Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer
File:                     4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.cer (raw, json)
Hash identifier:          LNKbarPfR711gGpsj+60hqKHyWiXz3Mykb7wfcomaQ4=
Subject key identifier:   5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0EB4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Jul 2023 14:24:13 +0000
Certificate not after:    Sat 12 Apr 2025 01:50:42 +0000
Subordinate resources:    AS: 13999
                          AS: 28541
                          AS: 262916
                          IP: 177.224.0.0/13
                          IP: 177.240.0.0/13
                          IP: 181.199.192.0/20
                          IP: 187.179.160.0 -- 187.179.255.255
                          IP: 187.191.128.0/17
                          IP: 187.240.0.0/13
                          IP: 189.192.0.0/13
                          IP: 190.110.0.0/19
                          IP: 200.52.160.0 -- 200.52.223.255
                          IP: 200.56.128.0/18
                          IP: 200.66.0.0/18
                          IP: 200.77.0.0/17
                          IP: 200.92.0.0/16
                          IP: 200.94.224.0/20
                          IP: 201.132.0.0/16
                          IP: 201.159.192.0 -- 201.159.215.255
                          IP: 201.164.0.0/15
                          IP: 201.169.0.0/16
                          IP: 2806:260::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15788877 (0xf0eb4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  6 14:24:13 2023 GMT
            Not After : Apr 12 01:50:42 2025 GMT
        Subject: CN=4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:da:9c:cd:ad:36:e0:d2:c6:c0:11:79:d3:1a:
                    f1:da:54:0b:34:8b:e7:f3:95:d4:bc:ef:f0:df:26:
                    ab:9c:8f:85:dd:7e:46:46:e0:e6:88:7a:cb:9c:73:
                    d1:7b:57:fd:94:a3:03:99:32:fd:d7:de:08:3d:ec:
                    cf:70:b0:2b:4d:ce:5e:d2:f7:4d:50:e6:69:39:5b:
                    09:e3:e9:b9:1c:6a:3b:63:19:df:e2:7c:7d:0e:cf:
                    72:5b:b5:b7:94:46:7c:30:ad:30:7c:fe:57:b0:1d:
                    ef:c2:cb:a2:a2:0d:03:51:07:6c:74:b7:27:ee:37:
                    ef:4e:07:06:2f:d7:0f:c0:39:82:97:fc:9a:3b:c4:
                    8e:d7:28:22:bd:0f:dd:df:05:cf:b0:a4:ad:98:14:
                    0d:2c:2c:f7:9a:69:1d:07:73:ed:13:0d:cf:a0:32:
                    33:e1:78:93:2b:b7:57:ff:33:48:0a:f3:c8:51:d4:
                    a0:c5:b7:7d:e7:00:ec:93:de:f9:42:4a:98:2f:63:
                    90:ab:a2:a3:d4:13:2b:b5:4b:d1:11:b0:6c:e6:0e:
                    29:fb:d1:b3:d6:1a:6c:5f:df:4a:5f:3b:3d:21:b7:
                    c5:3e:1c:63:7b:b7:7f:26:ea:5a:1a:db:2d:ea:78:
                    9b:fd:d1:a5:ce:68:41:05:da:47:1c:f7:52:6a:cd:
                    4b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:0A:EB:23:D6:C5:C1:05:08:05:68:26:C4:27:8D:D9:91:EA:3B:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8400432d-9040-4dd6-a6a2-d06966af5f2b/4ba5f8bf4b9e9ce9871f1d04905f29676f1acaf7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.224.0.0/13
                  177.240.0.0/13
                  181.199.192.0/20
                  187.179.160.0-187.179.255.255
                  187.191.128.0/17
                  187.240.0.0/13
                  189.192.0.0/13
                  190.110.0.0/19
                  200.52.160.0-200.52.223.255
                  200.56.128.0/18
                  200.66.0.0/18
                  200.77.0.0/17
                  200.92.0.0/16
                  200.94.224.0/20
                  201.132.0.0/16
                  201.159.192.0-201.159.215.255
                  201.164.0.0/15
                  201.169.0.0/16
                IPv6:
                  2806:260::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13999
                  28541
                  262916

    Signature Algorithm: sha256WithRSAEncryption
         71:40:ee:74:ce:f5:fd:85:37:64:1a:fb:c2:94:e3:ca:10:63:
         c3:c9:f2:99:19:8f:d8:00:42:42:f5:87:e6:f7:bb:a3:e5:f3:
         ef:0d:02:c0:11:12:f1:80:11:e8:0e:97:70:5a:51:35:7d:dd:
         47:fe:ad:a1:af:6f:0c:a8:ca:fd:86:20:81:31:53:2e:3a:3e:
         47:45:bb:74:81:06:c4:1c:cf:bb:52:eb:8a:3e:f7:68:f4:91:
         61:24:16:69:0a:5f:b2:6e:df:75:f9:c7:fd:1c:d2:a8:19:9e:
         09:7d:89:be:2a:33:9c:33:3f:86:1f:23:6b:74:aa:40:3c:a0:
         6d:e4:66:2b:ef:65:f4:a7:34:70:b4:3b:75:60:af:2c:d0:59:
         02:f7:96:82:74:db:33:88:97:42:f2:ff:a6:71:e8:48:74:23:
         bf:11:72:75:66:8f:e9:56:8a:7b:37:bf:da:7a:6f:6d:c3:91:
         f4:45:59:b5:bf:ee:5e:2f:a3:7c:cd:99:fd:24:37:58:da:53:
         57:bb:fc:70:ed:7c:ca:13:bf:0a:0c:67:d4:55:d4:e8:dc:4c:
         c2:a3:1c:fe:23:fa:a2:7a:02:48:21:f0:23:af:af:bb:eb:ea:
         46:d3:6c:3a:75:07:ce:2c:06:40:2d:2f:08:11:f4:d5:28:09:
         02:ab:cf:07
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org