Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39c565bbc1beca70ca953d23feff753b392a17a7.cer
File:                     39c565bbc1beca70ca953d23feff753b392a17a7.cer (raw, json)
Hash identifier:          kC1gDtJgAUOK8Nf4sIAYAXACKLcIc3FO+8K0puAObn8=
Subject key identifier:   87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F767BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:53 +0000
Certificate not after:    Mon 30 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 27951
                          IP: 132.255.20.0/22
                          IP: 138.117.108.0/22
                          IP: 168.90.12.0/22
                          IP: 170.246.112.0/22
                          IP: 170.254.228.0/22
                          IP: 181.118.144.0/20
                          IP: 181.225.64.0/20
                          IP: 190.0.240.0/21
                          IP: 190.14.224.0/19
                          IP: 190.107.16.0/20
                          IP: 190.121.128.0/19
                          IP: 200.110.168.0/21
                          IP: 2800:490::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16213951 (0xf767bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:53 2017 GMT
            Not After : Sep 30 05:00:00 2024 GMT
        Subject: CN=39c565bbc1beca70ca953d23feff753b392a17a7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:1a:8b:3a:02:9c:e6:94:40:9c:ac:b4:98:
                    f5:18:76:a7:3a:fb:69:9c:6d:7a:5d:cc:af:d9:20:
                    b0:81:8b:61:54:d5:c3:a3:23:56:84:65:8e:99:b1:
                    28:ab:0e:be:60:74:9e:d4:e5:7d:9b:6e:b5:81:29:
                    08:5c:9d:ae:e8:51:82:4b:ce:df:15:aa:07:10:a2:
                    06:31:c5:ca:38:78:98:18:ea:40:cc:81:c3:34:22:
                    f0:bc:be:34:d6:f8:be:f7:23:19:dc:92:33:75:48:
                    c3:50:c8:e2:93:fd:cd:e9:12:43:2c:bc:f4:e3:41:
                    b1:1f:af:4d:27:43:01:98:a8:71:64:8a:d9:89:8e:
                    2e:d1:b7:b7:dc:6f:bb:f6:b4:8e:4b:d3:1e:bd:b6:
                    e9:22:d5:4e:ed:04:03:95:7e:36:b0:56:1e:47:30:
                    9b:08:b1:d8:7c:1f:e7:b9:0d:85:9f:cb:fc:77:a7:
                    60:30:54:62:c7:0e:6a:89:06:d8:33:92:2a:0f:dc:
                    81:26:51:2a:14:8a:d4:ca:3e:cf:8a:9a:d1:3a:1f:
                    10:d3:1e:e9:25:5e:b1:dc:5f:eb:33:f6:93:0f:a2:
                    de:4b:43:72:28:8e:dd:1a:6e:5d:96:82:15:00:71:
                    36:ac:51:54:9f:9f:8b:ef:79:de:9c:dc:c4:b1:8a:
                    03:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:B0:98:23:1A:C1:0E:6B:4E:27:AF:A8:8C:17:E4:9B:20:F2:1A:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a639b80b-9d59-4402-b477-a2b249caeee9/39c565bbc1beca70ca953d23feff753b392a17a7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.20.0/22
                  138.117.108.0/22
                  168.90.12.0/22
                  170.246.112.0/22
                  170.254.228.0/22
                  181.118.144.0/20
                  181.225.64.0/20
                  190.0.240.0/21
                  190.14.224.0/19
                  190.107.16.0/20
                  190.121.128.0/19
                  200.110.168.0/21
                IPv6:
                  2800:490::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27951

    Signature Algorithm: sha256WithRSAEncryption
         00:44:ae:0c:68:df:5d:95:88:47:32:0b:da:29:6c:1f:8e:68:
         d1:1c:a0:d8:eb:f8:7a:ca:49:14:07:c4:02:58:a1:99:42:76:
         6f:ec:6a:8f:8b:49:22:f6:5c:19:bc:f7:df:47:31:76:2b:01:
         fd:24:7b:cf:bf:40:35:c3:f2:d5:1f:98:13:e6:fc:ca:a0:e5:
         36:ab:ed:fc:60:22:5e:3b:05:e1:b5:48:06:4a:2b:c9:fa:02:
         4e:3e:17:b8:19:c9:46:a3:65:eb:67:50:8d:c5:1a:06:f0:96:
         84:e1:bf:7c:96:62:24:d9:70:b5:b2:ab:9b:44:2e:73:c3:e8:
         2a:1a:35:cf:bb:54:fe:ad:8e:4e:5c:65:55:cf:a5:c2:10:03:
         31:f8:e8:27:95:36:08:4a:fd:ba:84:20:d8:29:6a:6e:0b:af:
         15:eb:8d:1b:91:68:5e:b1:d2:1e:dd:9b:f8:4d:d5:c0:40:a1:
         0e:af:0f:fe:8e:df:3c:7b:b0:8c:7b:41:11:f3:57:33:ab:b4:
         e8:69:68:4d:4b:a8:a9:c0:10:0a:05:53:46:59:02:d5:0a:18:
         51:22:76:4b:e4:8b:14:d0:e4:2d:f7:84:ce:f2:9c:48:f3:54:
         0b:fe:ca:95:3d:c5:9b:3a:5f:6a:98:fb:fd:07:30:d6:a4:0d:
         fa:c2:c0:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:23 2024 by rpki-client on console-ams.rpki-client.org