Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer
File:                     419e23f1fa27160195e5e3ab407b2d1b2f418f98.cer (raw, json)
Hash identifier:          vcdEgYPvpr0gXYQHY3+TZhTUKcR5BXcu9kmfITRR89I=
Subject key identifier:   2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E108DF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/419e23f1fa27160195e5e3ab407b2d1b2f418f98.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Sep 2018 14:37:30 +0000
Certificate not after:    Thu 05 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 27988
                          IP: 190.122.80.0/20
                          IP: 198.12.36.0/22
                          IP: 200.55.240.0/21
                          IP: 2803:8d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14747871 (0xe108df)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 11 14:37:30 2018 GMT
            Not After : Dec  5 04:00:00 2024 GMT
        Subject: CN=419e23f1fa27160195e5e3ab407b2d1b2f418f98
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:09:6f:31:84:80:d7:a9:37:d3:c9:e2:29:57:
                    08:d4:13:70:cb:87:cc:6e:e0:ec:99:11:33:39:06:
                    fc:b1:0b:5f:12:c6:b9:e4:17:fa:da:18:db:81:15:
                    c0:d0:ec:11:8a:b5:c0:98:37:35:c8:e7:10:80:fb:
                    c3:d1:de:4d:ea:8d:c2:c5:67:29:9b:31:b0:87:92:
                    ad:7d:50:8d:eb:df:03:14:ff:11:42:e4:12:9e:90:
                    9e:42:5a:1c:43:97:28:aa:6a:fc:1b:ce:67:cd:c3:
                    f7:d5:a1:58:10:52:8a:58:72:ec:cf:b2:53:79:0e:
                    ca:7c:af:3c:db:a7:5f:f2:98:3a:f4:5b:c2:86:e9:
                    27:a2:2e:5b:9b:22:a1:d4:6b:d7:0c:99:83:15:b9:
                    79:bd:70:7f:01:6f:1a:2c:3a:e3:23:99:5b:9c:a5:
                    6e:50:63:90:55:9d:f4:02:0b:16:2c:8c:08:b7:14:
                    df:19:5f:4e:ad:ce:2f:b9:31:70:59:bc:2a:d0:74:
                    de:6e:f3:02:dc:44:3f:f6:bc:19:db:3b:b7:a7:75:
                    e6:0e:b9:0d:2c:3f:3f:53:88:01:ee:92:10:55:70:
                    01:2f:33:98:1e:9d:7c:6c:f7:23:2c:4f:6d:4d:2f:
                    8f:53:02:f1:ea:3c:a5:85:32:c3:7a:4f:79:ca:fa:
                    35:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:4A:34:D5:A8:74:62:61:36:DB:18:55:57:9C:12:AE:4F:1B:9C:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dba52d85-1545-481a-ad48-9243896fbe80/419e23f1fa27160195e5e3ab407b2d1b2f418f98.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.122.80.0/20
                  198.12.36.0/22
                  200.55.240.0/21
                IPv6:
                  2803:8d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27988

    Signature Algorithm: sha256WithRSAEncryption
         66:04:48:76:a1:a5:15:0b:bb:fa:c2:21:40:6e:aa:aa:59:4d:
         c1:76:a1:7b:9f:18:a4:ed:ee:1f:9f:00:8f:77:11:24:4e:aa:
         fa:7b:74:d6:26:d4:03:c7:ee:42:58:4d:a7:e4:15:cc:d6:a2:
         88:13:06:db:47:78:b5:ce:87:a4:62:1f:af:47:cd:d0:f0:5f:
         5f:88:ed:04:df:fd:9a:48:ed:ea:6e:fe:47:4a:ed:0e:3b:f9:
         a1:d6:2c:36:84:d6:7f:77:f4:6c:89:1d:ed:c3:85:45:3f:6f:
         81:8d:86:fc:e3:54:61:68:98:84:9a:6d:33:ab:ba:cd:ca:bc:
         e9:2e:78:36:b0:5a:99:93:28:b0:62:8d:3d:05:48:52:65:0a:
         5e:6e:8d:89:03:5c:5e:be:16:25:f1:c1:1b:8a:7d:7d:f7:cc:
         42:6b:38:f6:ff:90:19:db:f5:2b:ee:de:e5:6b:0d:e7:97:fc:
         33:67:8d:95:59:61:86:b2:79:dd:0f:46:36:0e:ba:2d:55:66:
         cc:2e:bc:20:59:5e:b7:ab:53:59:d8:76:10:6a:f7:bb:f3:b8:
         57:20:6e:43:de:59:2f:56:e5:ca:e7:24:56:28:f5:63:7c:c7:
         ea:50:25:a7:0b:a5:7e:36:1c:48:02:15:99:ad:62:e6:15:ea:
         f5:75:56:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org