:5a:a7:0a:88:7f:6e:4c:b5:dc:ba:2f:45:
                    30:f9:a0:30:55:15:ea:72:08:0a:59:77:15:0a:0f:
                    db:10:b5:7c:ac:a6:3b:57:91:46:d1:44:6b:7f:c1:
                    24:e3:16:38:7a:f6:b6:0f:ca:89:a8:1a:8f:3f:20:
                    10:c9:83:4f:b5:14:4d:ef:c9:2e:67:b9:df:2a:7e:
                    19:3f:2d:e0:ee:24:f5:a6:fd:8d:4e:39:0f:2d:e3:
                    0f:4d:cd:e5:b9:95:3d:2b:96:e2:b2:ec:0d:f7:df:
                    c8:b2:1c:0e:aa:8d:2c:2d:df:b1:13:b7:7b:d7:73:
                    ff:70:b1:67:ae:d3:0b:3c:3d:fa:4e:6c:a9:36:01:
                    0f:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:EB:9C:2D:68:02:3B:A8:7B:E6:55:CA:14:18:1A:1E:91:C7:F2:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a9d737e6-7ccc-48b7-90fc-4bdea117b181/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a9d737e6-7ccc-48b7-90fc-4bdea117b181/38187bd30f7a646eb9e9a8aafec0015a95a9041f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.16.116.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27674

    Signature Algorithm: sha256WithRSAEncryption
         39:25:e9:0c:98:f1:26:7e:38:6b:42:15:01:db:ef:46:14:69:
         95:7f:b4:42:62:f1:b9:4e:27:9b:86:1b:7d:8a:88:dd:2a:23:
         c5:ac:46:08:10:31:87:00:e7:bd:78:dd:01:b4:22:e8:be:32:
         a1:94:5d:53:69:6e:87:96:08:c4:40:84:63:e7:3e:dd:96:e2:
         e1:97:13:7f:5d:18:4f:95:2f:b4:68:43:0b:63:b3:1e:da:58:
         3d:ed:f2:ee:1f:cd:b6:0e:84:f4:42:37:12:96:de:ed:4d:99:
         f3:6c:89:c0:8f:82:f8:00:cd:32:65:a8:c4:fa:4d:67:56:77:
         32:cc:49:49:25:5d:d3:1b:38:c5:8a:d8:7f:b5:df:88:c8:7d:
         11:24:1e:97:ed:48:f7:0b:67:de:70:90:0e:2b:ff:f6:c5:d0:
         3f:57:0d:22:cb:13:9c:77:69:22:c5:4c:f2:94:f4:cb:54:7b:
         c0:b7:e2:f6:95:b9:c8:d4:35:76:e6:eb:b5:09:6b:05:8a:8e:
         30:75:43:71:5e:55:38:6e:14:02:4a:7a:92:41:d0:32:40:77:
         07:76:1d:0f:eb:c9:66:bc:ba:ed:e2:2f:28:49:96:fc:df:56:
         1b:3f:e8:31:82:66:82:f6:7b:f8:e1:55:d1:fb:2a:f8:05:67:
         52:b2:16:d8
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAQWSpjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDEwMjE1MTM1OFoXDTI1MDkxNjE1MDAw
MFowMzExMC8GA1UEAxMoMzgxODdiZDMwZjdhNjQ2ZWI5ZTlhOGFhZmVjMDAxNWE5
NWE5MDQxZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIQ2zVcBqhpW
ABL1v4dRS3xMlbewiwhjcR3a9NsUxFEnDkgklnMMxwasVRnuPSv0R14ukDJHsEdN
kOOSYrCwFbyLd4D3/EOdjXz0/3j9B8pcZjttkjBcmjIP1729EBEcJv0EMeuJ2MiW
0f+7Wj3tBw754Y4mRdycN6VfWqcKiH9uTLXcui9FMPmgMFUV6nIICll3FQoP2xC1
fKymO1eRRtFEa3/BJOMWOHr2tg/Kiagajz8gEMmDT7UUTe/JLme53yp+GT8t4O4k
9ab9jU45Dy3jD03N5bmVPSuW4rLsDfffyLIcDqqNLC3fsRO3e9dz/3CxZ67TCzw9
+k5sqTYBD9MCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBSB65wtaAI7qHvmVcoUGBoe
kcfyyTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hOWQ3MzdlNi03Y2Nj
LTQ4YjctOTBmYy00YmRlYTExN2IxODEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTlkNzM3ZTYtN2NjYy00
OGI3LTkwZmMtNGJkZWExMTdiMTgxLzM4MTg3YmQzMGY3YTY0NmViOWU5YThhYWZl
YzAwMTVhOTVhOTA0MWYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgQdDAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJsGjANBgkqhkiG9w0BAQsFAAOCAQEAOSXpDJjxJn44a0IVAdvvRhRp
lX+0QmLxuU4nm4YbfYqI3SojxaxGCBAxhwDnvXjdAbQi6L4yoZRdU2luh5YIxECE
Y+c+3Zbi4ZcTf10YT5UvtGhDC2OzHtpYPe3y7h/Ntg6E9EI3Epbe7U2Z82yJwI+C
+ADNMmWoxPpNZ1Z3MsxJSSVd0xs4xYrYf7XfiMh9ESQel+1I9wtn3nCQDiv/9sXQ
P1cNIssTnHdpIsVM8pT0y1R7wLfi9pW5yNQ1dubrtQlrBYqOMHVDcV5VOG4UAkp6
kkHQMkB3B3YdD+vJZry67eIvKEmW/N9WGz/oMYJmgvZ7+OFV0fsq+AVnUrIW2A==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org