Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer
File:                     429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.cer (raw, json)
Hash identifier:          GByDxM19FKGRIK0kXevf26XYaZnRLhG0QbtRK53Q1HE=
Subject key identifier:   A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB8094
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:46 +0000
Certificate not after:    Wed 07 Feb 2024 14:00:00 +0000
Subordinate resources:    AS: 27925
                          IP: 181.42.0.0/15
                          IP: 186.9.0.0 -- 186.11.255.255
                          IP: 186.37.0.0/16
                          IP: 190.91.0.0/16
                          IP: 200.63.56.0/21
                          IP: 2800:330::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14385300 (0xdb8094)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:46 2017 GMT
            Not After : Feb  7 14:00:00 2024 GMT
        Subject: CN=429adc7117b5fb6c9be1a7cf4fa313e37ee185bf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:94:7b:b1:45:3b:74:0c:94:11:8b:36:18:a6:
                    9e:ce:f1:63:32:fc:8a:b7:be:b4:72:a1:20:15:a8:
                    24:84:5a:53:66:f4:d7:9c:70:9a:3c:14:16:09:64:
                    73:49:28:23:db:29:8f:95:5f:7b:47:6f:98:63:57:
                    d1:31:c0:6f:2b:d2:c2:91:a0:c1:7e:17:ff:91:23:
                    f7:b0:e0:57:32:5f:70:9e:a9:3d:54:24:af:f6:38:
                    1c:6b:78:cf:03:b4:fa:6f:6a:8f:05:37:b6:2f:e0:
                    da:e3:d3:e2:41:ff:f5:9e:01:f3:88:f7:10:28:01:
                    c2:6d:c5:a9:38:b0:51:79:26:7e:70:4a:8c:0d:54:
                    a3:d7:3a:e1:c0:c9:14:9c:8a:7d:9c:da:b8:2c:56:
                    ff:88:a0:64:e9:c7:69:a0:75:d9:7c:57:e4:39:9f:
                    57:fe:33:2b:c4:c1:a9:ac:c5:a2:53:80:5f:f2:04:
                    98:d6:65:07:59:58:11:dd:33:5e:de:0f:bf:4c:31:
                    09:0e:b0:ec:64:8c:a8:d7:bf:77:23:e2:25:05:bc:
                    d8:14:9e:94:e6:68:e9:dc:a5:5c:27:c9:1e:9b:c3:
                    43:90:14:c5:ac:87:e5:28:5a:86:8e:f0:e7:5d:61:
                    18:1b:15:69:10:57:09:e1:24:56:a2:aa:dc:a7:d9:
                    a2:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E8:AD:8F:6B:2D:6D:1F:3D:27:10:B5:A0:DA:EF:C6:56:07:17:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b8648a1c-7eb9-469e-bf28-e1888ad89efb/429adc7117b5fb6c9be1a7cf4fa313e37ee185bf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.42.0.0/15
                  186.9.0.0-186.11.255.255
                  186.37.0.0/16
                  190.91.0.0/16
                  200.63.56.0/21
