Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3968983ae3e573d5180661f0cb958083291bd53c.cer
File:                     3968983ae3e573d5180661f0cb958083291bd53c.cer (raw, json)
Hash identifier:          KQVEk+PubWC1ubrgSaGt2ApS2Ud5pYF9wJh1Aw+i/6I=
Subject key identifier:   87:E4:DD:A3:44:96:D1:9B:3C:DC:E3:E3:26:76:6B:94:43:EB:F6:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3B510
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ff10ba61-1c67-4258-8bb2-9ea3d807b1c5/3968983ae3e573d5180661f0cb958083291bd53c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ff10ba61-1c67-4258-8bb2-9ea3d807b1c5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 22:04:10 +0000
Certificate not after:    Mon 10 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 18822
                          IP: 181.190.0.0/16
                          IP: 190.8.64.0/18
                          IP: 190.96.0.0 -- 190.96.95.255
                          IP: 190.98.192.0/18
                          IP: 190.153.128.0/17
                          IP: 200.74.160.0/19
                          IP: 200.119.224.0/19
                          IP: 200.124.32.0/19
                          IP: 2800:8e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14923024 (0xe3b510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 22:04:10 2023 GMT
            Not After : Jun 10 06:00:00 2024 GMT
        Subject: CN=3968983ae3e573d5180661f0cb958083291bd53c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:8a:fe:1e:2d:6a:08:91:70:24:86:6a:25:46:
                    a9:d2:79:d7:b6:91:be:d5:6f:20:e6:e5:e5:d7:2b:
                    42:46:89:36:79:aa:db:a3:a9:9c:bb:6d:6e:57:a8:
                    fb:68:20:4e:fc:69:45:43:ec:85:62:d3:be:1b:72:
                    26:84:02:9b:ea:bd:37:32:a0:a5:4a:fd:53:b2:31:
                    f9:8f:09:8f:a7:e1:7a:ec:07:0b:d0:c9:c7:ed:d4:
                    a9:d4:ea:c5:7a:fc:7e:7c:2d:5f:03:aa:44:b7:49:
                    8f:ca:ab:a5:f3:a2:d3:63:53:41:56:ad:1f:07:80:
                    9b:b9:c7:c4:4c:52:9f:cb:d0:8d:63:a0:e9:67:01:
                    13:1b:0f:80:07:d5:c3:3d:20:6a:69:73:c8:e1:94:
                    58:38:e6:b8:01:87:bf:74:f7:ee:89:bd:28:3c:fb:
                    a7:6a:42:a8:ed:ce:fe:ca:a2:6a:f8:fe:66:d2:a1:
                    81:98:57:ac:58:fc:30:57:2f:94:9b:4e:01:ad:da:
                    bd:95:e8:a7:2b:14:12:cf:72:16:6a:14:54:7f:95:
                    cb:2d:b2:e6:4a:ea:93:01:dc:84:62:bb:86:ff:c7:
                    f3:ee:f2:6e:b0:ec:73:e0:0e:d5:ee:b0:16:bd:d3:
                    53:b2:85:bc:b2:bc:5b:f6:8e:13:b6:61:eb:80:c1:
                    5b:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:E4:DD:A3:44:96:D1:9B:3C:DC:E3:E3:26:76:6B:94:43:EB:F6:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ff10ba61-1c67-4258-8bb2-9ea3d807b1c5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ff10ba61-1c67-4258-8bb2-9ea3d807b1c5/3968983ae3e573d5180661f0cb958083291bd53c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.190.0.0/16
                  190.8.64.0/18
                  190.96.0.0-190.96.95.255
                  190.98.192.0/18
                  190.153.128.0/17
                  200.74.160.0/19
                  200.119.224.0/19
                  200.124.32.0/19
                IPv6:
                  2800:8e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18822

    Signature Algorithm: sha256WithRSAEncryption
         30:b0:3d:1c:f8:45:02:f1:f3:61:5c:64:ed:95:36:e3:9f:38:
         0e:6d:62:82:b6:53:25:51:74:e1:1e:c7:66:c5:30:1a:17:7f:
         43:ed:e0:f6:e4:7a:90:54:e8:5a:1b:ff:fa:45:3e:c9:73:6e:
         65:14:f9:ac:e1:6d:d0:76:f5:6b:8b:48:4c:13:16:b5:91:44:
         80:01:59:da:7f:7a:11:87:5d:18:2e:c1:2c:a3:41:96:e3:3e:
         b0:0f:e3:8a:ae:8e:fc:c0:05:96:26:24:f4:ed:dc:1f:19:d1:
         20:47:01:b4:87:91:20:be:43:bb:da:3b:35:a1:f1:aa:06:46:
         0e:9c:00:37:54:03:1a:9b:fb:b9:d2:82:63:6f:39:cb:ab:60:
         ac:63:ab:1e:da:f5:14:0e:bb:68:28:d0:34:f3:da:cf:5c:d9:
         8f:aa:92:8b:4a:33:cd:fa:ba:88:a0:37:f3:93:40:44:fc:74:
         a4:74:10:aa:38:26:32:fa:33:83:07:24:19:3f:0a:3d:96:bc:
         06:4c:29:3e:13:f5:92:0c:c9:0f:fd:3d:0c:2d:d6:23:91:f3:
         f1:e4:68:95:85:20:c4:ef:85:0c:6c:73:d2:cc:2a:dd:7f:23:
         e2:22:e1:4d:ac:38:36:65:39:55:87:c5:84:32:70:10:1e:ef:
         3e:93:d0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org