Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer
File:                     4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.cer (raw, json)
Hash identifier:          98ByUp3hupEtK7b7quD2EblRVndXmCufWl9RiGoe+go=
Subject key identifier:   3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F365B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jul 2021 14:46:50 +0000
Certificate not after:    Sat 31 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 6487
                          AS: 52362
                          AS: 266678
                          IP: 45.229.40.0/22
                          IP: 190.14.128.0/20
                          IP: 190.104.112.0/20
                          IP: 200.12.32.0/19
                          IP: 2803:7000::/32
                          IP: 2803:7920::/32
                          IP: 2803:d100::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15951285 (0xf365b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 26 14:46:50 2021 GMT
            Not After : Aug 31 05:00:00 2024 GMT
        Subject: CN=4ac5ea16ad07d29d2d29db8fbd5b3893571bb631
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:3a:3b:8b:58:44:71:00:1e:a0:f0:b0:dd:e4:
                    87:9d:51:9c:0f:3d:f5:8e:8e:af:ba:09:79:a4:87:
                    61:76:8a:7b:11:77:73:64:a0:5c:5e:62:3f:cd:3e:
                    fa:1f:91:09:01:51:7a:76:fa:8e:bc:83:1a:59:e9:
                    c8:70:3a:6f:bf:cc:9d:8d:9a:8e:1a:1b:69:ac:d3:
                    04:c3:a3:30:25:1c:2c:75:59:89:51:e4:52:5d:53:
                    41:8f:ea:08:f8:74:e2:ad:5e:af:aa:6d:1c:5e:39:
                    27:c3:bb:a7:25:27:0b:b5:ba:7e:da:b7:19:27:d0:
                    cd:21:8c:52:69:7a:43:d5:25:19:81:13:31:c1:7a:
                    c6:ec:c0:10:d7:0b:e6:55:28:d5:65:05:8a:59:5a:
                    e6:e6:30:43:51:6e:c4:dd:3c:26:1a:97:ac:7d:15:
                    0a:e6:3a:ac:4e:9b:7c:fc:e3:7a:f4:a6:02:58:4a:
                    33:e2:b6:a6:cf:a0:89:24:8a:4c:14:43:2a:88:ee:
                    ba:56:a1:1a:6a:d2:ec:39:2e:9b:1e:df:57:06:67:
                    e7:da:2a:0e:3a:50:e9:77:b8:42:56:9b:56:ce:80:
                    da:a8:5d:83:17:eb:2f:cf:93:3b:73:e4:6c:22:26:
                    27:40:de:8c:02:b1:a3:ed:ce:bb:f7:1f:5f:4c:a4:
                    a7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:C6:E4:AF:88:56:EC:CF:11:EB:BE:CA:5C:8E:50:5A:5C:19:11:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/12c5a44c-f23f-4488-976e-f3b7d7828ebd/4ac5ea16ad07d29d2d29db8fbd5b3893571bb631.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.40.0/22
                  190.14.128.0/20
                  190.104.112.0/20
                  200.12.32.0/19
                IPv6:
                  2803:7000::/32
                  2803:7920::/32
                  2803:d100::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6487
                  52362
                  266678

    Signature Algorithm: sha256WithRSAEncryption
         70:c2:8b:20:f0:a1:10:67:0b:87:b0:11:30:65:11:87:eb:4c:
         be:8c:84:31:5e:9f:c3:f5:4e:72:35:2f:2c:f4:bf:bf:b2:79:
         c6:cf:4d:bc:b2:61:37:4e:ea:e8:2e:2c:6d:79:2a:ef:96:2f:
         be:a0:8f:9e:f0:f4:d1:79:e2:9b:af:d5:51:af:c0:51:fb:ed:
         cc:0a:7b:3d:c4:91:d0:ec:a6:58:95:04:3e:cb:2f:2f:d7:68:
         42:d9:3e:9e:a8:71:91:1b:ef:01:b0:43:31:80:2a:30:74:1e:
         63:75:70:e0:33:fb:72:0b:17:0d:23:64:dc:20:6b:87:c7:b0:
         fa:d3:00:00:65:75:d5:4e:5f:ca:39:7c:b0:07:6d:46:11:02:
         87:c3:6d:21:13:88:9e:f1:01:fe:81:ad:85:47:0e:b2:53:b9:
         6e:9e:ed:b4:98:a3:64:30:25:2e:7d:ee:63:b2:4a:34:98:9a:
         e3:4a:99:9d:60:a9:86:50:99:88:37:19:38:45:f8:05:e3:75:
         a5:17:0a:47:8d:2c:18:92:b1:29:13:38:20:56:a9:09:0a:06:
         83:d3:10:56:63:b0:b4:07:e8:7c:a9:e6:d9:d4:99:5e:57:9e:
         ee:f2:22:8c:85:23:a8:68:04:20:be:b0:62:9e:7a:a3:c7:42:
         3a:20:7b:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org