                IPv6:
                  2800:330::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27925

    Signature Algorithm: sha256WithRSAEncryption
         7b:6b:e3:53:48:79:52:17:68:32:3e:2d:33:a2:a3:fa:cf:30:
         a4:1d:a1:f6:14:c7:e6:4c:30:18:17:8d:f2:38:9e:86:5d:b3:
         42:23:22:9a:5a:84:90:fb:0b:f2:2f:2c:a9:83:51:56:fe:a8:
         8e:85:d9:fb:69:ec:dc:e2:7e:54:82:b9:40:f0:25:48:ae:b4:
         c9:b5:7d:55:9d:8f:02:7c:eb:20:e1:88:4c:a4:68:86:52:8d:
         74:c9:7e:cb:b0:97:6c:96:35:34:c6:2a:78:47:8d:d5:23:05:
         de:52:5d:26:db:23:ab:74:a0:1b:d7:85:32:67:50:c5:b9:d5:
         09:44:1b:75:53:22:34:9d:1b:5f:ab:12:f7:6e:f9:98:a7:96:
         c4:b8:48:7f:fc:7a:87:9b:3c:1d:5f:bf:e6:0f:cd:43:07:6f:
         65:f6:ad:78:30:e2:ad:0c:d1:5e:ae:e5:98:f0:f7:7b:30:0f:
         36:ba:89:b7:33:fd:35:7b:55:b7:20:8e:a2:85:d6:3e:90:b3:
         27:22:e4:3d:e9:14:00:4e:6a:ae:e6:c5:f2:48:9b:fa:a4:da:
         13:40:d2:b9:f4:ba:0e:ab:d0:f1:d6:9f:85:04:63:a2:55:d9:
         23:1b:16:c7:01:2e:01:b4:3d:31:f5:89:d4:1b:56:0a:36:14:
         21:a9:60:b0
-----BEGIN CERTIFICATE-----
MIIF9DCCBNygAwIBAgIEANuAlDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY0NloXDTI0MDIwNzE0MDAw
MFowMzExMC8GA1UEAxMoNDI5YWRjNzExN2I1ZmI2YzliZTFhN2NmNGZhMzEzZTM3
ZWUxODViZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJWUe7FFO3QM
lBGLNhimns7xYzL8ire+tHKhIBWoJIRaU2b015xwmjwUFglkc0koI9spj5Vfe0dv
mGNX0THAbyvSwpGgwX4X/5Ej97DgVzJfcJ6pPVQkr/Y4HGt4zwO0+m9qjwU3ti/g
2uPT4kH/9Z4B84j3ECgBwm3FqTiwUXkmfnBKjA1Uo9c64cDJFJyKfZzauCxW/4ig
ZOnHaaB12XxX5DmfV/4zK8TBqazFolOAX/IEmNZlB1lYEd0zXt4Pv0wxCQ6w7GSM
qNe/dyPiJQW82BSelOZo6dylXCfJHpvDQ5AUxayH5Shaho7w511hGBsVaRBXCeEk
VqKq3KfZogMCAwEAAaOCAyMwggMfMB0GA1UdDgQWBBSg6K2Pay1tHz0nELWg2u/G
VgcXqzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iODY0OGExYy03ZWI5
LTQ2OWUtYmYyOC1lMTg4OGFkODllZmIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjg2NDhhMWMtN2ViOS00
NjllLWJmMjgtZTE4ODhhZDg5ZWZiLzQyOWFkYzcxMTdiNWZiNmM5YmUxYTdjZjRm
YTMxM2UzN2VlMTg1YmYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBJ
BggrBgEFBQcBBwEB/wQ6MDgwJwQCAAEwIQMDAbUqMAoDAwC6CQMDAroIAwMAuiUD
AwC+WwMEA8g/ODANBAIAAjAHAwUAKAADMDAZBggrBgEFBQcBCAEB/wQKMAigBjAE
AgJtFTANBgkqhkiG9w0BAQsFAAOCAQEAe2vjU0h5UhdoMj4tM6Kj+s8wpB2h9hTH
5kwwGBeN8jiehl2zQiMimlqEkPsL8i8sqYNRVv6ojoXZ+2ns3OJ+VIK5QPAlSK60
ybV9VZ2PAnzrIOGITKRohlKNdMl+y7CXbJY1NMYqeEeN1SMF3lJdJtsjq3SgG9eF
MmdQxbnVCUQbdVMiNJ0bX6sS9275mKeWxLhIf/x6h5s8HV+/5g/NQwdvZfateDDi
rQzRXq7lmPD3ezAPNrqJtzP9NXtVtyCOooXWPpCzJyLkPekUAE5qrubF8kib+qTa
E0DSufS6DqvQ8dafhQRjolXZIxsWxwEuAbQ9MfWJ1BtWCjYUIalgsA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org