Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3898fb652cb2ce2b3f098d921d8af3faec6d697e.cer
File:                     3898fb652cb2ce2b3f098d921d8af3faec6d697e.cer (raw, json)
Hash identifier:          8ggvMC5IbjjLbWBoqKRVZL9Xhfo5CZl8fi1bUTk3LRQ=
Subject key identifier:   EC:72:1B:85:21:88:DA:D3:03:D6:F5:B0:3C:59:89:06:9A:39:38:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01009549
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f3c1f411-fcad-4cf3-8602-83d987e5b955/3898fb652cb2ce2b3f098d921d8af3faec6d697e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f3c1f411-fcad-4cf3-8602-83d987e5b955/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:07:31 +0000
Certificate not after:    Mon 16 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 10715
                          AS: 11242
                          AS: 263300
                          IP: 150.162.0.0/16
                          IP: 200.18.0.0/20
                          IP: 200.19.96.0/20
                          IP: 200.135.0.0/16
                          IP: 200.237.192.0/18
                          IP: 2801:80:a80::/44
                          IP: 2801:84::/32
                          IP: 2804:1f2e::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16815433 (0x1009549)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:07:31 2023 GMT
            Not After : Dec 16 14:00:00 2024 GMT
        Subject: CN=3898fb652cb2ce2b3f098d921d8af3faec6d697e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:cb:37:59:b7:fa:c6:86:5d:e5:78:2a:ea:a9:
                    c7:36:6c:1f:c3:a3:81:8d:6f:4f:44:4a:c4:44:84:
                    8c:4d:3c:b7:ac:0c:6e:38:6b:83:a7:a1:37:60:14:
                    b5:1b:5c:d7:2b:a9:b0:b9:c2:ca:0c:e1:5d:94:d9:
                    d0:7c:97:6d:6f:e2:3c:c8:58:b3:2d:cc:ff:5f:df:
                    e6:ff:fb:b9:24:a1:f0:92:85:1f:7e:da:bd:a6:a0:
                    cc:39:fa:49:c9:6a:3a:e1:08:3e:ca:60:cd:89:13:
                    dd:29:e0:fd:48:98:23:2f:f9:93:cc:51:84:69:e7:
                    10:4f:f1:07:64:bc:ca:15:c5:82:92:ea:e7:1c:74:
                    8b:6f:c3:9e:7a:23:f9:7f:af:2d:b7:50:10:1b:0f:
                    ef:cf:ed:6d:0f:56:ad:fd:7f:49:a2:9a:ef:9e:e1:
                    0a:52:6d:8a:65:6a:63:26:e1:ce:5f:2a:8f:6d:a0:
                    b4:33:e0:85:64:51:05:e1:7a:8a:3b:4c:57:bd:2e:
                    e2:ce:c5:7a:aa:75:d6:03:0e:0b:d5:ea:c2:05:f6:
                    15:35:03:b4:ef:27:d6:63:9a:4f:95:18:7b:17:97:
                    96:d8:f0:fa:a5:c8:8a:24:46:d8:7e:fe:7f:fd:8c:
                    08:b4:62:80:68:b9:94:95:9d:04:89:a6:b4:1e:41:
                    8c:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:72:1B:85:21:88:DA:D3:03:D6:F5:B0:3C:59:89:06:9A:39:38:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f3c1f411-fcad-4cf3-8602-83d987e5b955/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f3c1f411-fcad-4cf3-8602-83d987e5b955/3898fb652cb2ce2b3f098d921d8af3faec6d697e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  150.162.0.0/16
                  200.18.0.0/20
                  200.19.96.0/20
                  200.135.0.0/16
                  200.237.192.0/18
                IPv6:
                  2801:80:a80::/44
                  2801:84::/32
                  2804:1f2e::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10715
                  11242
                  263300

    Signature Algorithm: sha256WithRSAEncryption
         5b:44:af:36:ae:56:0a:90:fa:03:c1:97:dc:8c:a5:cb:8e:80:
         46:21:75:bd:b1:4a:68:9b:db:3e:64:94:a8:0e:10:e2:9d:01:
         82:e1:4d:12:21:3e:6f:54:9a:b6:de:ce:d5:84:de:31:1a:b6:
         df:90:6c:66:f4:9a:ce:13:e1:34:cd:cd:94:61:8e:b8:3c:ef:
         13:22:82:24:f6:99:30:ab:a3:ba:83:6e:e4:46:3b:da:88:34:
         df:f7:63:9e:1b:7b:65:34:33:2f:04:2d:9c:eb:f2:e6:39:df:
         ec:40:31:a7:3b:67:2b:b9:51:f8:68:65:0f:c1:17:00:99:df:
         17:ea:f7:52:de:7a:4e:19:6d:0f:f1:f5:9c:c2:4d:34:d1:aa:
         b1:c0:d9:a7:0c:25:9d:d8:71:04:74:94:96:4e:76:8e:fb:f2:
         6f:95:4b:58:6a:95:8b:c8:12:31:ec:bb:4c:ca:85:ec:19:70:
         b1:8b:6d:48:a6:9c:94:f3:5d:d0:35:1f:ba:b7:44:2d:e8:7d:
         5e:e5:4a:e4:0c:d5:bc:31:58:e9:17:1c:19:10:06:29:2f:37:
         8e:d0:c0:47:aa:f4:89:a1:c5:ab:a7:93:a8:4c:8b:02:57:5c:
         ea:a2:51:16:2d:2c:bd:1f:e0:ce:84:22:3c:05:dc:5d:94:83:
         4d:02:37:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:23 2024 by rpki-client on console-ams.rpki-client.org