Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer
File:                     4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.cer (raw, json)
Hash identifier:          m90inePihweLxtMtaLyAi3sIIqEaIPymfetOIXR1Rcw=
Subject key identifier:   57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DCF23A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Sat 24 Feb 2024 06:00:00 +0000
Subordinate resources:    AS: 52385
                          AS: 263779
                          AS: 266717 -- 266719
                          IP: 45.231.52.0/22
                          IP: 200.10.176.0/23
                          IP: 200.107.82.0/23
                          IP: 2001:13c7:7004::/48
                          IP: 2801:1d:a000::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14479930 (0xdcf23a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Feb 24 06:00:00 2024 GMT
        Subject: CN=4d4536f8ba78ea8a7a00d99f6ef994274b4a1092
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:f9:e1:19:5e:b9:2a:e8:03:a3:74:fe:61:db:
                    59:98:7c:68:9a:60:b8:ef:9a:6f:56:a5:c8:c8:ba:
                    23:9d:43:53:e3:6c:ce:6d:bb:61:1d:e6:15:18:ed:
                    da:c0:00:9e:a1:2d:29:70:66:4e:15:38:7e:86:86:
                    b8:9f:93:4b:6e:b9:b4:26:33:dd:7a:23:f8:da:3b:
                    ea:9c:d2:e1:4b:7c:b1:4f:4a:f8:d7:95:dd:de:fd:
                    6b:a0:29:47:f7:59:96:96:fe:da:c6:4c:e8:5b:54:
                    3f:81:a4:37:91:a0:3c:2d:8e:52:3a:dc:1c:d8:15:
                    82:ea:88:2b:c2:db:92:dc:54:1d:1e:f2:96:4d:56:
                    79:f4:46:7b:30:c1:2c:a2:3c:06:03:f5:6d:53:bc:
                    29:50:d8:04:64:11:ad:a3:ad:2d:af:9c:9d:00:79:
                    8a:56:db:93:00:ed:db:c4:88:45:29:e2:ef:0f:c3:
                    3d:77:88:71:d9:52:41:c4:72:32:25:06:82:11:82:
                    e5:69:a1:cc:e7:fb:90:80:44:15:76:72:68:d7:08:
                    6d:fe:0e:69:4b:8d:4f:cb:5a:21:fc:71:66:a7:c4:
                    74:54:ed:98:ed:c3:dd:b7:46:6e:8c:26:84:60:5b:
                    5e:65:87:d6:9b:60:56:0e:23:4b:1f:f8:04:68:f5:
                    ea:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:D6:85:3C:0C:0C:72:10:45:50:2B:B6:43:77:52:6B:C7:D0:50:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9fd8fa0f-a5be-4b8d-96fb-3f3c3b868ef0/4d4536f8ba78ea8a7a00d99f6ef994274b4a1092.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.52.0/22
                  200.10.176.0/23
                  200.107.82.0/23
                IPv6:
                  2001:13c7:7004::/48
                  2801:1d:a000::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52385
                  263779
                  266717-266719

    Signature Algorithm: sha256WithRSAEncryption
         99:c8:ba:8c:04:34:84:f7:77:f7:77:39:74:59:12:32:cc:e8:
         37:40:3d:13:47:36:f5:c2:f4:b9:2f:59:69:b4:b4:03:2b:54:
         ef:aa:10:22:2d:bf:ad:8a:bf:58:83:b1:e9:bc:b3:19:f0:91:
         98:58:c5:58:4f:51:c6:7d:c4:0f:7b:fb:b2:a4:bc:7a:18:a0:
         48:e9:c9:ff:a6:1c:88:99:60:e4:fa:c1:38:03:ad:3d:35:11:
         db:8b:4f:e4:40:3d:c4:17:77:80:49:ee:d9:31:f8:e1:30:6a:
         b0:de:c8:b6:80:27:18:02:53:f2:42:53:62:54:80:c1:49:fc:
         e5:d6:8f:ff:6b:85:1c:41:20:90:07:dd:ad:41:17:54:aa:09:
         ce:c7:34:80:b9:61:1b:83:92:30:76:81:dc:14:d2:1c:5d:39:
         a7:4d:fe:54:a4:7a:eb:89:6e:ba:d9:8e:6e:08:0c:e1:01:1e:
         ed:9e:30:1d:45:3a:29:b0:8e:cc:c3:e6:d0:6e:83:c4:84:62:
         c2:61:d1:a5:20:04:ad:51:39:74:6b:6a:85:1f:7f:75:e2:99:
         d0:4d:87:5a:68:2d:84:5d:59:df:c5:a5:f3:a0:3e:fb:87:a8:
         4b:24:df:6d:76:ab:44:db:34:43:6c:a5:bc:f6:41:20:0a:e5:
         fa:99:f0:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-ams.rpki-client.org