Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.cer
File:                     4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.cer (raw, json)
Hash identifier:          d9Hm8uW8pFtTdtfkhGB/AWYz6wLG/X29ZQxq5kRyC1g=
Subject key identifier:   2A:03:50:BA:30:19:DB:A9:B8:18:CE:20:1B:F4:BB:51:A1:8D:99:54
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010ED094
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 11 Dec 2019 10:43:44 +0000
Certificate not after:    Fri 29 Aug 2025 05:13:19 +0000
Subordinate resources:    AS: 265684
                          AS: 269824
                          IP: 45.5.116.0/22
                          IP: 45.186.104.0/22
                          IP: 45.228.233.0 -- 45.228.235.255
                          IP: 2803:e1c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17748116 (0x10ed094)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 11 10:43:44 2019 GMT
            Not After : Aug 29 05:13:19 2025 GMT
        Subject: CN=4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:19:5a:00:6f:c3:a6:d8:a7:56:0d:d3:78:04:
                    0f:73:5d:97:20:fc:48:76:23:e0:e3:81:04:46:26:
                    65:6d:26:71:86:65:82:d8:b2:38:a6:a9:bf:44:66:
                    13:18:5c:dc:99:5f:7c:10:88:93:b9:79:d7:cb:a8:
                    07:c9:29:84:f5:42:21:7c:e2:32:33:d0:b7:ee:61:
                    13:53:87:04:c0:ec:22:29:ea:c1:ad:64:c3:af:d7:
                    d1:72:a4:0f:05:a9:8a:67:80:0d:29:c1:b7:9a:f9:
                    36:2e:b4:3c:d7:96:a5:35:37:22:24:e7:a0:43:6e:
                    bd:46:77:3c:ed:78:d1:ff:d3:64:60:4c:76:02:d9:
                    4d:a2:b7:74:7f:62:5b:45:77:09:80:78:5f:91:cc:
                    13:cd:40:1a:fd:3a:ca:b7:95:9a:a4:93:be:ed:a6:
                    5a:e2:cd:e8:c7:ef:d5:b8:47:cc:e2:6c:a1:a3:4c:
                    f8:2c:3a:3e:64:00:b4:ee:36:43:a2:fc:32:4a:a5:
                    b1:e9:d4:c1:47:07:f6:9b:b4:4d:08:a7:bb:99:0b:
                    49:50:04:79:7f:71:ea:68:b7:aa:bd:de:59:5d:e5:
                    df:71:ad:31:b2:ab:94:bf:5f:95:6f:a3:d8:75:69:
                    be:88:35:69:7f:0a:15:b2:27:d2:59:a9:a1:ad:44:
                    8a:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:03:50:BA:30:19:DB:A9:B8:18:CE:20:1B:F4:BB:51:A1:8D:99:54
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f15396bb-f79d-43ce-9ba9-9eb702067f91/4a3a2ab3d06d0440522fa070bc18ce8d8e9cf003.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.116.0/22
                  45.186.104.0/22
                  45.228.233.0-45.228.235.255
                IPv6:
                  2803:e1c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265684
                  269824

    Signature Algorithm: sha256WithRSAEncryption
         92:b3:8c:ac:61:95:0d:41:49:07:15:46:7c:96:f1:25:da:44:
         16:0c:2c:7a:31:24:44:bf:1f:61:cc:41:27:b8:24:5d:47:69:
         5f:54:34:06:d3:73:a0:33:28:fb:c7:6a:37:27:1f:fd:77:c7:
         2c:11:4b:f8:e5:0b:5f:06:37:b4:d6:c2:b5:cd:54:9c:70:87:
         43:bc:c3:59:fe:bc:f5:83:12:25:93:77:45:50:55:9a:90:24:
         8e:7a:05:fa:eb:2d:f4:f6:24:8e:e7:89:e7:01:cc:dc:7b:2d:
         e2:64:1d:53:32:2c:18:9a:54:01:ef:89:52:f6:91:86:20:5a:
         66:56:d4:34:63:87:e1:1b:7f:74:7e:e9:3a:92:74:1f:7f:0e:
         6b:39:de:34:a3:79:e1:93:fc:92:a9:6c:a0:67:d9:47:04:c6:
         7d:b5:6b:61:32:4f:4a:bd:09:a2:4c:75:d7:56:e9:f4:53:03:
         41:d8:78:19:cd:6a:ec:03:70:1f:82:04:aa:7f:ad:c6:28:60:
         66:cc:25:86:88:0a:41:28:39:f2:ab:95:86:b5:15:f3:b5:b0:
         db:eb:7d:95:ea:bf:86:f0:5c:13:4c:24:a9:03:31:53:a5:4e:
         19:f1:60:a7:d2:6d:f3:4d:35:ae:50:28:aa:e0:26:95:13:6b:
         9e:dc:cf:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org