Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3ec2580c7b1428c52b125216e3788d1f223af85f.cer
File:                     3ec2580c7b1428c52b125216e3788d1f223af85f.cer (raw, json)
Hash identifier:          dfweuQRpGl/2TJPDTrrUJ7eQwmsnNKDFp83sGnklbvs=
Subject key identifier:   D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5B48F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/3ec2580c7b1428c52b125216e3788d1f223af85f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Dec 2020 16:34:50 +0000
Certificate not after:    Thu 16 May 2024 06:00:00 +0000
Subordinate resources:    AS: 262186
                          IP: 138.0.116.0/22
                          IP: 177.93.32.0/19
                          IP: 181.225.96.0/20
                          IP: 186.96.96.0/19
                          IP: 186.148.160.0/19
                          IP: 186.179.96.0/20
                          IP: 186.190.224.0/21
                          IP: 190.2.208.0/21
                          IP: 190.13.80.0/21
                          IP: 191.97.0.0/20
                          IP: 191.102.64.0/18
                          IP: 192.144.112.0/22
                          IP: 200.69.64.0/19
                          IP: 2803:1a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15053967 (0xe5b48f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 10 16:34:50 2020 GMT
            Not After : May 16 06:00:00 2024 GMT
        Subject: CN=3ec2580c7b1428c52b125216e3788d1f223af85f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:9e:32:39:92:c2:a7:7b:89:59:4c:84:21:6a:
                    c8:da:b9:c2:40:ad:b8:34:82:33:16:69:25:e6:fc:
                    09:0c:98:83:23:81:0f:c8:36:00:c7:1f:8f:ed:fc:
                    a1:47:12:34:b6:52:66:fe:05:6c:ce:41:5e:99:b4:
                    b6:10:77:47:b1:df:ca:da:ba:63:69:4a:ab:29:4c:
                    2b:da:70:34:aa:21:e9:53:67:4e:b9:9c:e0:69:8c:
                    a1:37:b8:bd:72:c5:a7:2c:9b:bd:ea:01:69:95:65:
                    9e:81:08:3a:41:78:c5:31:c9:5f:f4:c3:21:07:18:
                    6a:f8:0d:6d:2c:ba:f1:c7:6c:f2:b4:a7:98:90:d3:
                    37:45:ae:6a:6d:1f:5e:90:6b:a0:75:c7:44:92:4a:
                    ff:e9:91:d1:17:4e:db:cd:90:29:1a:33:64:1e:b1:
                    06:81:87:8c:2b:d2:57:52:05:0d:f8:fb:7b:fa:a5:
                    22:b8:08:09:31:1a:0a:fb:97:3f:db:65:6a:84:a7:
                    bc:f1:83:62:62:f6:be:c0:5f:be:2c:67:21:c1:4e:
                    50:25:9d:71:eb:b1:40:20:0c:30:93:4d:25:89:f8:
                    64:97:69:4f:ce:9a:41:91:05:ff:a1:f0:9b:fb:f0:
                    ed:b7:38:20:41:2b:43:1c:ed:ba:37:93:ca:22:85:
                    55:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:17:91:28:50:01:02:52:FE:D7:CD:F1:D3:6D:F5:FA:E3:8E:1D:15
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b1f2c3b5-6c91-4aa2-9543-f982d3f165c1/3ec2580c7b1428c52b125216e3788d1f223af85f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.0.116.0/22
                  177.93.32.0/19
                  181.225.96.0/20
                  186.96.96.0/19
                  186.148.160.0/19
                  186.179.96.0/20
                  186.190.224.0/21
                  190.2.208.0/21
                  190.13.80.0/21
                  191.97.0.0/20
                  191.102.64.0/18
                  192.144.112.0/22
                  200.69.64.0/19
                IPv6:
                  2803:1a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262186

    Signature Algorithm: sha256WithRSAEncryption
         2d:ab:d6:3f:25:94:4f:0c:31:b5:2b:06:22:ac:6f:92:7a:b4:
         2a:35:18:06:c4:b2:4e:6d:74:fc:0f:80:c4:47:52:68:a4:9b:
         98:bd:e8:8e:4f:6b:de:43:87:57:37:39:1e:72:9c:1b:00:dc:
         6f:d4:e7:3d:f0:13:22:37:ee:4e:f9:40:6f:2d:09:5c:70:8e:
         ab:bb:85:84:2b:f7:d0:2a:cc:91:01:f3:cc:29:5c:a8:ab:6f:
         80:0f:83:5e:bc:b2:2f:d2:f4:1a:98:e0:ef:b8:93:70:3c:4e:
         44:3c:c2:3f:23:9f:3c:83:cb:5d:82:d0:82:09:73:54:06:9f:
         7d:e0:f4:e2:93:d3:72:43:6a:0d:45:3a:f2:07:41:c2:99:ee:
         bf:e2:ae:31:83:ae:d1:56:ae:54:06:ba:9a:7e:26:e1:bf:4c:
         6b:33:11:e2:58:f8:6b:67:15:5d:52:55:5e:f3:97:9b:f5:b8:
         4d:b4:ff:9a:b3:32:d6:e6:33:f8:68:9f:dd:bf:19:53:a8:31:
         12:1d:6f:ed:3c:ce:15:3e:93:3e:43:a9:27:e3:7b:bf:2c:49:
         f7:07:29:96:d6:ef:27:53:04:b4:96:2b:c9:17:6e:39:da:c3:
         b8:52:2f:e7:db:b1:0a:31:06:9d:75:ec:ac:bb:b2:f4:28:3a:
         ba:c0:ec:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org