Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b4bda5f5e7ab7d524866fae6543084077c4aab3.cer
File:                     4b4bda5f5e7ab7d524866fae6543084077c4aab3.cer (raw, json)
Hash identifier:          P5enjITfS08hEIreY/G95wy3E0S/SJJXMe+0LmR1CKk=
Subject key identifier:   C1:38:87:F7:74:74:C3:2C:2D:9A:A3:81:6A:18:9C:DE:82:B2:AB:9E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEBFFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/05126d61-9886-41cd-9685-c1baf9531970/4b4bda5f5e7ab7d524866fae6543084077c4aab3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/05126d61-9886-41cd-9685-c1baf9531970/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:11:32 +0000
Certificate not after:    Tue 03 Dec 2024 14:54:10 +0000
Subordinate resources:    AS: 28270
                          IP: 131.196.76.0/22
                          IP: 131.221.68.0/22
                          IP: 138.117.124.0/22
                          IP: 138.121.220.0/22
                          IP: 138.122.236.0/22
                          IP: 143.255.112.0/22
                          IP: 160.238.220.0/22
                          IP: 168.121.52.0/22
                          IP: 168.227.44.0/22
                          IP: 168.228.128.0/22
                          IP: 168.232.116.0/22
                          IP: 170.0.204.0/22
                          IP: 170.245.100.0/22
                          IP: 170.247.52.0/22
                          IP: 177.66.64.0/21
                          IP: 177.67.0.0/21
                          IP: 177.70.128.0/20
                          IP: 177.75.192.0/19
                          IP: 177.87.144.0/21
                          IP: 177.130.192.0/19
                          IP: 179.191.128.0/19
                          IP: 186.219.144.0/20
                          IP: 186.233.72.0/21
                          IP: 187.18.128.0/17
                          IP: 187.108.96.0/20
                          IP: 187.110.208.0/20
                          IP: 189.45.64.0/18
                          IP: 189.50.144.0/20
                          IP: 191.6.80.0/21
                          IP: 200.94.240.0/22
                          IP: 201.149.120.0/22
                          IP: 2804:880::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16695291 (0xfebffb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:11:32 2023 GMT
            Not After : Dec  3 14:54:10 2024 GMT
        Subject: CN=4b4bda5f5e7ab7d524866fae6543084077c4aab3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:68:9c:de:7c:bd:34:30:38:d9:08:3b:42:03:
                    cd:f8:05:ae:70:52:c7:0b:0c:44:32:9e:8b:b8:32:
                    61:eb:bf:02:4e:57:12:13:f1:70:6e:26:7a:6a:85:
                    2a:35:be:34:28:27:ec:92:1f:16:25:fb:1a:68:12:
                    31:e8:74:e6:49:79:1d:b6:ee:4e:18:5e:d0:39:7e:
                    06:ce:02:91:5b:9e:4e:4a:37:69:24:64:96:88:3f:
                    ee:b4:e4:ff:65:d5:8c:b3:d0:f4:cb:51:0e:b8:11:
                    63:c6:12:fc:b6:bf:68:28:35:d9:fc:27:77:75:d6:
                    27:09:41:ea:2d:93:91:89:ad:9d:8d:8c:aa:ab:c0:
                    ef:da:3f:31:e4:13:46:47:19:3b:e0:d7:92:5b:6c:
                    85:80:43:28:f9:0e:03:c0:ec:67:1f:32:67:ee:d2:
                    e5:2b:16:19:e6:94:a1:9b:55:42:16:c5:3a:60:c9:
                    eb:f0:83:8c:a4:67:31:c6:4a:e5:b1:2f:cd:8b:ca:
                    de:60:38:c3:e1:41:4f:83:f1:0e:c8:76:6a:94:37:
                    d4:37:02:0d:bb:04:be:f9:d8:4a:89:1e:c9:13:91:
                    9c:15:c1:80:d0:02:11:8e:ac:a5:95:55:68:1c:1e:
                    04:d5:c1:bc:2e:44:9b:fa:12:68:3d:5c:53:5e:64:
                    56:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:38:87:F7:74:74:C3:2C:2D:9A:A3:81:6A:18:9C:DE:82:B2:AB:9E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/05126d61-9886-41cd-9685-c1baf9531970/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/05126d61-9886-41cd-9685-c1baf9531970/4b4bda5f5e7ab7d524866fae6543084077c4aab3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.76.0/22
