Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer
File:                     3f7aac1ebb4a94b7e0894611ee24072627e16f9e.cer (raw, json)
Hash identifier:          Pi3k5qpf9ZXukBWIRYsND3RzzxDtSpA/ZUsm46YnmU0=
Subject key identifier:   55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE8C49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:49 +0000
Certificate not after:    Thu 14 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 27678
                          AS: 52234
                          AS: 52265
                          AS: 52304 -- 52306
                          AS: 262147
                          IP: 190.124.24.0/22
                          IP: 200.1.120.0/22
                          IP: 200.7.4.0/22
                          IP: 200.16.112.0/22
                          IP: 2001:1398::/32
                          IP: 2801:0:50::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14584905 (0xde8c49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:49 2017 GMT
            Not After : Mar 14 06:00:00 2024 GMT
        Subject: CN=3f7aac1ebb4a94b7e0894611ee24072627e16f9e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e3:94:0c:24:2b:95:58:10:3e:28:9b:54:75:
                    a4:9b:b8:00:a8:48:ea:f3:c8:64:2c:df:a5:c9:02:
                    ee:2b:6c:b1:92:95:6f:a8:6e:af:e7:77:6a:0d:13:
                    05:89:96:b7:d1:bd:bf:f6:a9:9c:b6:8f:33:d3:56:
                    8d:60:2a:f6:d9:4a:48:b0:fe:0b:08:72:7f:49:86:
                    1e:a6:8a:eb:12:ff:db:f8:d6:a9:1f:77:20:9c:bf:
                    8d:4c:17:7b:5e:55:b2:a0:cd:97:9a:1f:1f:ee:6e:
                    83:6a:e4:6d:9b:64:1f:94:01:3b:af:28:6c:73:86:
                    62:de:0d:0a:0e:b9:2f:bb:b1:5f:b2:7f:49:09:b6:
                    19:0e:66:2b:01:c3:12:d2:fc:44:83:76:bf:bf:63:
                    f6:dd:78:b9:fd:ce:80:37:40:f5:eb:7a:78:50:27:
                    2c:80:d5:4c:94:6d:4a:ac:b6:61:46:1d:8c:ff:64:
                    ae:91:2a:b4:ac:50:6e:58:6d:13:ac:ac:89:64:74:
                    1b:e7:56:6e:c0:de:12:9e:05:a3:bf:6d:48:87:6b:
                    e7:d7:87:ba:0e:42:40:c6:4a:eb:41:87:6a:6f:79:
                    2e:52:76:6e:af:39:34:90:fc:13:d2:10:c5:6d:ef:
                    c6:47:ed:fe:0e:44:5d:35:31:ec:31:60:96:9e:1f:
                    dd:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:12:0B:90:13:D3:A8:DC:DD:47:B6:84:9A:E3:8D:91:F2:6B:12:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2be0a3e2-214e-4a58-8273-9bc3c1fcc022/3f7aac1ebb4a94b7e0894611ee24072627e16f9e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.124.24.0/22
                  200.1.120.0/22
                  200.7.4.0/22
                  200.16.112.0/22
                IPv6:
