Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43b0b4b77bf98f6cffbbf35f0ef4a7203f7eb19b.cer
File:                     43b0b4b77bf98f6cffbbf35f0ef4a7203f7eb19b.cer (raw, json)
Hash identifier:          Hfuqj/MzCz6UbZp/vxNfNoxDnjEwDSRwUpVRBLeLBww=
Subject key identifier:   7C:76:B5:36:99:F5:2B:07:F3:4E:6A:06:A0:FA:F2:BD:20:E1:18:57
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E67FEA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c2eb45a5-99db-40e7-8fd6-c38744c8af7a/43b0b4b77bf98f6cffbbf35f0ef4a7203f7eb19b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c2eb45a5-99db-40e7-8fd6-c38744c8af7a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:22 +0000
Certificate not after:    Sat 22 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 19037
                          IP: 131.100.108.0/22
                          IP: 138.99.4.0/22
                          IP: 170.51.0.0/16
                          IP: 181.116.0.0/15
                          IP: 181.238.0.0/15
                          IP: 186.12.0.0/15
                          IP: 186.122.0.0/15
                          IP: 186.157.0.0 -- 186.158.255.255
                          IP: 186.191.0.0/16
                          IP: 2803:9800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15106026 (0xe67fea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:22 2017 GMT
            Not After : Jun 22 06:00:00 2024 GMT
        Subject: CN=43b0b4b77bf98f6cffbbf35f0ef4a7203f7eb19b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:b3:3a:76:56:54:dc:d0:90:ed:dd:24:dc:31:
                    1e:b3:92:46:95:11:53:38:d2:e3:89:73:02:ca:a4:
                    1d:85:c8:03:fc:86:9b:a5:5f:87:6d:cf:53:bb:a3:
                    5f:e1:58:62:b6:37:50:8d:69:11:5a:1b:8f:08:ab:
                    e4:eb:4b:ea:3d:3b:20:6e:15:1c:36:dc:6f:19:55:
                    2d:24:26:fe:87:04:56:35:d6:64:9b:21:b8:76:ff:
                    cf:55:1e:ba:45:b9:0f:9a:2e:47:2f:94:62:6d:0e:
                    aa:ce:ff:3a:15:89:cc:92:43:60:19:cd:5e:88:8a:
                    57:c1:6b:b5:b1:cb:a4:19:52:a6:f4:47:4d:e4:b2:
                    65:d6:38:7b:fc:bf:ef:7e:6d:b8:a7:6c:88:78:5e:
                    7d:d0:ba:b1:dc:60:66:43:f6:b2:c5:a8:7e:b7:af:
                    70:d3:6a:3d:2b:3b:ae:4a:c3:e4:01:a9:a0:4d:6e:
                    fa:91:0d:7c:b3:bb:f3:7a:4e:d4:03:c2:6f:fc:be:
                    b3:9a:ca:05:3b:2a:69:1e:53:6a:b0:d8:99:4e:47:
                    5e:7f:f1:47:8c:46:66:30:e9:58:73:ef:41:5a:27:
                    f0:1f:ce:a3:f1:9a:ae:52:5e:e1:45:57:2a:da:1b:
                    2c:06:8b:57:9b:18:e2:cd:cf:df:39:cf:80:3e:ac:
                    18:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:76:B5:36:99:F5:2B:07:F3:4E:6A:06:A0:FA:F2:BD:20:E1:18:57
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c2eb45a5-99db-40e7-8fd6-c38744c8af7a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c2eb45a5-99db-40e7-8fd6-c38744c8af7a/43b0b4b77bf98f6cffbbf35f0ef4a7203f7eb19b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.108.0/22
                  138.99.4.0/22
                  170.51.0.0/16
                  181.116.0.0/15
                  181.238.0.0/15
                  186.12.0.0/15
                  186.122.0.0/15
                  186.157.0.0-186.158.255.255
                  186.191.0.0/16
                IPv6:
                  2803:9800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19037

    Signature Algorithm: sha256WithRSAEncryption
         07:5b:14:a1:7c:8c:4d:3b:4f:74:4d:a5:e3:af:0a:fc:cb:15:
         e2:2b:90:23:a0:58:12:48:7f:53:2a:ae:4e:22:f8:98:4c:36:
         e8:0d:15:4a:a1:13:27:a3:93:3e:9c:25:4c:5f:2a:71:89:8e:
         8e:0d:d3:fd:ec:cb:be:0a:a5:25:48:31:5a:3d:dd:f2:64:a0:
         0f:b3:aa:07:10:3f:03:28:46:48:37:e3:c1:2f:7f:48:21:c2:
         4d:ad:b8:40:da:da:fa:da:b0:3b:3b:e2:7d:b3:d4:9e:64:17:
         dc:8d:1d:15:b2:38:f0:6c:fd:ac:63:82:7e:83:27:db:6e:c4:
         7d:eb:f8:db:be:0d:8d:16:58:47:27:fc:5d:1c:0c:24:ee:5f:
         84:99:52:0b:35:cc:2d:9f:53:f4:44:13:3b:61:4e:52:64:22:
         0d:ea:9e:03:d3:4e:e3:38:d5:8a:46:e1:42:84:aa:4f:08:4f:
         c5:c1:04:0d:cc:b8:4f:32:ce:e6:0f:98:ad:a3:e2:05:5d:a7:
         fc:f8:27:d4:f0:e3:87:e6:2d:fe:c0:ff:3a:57:0c:db:e1:21:
         23:c0:63:14:fb:ea:5c:df:c0:c3:00:f6:cf:21:72:37:4d:91:
         b2:e0:7e:71:6e:d3:83:f3:e1:39:80:2c:a2:fb:d6:d9:a4:1a:
         d5:31:ca:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org