Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer
File:                     3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.cer (raw, json)
Hash identifier:          I4Dr/WMvuLcvJI6PnrfeDeMc5KkhepLfjP6bdPH5004=
Subject key identifier:   AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106333D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Oct 2019 15:30:35 +0000
Certificate not after:    Sat 14 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 22566
                          AS: 22889
                          AS: 28438
                          IP: 167.249.116.0/22
                          IP: 170.150.12.0/22
                          IP: 170.247.224.0/22
                          IP: 187.248.0.0/15
                          IP: 187.251.0.0/19
                          IP: 189.201.128.0/18
                          IP: 200.66.96.0/20
                          IP: 201.157.0.0/17
                          IP: 201.161.0.0/18
                          IP: 201.174.0.0/16
                          IP: 2001:1238::/32
                          IP: 2806:20d::/32
                          IP: 2806:2b0::/32
                          IP: 2806:320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17183549 (0x106333d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 15:30:35 2019 GMT
            Not After : Dec 14 14:00:00 2024 GMT
        Subject: CN=3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:be:17:f3:6d:7e:13:9a:cc:00:5f:89:5f:05:
                    56:7c:f7:ce:ab:28:b2:3e:d2:60:ca:31:fc:84:00:
                    3b:f0:5b:a7:cf:ce:d0:20:3d:17:c7:ac:54:d1:54:
                    0b:58:3c:45:c3:bf:18:ae:67:72:f9:3d:6a:bd:14:
                    62:37:57:69:d1:b4:f4:0b:14:42:ba:3d:8a:0e:57:
                    ef:2c:67:bf:aa:68:f6:c0:87:5e:b4:bd:76:4b:c1:
                    a2:ea:ca:18:c3:21:ec:45:34:c8:1a:af:dd:3d:31:
                    d5:de:4e:1e:20:c3:96:23:d2:36:0a:2e:49:a9:bf:
                    33:6f:fd:31:52:99:bc:ca:5f:a9:96:bf:dc:f4:bc:
                    d4:77:45:ee:dc:16:d6:f4:cf:e5:0d:df:6a:22:b6:
                    65:43:57:e9:57:84:58:bc:4b:ed:b8:a5:d4:9c:e6:
                    ec:a7:6b:68:5a:6f:14:e4:4f:0c:38:79:fc:af:78:
                    2f:7b:19:7c:2c:51:2e:98:d7:b8:28:84:4f:73:17:
                    08:44:43:52:1d:62:7b:7b:47:bc:d2:e6:92:1f:a3:
                    57:bc:47:13:dc:85:fe:7f:64:d5:16:d7:ff:a8:42:
                    03:ee:74:2a:69:ee:1f:0f:89:45:2d:6a:5b:52:41:
                    d6:1f:e3:23:0d:77:d5:cc:db:24:a8:4c:52:a2:d6:
                    6e:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:7D:7D:7E:A0:9E:88:51:25:89:0B:4F:D1:63:23:CE:9F:36:81:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6deb39b2-ee49-4619-998f-736886169694/3cdb9e7a87d72c90ba758a0dc70f09b3281cb0f1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.116.0/22
                  170.150.12.0/22
                  170.247.224.0/22
                  187.248.0.0/15
                  187.251.0.0/19
                  189.201.128.0/18
                  200.66.96.0/20
                  201.157.0.0/17
                  201.161.0.0/18
                  201.174.0.0/16
                IPv6:
                  2001:1238::/32
                  2806:20d::/32
                  2806:2b0::/32
                  2806:320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22566
                  22889
                  28438

    Signature Algorithm: sha256WithRSAEncryption
         15:3c:1a:99:80:6c:15:f0:0f:77:71:3c:46:e3:00:d6:0c:2b:
         cc:25:0d:c7:2d:33:79:cc:3a:c7:80:90:37:30:96:3b:6f:51:
         6c:11:3c:71:20:9a:23:62:fc:2d:eb:b5:cc:dc:95:8f:1d:c7:
         34:f9:1c:52:b7:8c:f2:0b:1c:bb:76:25:02:cd:b9:93:0c:b8:
         ed:06:c1:8c:9f:c6:f3:62:7e:fc:fc:d0:83:e2:c4:27:0b:6f:
         d8:84:91:00:40:79:20:6d:b0:b6:2c:04:e3:ea:00:01:ea:0f:
         5a:53:7f:e2:79:67:62:b6:bd:76:d5:32:16:2c:ff:4a:ec:ab:
         56:fa:67:04:b7:39:06:06:34:48:d0:7f:93:4e:b8:d3:08:fa:
         18:41:79:93:26:8b:b1:90:2d:de:a7:55:3d:37:b8:ad:93:0f:
         01:ed:34:80:cb:6a:77:a0:26:8b:2a:0e:94:78:2b:66:eb:bb:
         6f:fc:85:0f:47:39:8b:72:7b:d6:11:a8:ca:43:70:e7:0f:e2:
         ca:9d:c2:e3:42:d6:e5:90:37:4c:23:de:91:b6:c0:53:dd:2d:
         01:a6:b4:9c:ba:0e:66:09:dd:66:5e:0e:d4:f2:ef:d1:31:f3:
         0a:73:4a:bb:20:e7:c8:75:43:97:50:6b:16:e1:e4:5c:c1:bc:
         94:49:eb:76
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org