                  2001:1398::/32
                  2801:0:50::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27678
                  52234
                  52265
                  52304-52306
                  262147

    Signature Algorithm: sha256WithRSAEncryption
         42:c2:41:24:90:ec:f4:47:1c:7f:ad:c9:b8:d0:2a:3a:4c:db:
         d1:e0:fd:e5:d1:2c:1e:78:b5:06:59:2e:e2:bd:85:a0:2c:4a:
         8b:77:08:6d:d9:db:3a:3c:ec:38:4a:16:d3:a9:de:2b:ed:d4:
         44:61:6c:14:86:bf:34:f6:70:5f:50:ff:55:5e:fa:cf:65:ac:
         1c:f6:4e:78:cd:42:cf:82:ab:3b:ac:0e:99:7c:7e:cc:c7:e2:
         c7:35:60:be:b9:f4:26:5d:02:11:a0:48:27:51:0c:eb:6b:62:
         74:2b:0a:45:e7:ad:ee:d0:ea:2d:8f:34:60:cd:55:70:90:7d:
         a8:0c:72:f5:f4:ff:e7:41:77:d5:11:c7:b4:03:49:b2:63:85:
         28:08:d0:9b:ff:06:61:d4:ff:f7:e1:d5:dd:15:a3:3e:20:8e:
         32:b2:c8:fa:9c:14:d1:ef:8e:ac:cf:a3:2b:d6:3c:1b:ee:33:
         5a:f7:a2:21:d6:d5:2f:76:fa:38:cd:18:33:66:b8:dd:98:f2:
         9b:9f:d5:bb:f0:0e:fb:51:90:43:7b:62:70:7f:a0:95:3a:d1:
         70:b7:2c:48:c7:42:20:2f:32:fd:b3:4f:c9:de:f9:ce:ab:06:
         9c:0d:6c:74:b3:f6:ef:40:5b:95:ee:7f:e0:9b:6e:d9:47:f8:
         f8:05:66:31
-----BEGIN CERTIFICATE-----
MIIGDzCCBPegAwIBAgIEAN6MSTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0OVoXDTI0MDMxNDA2MDAw
MFowMzExMC8GA1UEAxMoM2Y3YWFjMWViYjRhOTRiN2UwODk0NjExZWUyNDA3MjYy
N2UxNmY5ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJzjlAwkK5VY
ED4om1R1pJu4AKhI6vPIZCzfpckC7itssZKVb6hur+d3ag0TBYmWt9G9v/apnLaP
M9NWjWAq9tlKSLD+Cwhyf0mGHqaK6xL/2/jWqR93IJy/jUwXe15VsqDNl5ofH+5u
g2rkbZtkH5QBO68obHOGYt4NCg65L7uxX7J/SQm2GQ5mKwHDEtL8RIN2v79j9t14
uf3OgDdA9et6eFAnLIDVTJRtSqy2YUYdjP9krpEqtKxQblhtE6ysiWR0G+dWbsDe
Ep4Fo79tSIdr59eHug5CQMZK60GHam95LlJ2bq85NJD8E9IQxW3vxkft/g5EXTUx
7DFglp4f3Y8CAwEAAaOCAz4wggM6MB0GA1UdDgQWBBRVEguQE9Oo3N1HtoSa442R
8msS1zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yYmUwYTNlMi0yMTRl
LTRhNTgtODI3My05YmMzYzFmY2MwMjIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMmJlMGEzZTItMjE0ZS00
YTU4LTgyNzMtOWJjM2MxZmNjMDIyLzNmN2FhYzFlYmI0YTk0YjdlMDg5NDYxMWVl
MjQwNzI2MjdlMTZmOWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwHgQCAAEwGAMEAr58GAMEAsgBeAMEAsgHBAMEAsgQ
cDAWBAIAAjAQAwUAIAETmAMHACgBAAAAUDA0BggrBgEFBQcBCAEB/wQlMCOgITAf
AgJsHgIDAMwKAgMAzCkwCgIDAMxQAgMAzFICAwQAAzANBgkqhkiG9w0BAQsFAAOC
AQEAQsJBJJDs9Eccf63JuNAqOkzb0eD95dEsHni1Blku4r2FoCxKi3cIbdnbOjzs
OEoW06neK+3URGFsFIa/NPZwX1D/VV76z2WsHPZOeM1Cz4KrO6wOmXx+zMfixzVg
vrn0Jl0CEaBIJ1EM62tidCsKReet7tDqLY80YM1VcJB9qAxy9fT/50F31RHHtANJ
smOFKAjQm/8GYdT/9+HV3RWjPiCOMrLI+pwU0e+OrM+jK9Y8G+4zWveiIdbVL3b6
OM0YM2a43Zjym5/Vu/AO+1GQQ3ticH+glTrRcLcsSMdCIC8y/bNPyd75zqsGnA1s
dLP270Bble5/4Jtu2Uf4+AVmMQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org