Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/404b0e4c80247304b30d4c8948892b44ae42a974.cer
File:                     404b0e4c80247304b30d4c8948892b44ae42a974.cer (raw, json)
Hash identifier:          lFf3fYzD4moYLpbXmBipBXMLrIkKiLE5FxYkLXhisnw=
Subject key identifier:   85:34:58:4A:58:C0:40:86:0F:48:26:40:60:92:FE:FF:04:D6:CF:3D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF9A7F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ca6def44-153f-4d1a-ab81-3ea8806d46de/404b0e4c80247304b30d4c8948892b44ae42a974.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ca6def44-153f-4d1a-ab81-3ea8806d46de/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 23 Apr 2018 17:17:26 +0000
Certificate not after:    Mon 25 Mar 2024 19:31:24 +0000
Subordinate resources:    AS: 27953
                          IP: 181.118.176.0/20
                          IP: 186.0.128.0/21
                          IP: 186.64.64.0/19
                          IP: 186.190.160.0/20
                          IP: 190.11.192.0/20
                          IP: 190.122.128.0/20
                          IP: 190.211.128.0/21
                          IP: 200.7.176.0/21
                          IP: 200.85.88.0/21
                          IP: 2800:940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14654079 (0xdf9a7f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 23 17:17:26 2018 GMT
            Not After : Mar 25 19:31:24 2024 GMT
        Subject: CN=404b0e4c80247304b30d4c8948892b44ae42a974
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:93:6e:27:50:fb:4a:91:d1:e8:06:39:30:9d:
                    c8:5f:50:26:ae:bd:9b:3a:8c:72:06:b3:40:6d:3f:
                    6e:ae:8a:be:5a:48:0a:82:23:3f:06:3c:d2:f3:7e:
                    91:8e:d7:6c:39:7f:50:25:1b:d0:c4:b5:45:d4:f2:
                    66:ec:3f:e4:6f:08:8c:c7:37:e9:02:dd:a9:6a:16:
                    be:16:f8:d7:d7:eb:ca:3e:f2:a4:fa:56:e2:0c:27:
                    19:28:73:d7:9c:b2:2d:8e:44:99:e2:9e:65:9e:af:
                    e1:99:2e:92:3f:59:f6:19:98:62:8d:ec:89:18:4d:
                    f6:0d:94:94:79:aa:ee:da:00:9d:af:2a:0e:88:e6:
                    36:e4:cc:6b:1b:96:f8:a6:38:d1:24:50:56:72:b1:
                    b2:25:be:97:fb:58:95:d3:26:52:a2:70:1f:6c:59:
                    cb:8b:43:06:29:11:57:43:76:29:c3:3b:f7:e9:e7:
                    45:7f:6b:9c:9d:22:5e:89:2f:97:cb:8d:b8:93:d4:
                    c6:54:86:ea:db:9a:0b:00:7c:09:c7:30:0a:03:99:
                    5d:69:1a:9f:c3:7d:55:75:7b:3e:6b:47:0d:2a:bc:
                    83:f8:8b:c9:6a:f6:d7:ed:4b:f3:1d:99:1f:38:b4:
                    a2:d6:ac:e4:f4:49:e7:bd:31:26:e2:07:16:55:88:
                    df:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:34:58:4A:58:C0:40:86:0F:48:26:40:60:92:FE:FF:04:D6:CF:3D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ca6def44-153f-4d1a-ab81-3ea8806d46de/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ca6def44-153f-4d1a-ab81-3ea8806d46de/404b0e4c80247304b30d4c8948892b44ae42a974.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.176.0/20
                  186.0.128.0/21
                  186.64.64.0/19
                  186.190.160.0/20
                  190.11.192.0/20
                  190.122.128.0/20
                  190.211.128.0/21
                  200.7.176.0/21
                  200.85.88.0/21
                IPv6:
                  2800:940::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27953

    Signature Algorithm: sha256WithRSAEncryption
         27:50:00:78:48:ce:05:96:d3:c8:5e:ec:db:62:59:7d:9d:4f:
         bb:f2:f0:ff:f3:b7:71:0b:da:03:ee:b0:ec:d8:b1:93:d9:ae:
         40:1e:a4:a5:15:d9:3a:96:3f:54:c6:3e:37:62:47:ac:5e:e9:
         62:46:25:22:c6:ea:0b:35:74:7d:0f:c5:da:64:65:1f:50:3c:
         eb:d0:11:7c:8a:5d:08:4f:43:ff:ce:d7:58:a5:ee:b0:83:85:
         65:e2:ad:56:f2:74:8e:64:9e:e7:5e:cc:e6:dd:11:b7:7c:4b:
         22:2a:2f:9e:b3:e4:29:a0:f3:d9:db:a4:f4:fc:91:ef:56:ec:
         bf:b4:2f:12:22:ad:f5:a6:55:75:92:bf:72:fc:ec:cf:c6:1f:
         e1:0d:cb:dc:e5:92:af:6f:d9:46:2e:07:21:b2:54:73:ad:bb:
         d3:64:db:18:0a:83:c4:62:1f:69:f2:11:0b:7b:0e:da:4e:a4:
         0f:d7:23:83:12:5e:0d:2a:b0:48:fb:e7:d6:95:25:f1:45:29:
         dc:a6:4e:de:ef:de:35:cd:7c:0c:ae:89:5a:3d:6d:2f:05:52:
         27:f0:45:9b:78:71:2e:d6:92:86:45:ac:5f:9a:c9:eb:f2:31:
         31:ea:e1:b3:7e:1e:2d:b6:05:3e:9a:b9:10:9f:33:3f:ec:41:
         43:80:5a:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org