                  131.221.68.0/22
                  138.117.124.0/22
                  138.121.220.0/22
                  138.122.236.0/22
                  143.255.112.0/22
                  160.238.220.0/22
                  168.121.52.0/22
                  168.227.44.0/22
                  168.228.128.0/22
                  168.232.116.0/22
                  170.0.204.0/22
                  170.245.100.0/22
                  170.247.52.0/22
                  177.66.64.0/21
                  177.67.0.0/21
                  177.70.128.0/20
                  177.75.192.0/19
                  177.87.144.0/21
                  177.130.192.0/19
                  179.191.128.0/19
                  186.219.144.0/20
                  186.233.72.0/21
                  187.18.128.0/17
                  187.108.96.0/20
                  187.110.208.0/20
                  189.45.64.0/18
                  189.50.144.0/20
                  191.6.80.0/21
                  200.94.240.0/22
                  201.149.120.0/22
                IPv6:
                  2804:880::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28270

    Signature Algorithm: sha256WithRSAEncryption
         90:08:f7:de:1b:24:87:fb:89:88:e3:b4:13:f7:6c:43:d4:06:
         73:6c:84:7e:ed:3d:65:c4:d7:95:a0:21:fe:94:79:cd:7e:44:
         0e:59:6c:c5:14:37:9c:6c:4f:e0:5b:87:6b:d4:2f:3c:c9:b9:
         98:f8:c1:99:13:64:6d:02:a7:c1:53:5d:5a:21:c1:69:0a:76:
         0d:52:f0:39:ae:fa:ae:2f:9e:2f:10:26:8e:ee:1c:67:45:9b:
         91:e2:63:48:6f:f0:d1:66:2e:fc:c3:61:fa:1b:7d:b2:3d:3f:
         06:5d:eb:3d:27:67:42:b2:77:cb:b4:f1:6b:b3:a6:ae:30:d2:
         b9:bf:cd:5d:f3:e9:14:24:93:8c:eb:a2:73:c8:80:eb:87:50:
         91:37:74:00:92:b9:64:2a:a8:1c:7a:d1:d9:01:61:bc:a2:30:
         fd:a9:77:82:24:c0:e5:57:12:39:58:57:0d:15:ae:b0:25:73:
         1a:d1:69:50:59:08:cb:52:10:18:39:67:fd:75:6a:b9:50:e7:
         da:46:a5:15:57:cd:ff:78:78:79:dd:40:cf:45:a2:1f:81:c6:
         bf:5e:a4:fa:a2:02:92:60:6c:0c:bb:eb:7d:9a:34:c1:fd:d4:
         11:d7:6f:19:a7:1d:b0:f4:aa:a4:67:d0:a6:e8:1c:db:ce:a1:
         04:6f:7d:ce
-----BEGIN CERTIFICATE-----
MIIGkjCCBXqgAwIBAgIEAP6/+zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyNzIwMTEzMloXDTI0MTIwMzE0NTQx
MFowMzExMC8GA1UEAxMoNGI0YmRhNWY1ZTdhYjdkNTI0ODY2ZmFlNjU0MzA4NDA3
N2M0YWFiMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKponN58vTQw
ONkIO0IDzfgFrnBSxwsMRDKei7gyYeu/Ak5XEhPxcG4memqFKjW+NCgn7JIfFiX7
GmgSMeh05kl5HbbuThhe0Dl+Bs4CkVueTko3aSRklog/7rTk/2XVjLPQ9MtRDrgR
Y8YS/La/aCg12fwnd3XWJwlB6i2TkYmtnY2MqqvA79o/MeQTRkcZO+DXkltshYBD
KPkOA8DsZx8yZ+7S5SsWGeaUoZtVQhbFOmDJ6/CDjKRnMcZK5bEvzYvK3mA4w+FB
T4PxDsh2apQ31DcCDbsEvvnYSokeyRORnBXBgNACEY6spZVVaBweBNXBvC5Em/oS
aD1cU15kVmsCAwEAAaOCA8EwggO9MB0GA1UdDgQWBBTBOIf3dHTDLC2ao4FqGJze
grKrnjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNTEyNmQ2MS05ODg2
LTQxY2QtOTY4NS1jMWJhZjk1MzE5NzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDUxMjZkNjEtOTg4Ni00
MWNkLTk2ODUtYzFiYWY5NTMxOTcwLzRiNGJkYTVmNWU3YWI3ZDUyNDg2NmZhZTY1
NDMwODQwNzdjNGFhYjMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
5gYIKwYBBQUHAQcBAf8EgdYwgdMwgcEEAgABMIG6AwQCg8RMAwQCg91EAwQCinV8
AwQCinncAwQCinrsAwQCj/9wAwQCoO7cAwQCqHk0AwQCqOMsAwQCqOSAAwQCqOh0
AwQCqgDMAwQCqvVkAwQCqvc0AwQDsUJAAwQDsUMAAwQEsUaAAwQFsUvAAwQDsVeQ
AwQFsYLAAwQFs7+AAwQEutuQAwQDuulIAwQHuxKAAwQEu2xgAwQEu27QAwQGvS1A
AwQEvTKQAwQDvwZQAwQCyF7wAwQCyZV4MA0EAgACMAcDBQAoBAiAMBkGCCsGAQUF
BwEIAQH/BAowCKAGMAQCAm5uMA0GCSqGSIb3DQEBCwUAA4IBAQCQCPfeGySH+4mI
47QT92xD1AZzbIR+7T1lxNeVoCH+lHnNfkQOWWzFFDecbE/gW4dr1C88ybmY+MGZ
E2RtAqfBU11aIcFpCnYNUvA5rvquL54vECaO7hxnRZuR4mNIb/DRZi78w2H6G32y
PT8GXes9J2dCsnfLtPFrs6auMNK5v81d8+kUJJOM66JzyIDrh1CRN3QAkrlkKqgc
etHZAWG8ojD9qXeCJMDlVxI5WFcNFa6wJXMa0WlQWQjLUhAYOWf9dWq5UOfaRqUV
V83/eHh53UDPRaIfgca/XqT6ogKSYGwMu+t9mjTB/dQR128Zpx2w9KqkZ9Cm6Bzb
zqEEb33O
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org