Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4165db8f57caba312629e89d611ea1f393351415.cer
File:                     4165db8f57caba312629e89d611ea1f393351415.cer (raw, json)
Hash identifier:          oRxkOfqeZ7NZUY88M+DGVvNTxD6XYoOkmP6iwPGHcjw=
Subject key identifier:   56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D77020
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Nov 2022 21:33:32 +0000
Certificate not after:    Sat 09 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 26426
                          IP: 186.5.128.0/19
                          IP: 190.109.0.0/19
                          IP: 200.115.160.0/20
                          IP: 2803:2900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14118944 (0xd77020)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 16 21:33:32 2022 GMT
            Not After : Dec  9 04:00:00 2023 GMT
        Subject: CN=4165db8f57caba312629e89d611ea1f393351415
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:60:ac:19:71:ea:a2:f3:43:a2:46:2f:a1:ab:
                    6a:56:02:11:d3:07:da:6f:4f:b1:93:52:12:a9:d4:
                    9b:20:37:f8:6f:8b:14:bb:43:11:70:60:3d:10:2b:
                    b8:dc:7c:7a:9a:17:7a:43:dc:85:f4:39:ae:f0:ec:
                    c6:c7:e4:c5:0b:24:0d:f8:8f:b8:3f:b3:07:7d:ee:
                    ea:6c:89:af:19:df:00:01:9b:a0:8c:00:38:e2:9e:
                    1f:2c:7d:e6:be:4a:78:fe:f5:d2:58:97:47:4b:63:
                    1c:52:6a:b7:76:54:a1:43:db:37:3a:9f:f2:29:e9:
                    bb:ef:d6:21:8e:f5:56:a4:74:2e:dd:67:0a:f9:68:
                    de:0b:f6:dd:81:3f:ad:f4:68:74:42:86:5d:cd:0d:
                    9d:82:95:24:30:3e:6e:9f:ce:73:4b:ae:7e:56:5a:
                    18:a0:21:15:17:9e:d2:95:92:9d:8d:02:e7:a8:f8:
                    fd:46:b1:f4:26:75:f0:2f:e5:99:ef:00:58:a1:5e:
                    59:1d:a9:bc:70:35:69:da:34:7c:a9:d3:2d:3e:e0:
                    d3:5b:ca:b2:3b:58:16:e4:ba:34:6c:63:4b:da:33:
                    b8:b2:e4:95:7c:d4:67:21:c3:da:ea:1c:df:b6:7b:
                    62:86:42:e2:32:1f:cf:1a:96:77:0b:1e:9f:f2:12:
                    a9:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:A0:E4:4C:F3:DE:53:57:C3:36:E4:3B:31:6D:75:17:E5:B0:B3:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/775c6325-bf7a-43db-8333-e93027fa2d4a/4165db8f57caba312629e89d611ea1f393351415.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.5.128.0/19
                  190.109.0.0/19
                  200.115.160.0/20
                IPv6:
                  2803:2900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26426

    Signature Algorithm: sha256WithRSAEncryption
         7e:09:89:05:95:ca:f6:af:52:03:f5:34:2e:59:db:0c:b4:9a:
         b7:0c:d4:a2:e2:49:fa:25:b6:13:f9:01:07:16:ef:cf:a5:03:
         28:f0:49:0a:bf:88:25:d7:7b:3c:e9:be:c1:68:9b:1e:8e:5d:
         81:ed:c1:30:17:76:3a:32:6c:97:8c:34:1f:d9:8f:d7:e6:59:
         e9:66:4d:71:13:27:2a:3e:bb:03:31:60:63:24:5d:3c:77:32:
         20:4b:61:5e:68:76:6d:92:5d:eb:4c:07:ee:07:52:e3:47:75:
         cd:e7:2c:ac:3b:25:0e:07:17:17:36:5d:d9:2d:57:7a:7d:3e:
         12:6f:a8:24:fd:a6:eb:fd:e1:60:43:14:9d:0d:64:57:a8:82:
         6a:8c:cf:64:a6:5d:aa:e2:73:db:91:23:92:1c:33:6a:f8:a6:
         34:c3:c5:0b:d0:d1:bf:7b:6f:47:e1:4b:53:22:5c:0a:1c:e2:
         f8:5d:f6:36:37:ec:3f:55:b8:29:0f:be:be:73:ca:87:b8:ea:
         d0:df:53:17:47:9a:7d:e8:53:d6:a8:38:06:0e:53:e9:84:7f:
         7b:b8:3f:cc:f5:6a:e3:1b:47:a9:db:cb:75:79:cc:71:11:01:
         21:32:a3:28:86:82:21:90:43:4e:74:56:0e:e1:8d:68:2c:cd:
         38:98:79:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org