Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4e3f406c0b9e0306138ee377ccd86fd9cd91fe13.cer
File:                     4e3f406c0b9e0306138ee377ccd86fd9cd91fe13.cer (raw, json)
Hash identifier:          ESh7e9E3ZmFzmFaFx9UBJLtXpdCTIpDOKPdS9M6pMFw=
Subject key identifier:   92:96:A7:57:3A:67:4C:D7:38:CD:18:97:15:1B:97:E2:5D:EC:89:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E231A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9409d603-9470-4576-ae39-07f6e5c4b6c1/4e3f406c0b9e0306138ee377ccd86fd9cd91fe13.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9409d603-9470-4576-ae39-07f6e5c4b6c1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Mon 22 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 16874
                          AS: 52441
                          AS: 269967
                          IP: 198.41.32.0 -- 198.41.46.255
                          IP: 200.0.158.0/24
                          IP: 200.6.64.0 -- 200.6.78.255
                          IP: 2801:0:b0::/45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14823842 (0xe231a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Apr 22 06:00:00 2024 GMT
        Subject: CN=4e3f406c0b9e0306138ee377ccd86fd9cd91fe13
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:e8:63:92:69:e5:8a:37:7c:55:9e:32:ff:9f:
                    c3:67:0a:94:15:03:97:86:e6:d3:8c:fb:9a:bd:d6:
                    3a:f6:60:99:0a:81:fa:48:36:d4:d8:dd:85:28:e9:
                    3c:12:ea:5f:85:2e:1f:f4:3c:cb:30:3a:22:54:ac:
                    f0:25:03:3a:b5:38:18:3c:27:c1:59:14:d4:74:e0:
                    94:77:c7:10:a3:81:30:de:99:3a:2e:78:1d:f1:75:
                    41:11:85:f4:fe:f8:b3:8d:34:64:55:86:57:70:f2:
                    8e:b8:2e:cd:2a:b1:fa:ea:19:e6:1a:f6:20:5f:fb:
                    8b:eb:87:89:ae:e0:aa:26:86:cf:d6:66:6d:a2:ca:
                    4f:90:18:7b:16:36:7b:dd:4f:dc:d4:9e:ed:4d:79:
                    fc:7e:1e:d2:ac:69:a2:74:49:18:25:79:16:02:48:
                    07:fa:d6:1a:ad:d5:fd:b2:fd:2b:46:00:a7:f4:e7:
                    00:9f:57:ff:23:01:49:ba:c2:e5:14:12:b1:f1:2d:
                    f2:d2:22:cc:3a:a7:79:6e:c9:96:a7:46:83:29:22:
                    af:34:34:77:86:dd:d2:c2:17:c3:68:e3:cf:da:ce:
                    10:89:37:66:3e:4e:31:31:3c:d3:cb:4c:e8:17:19:
                    cc:dc:5e:3d:59:67:04:cb:9f:91:e2:2a:9b:5b:1a:
                    b9:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:96:A7:57:3A:67:4C:D7:38:CD:18:97:15:1B:97:E2:5D:EC:89:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9409d603-9470-4576-ae39-07f6e5c4b6c1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9409d603-9470-4576-ae39-07f6e5c4b6c1/4e3f406c0b9e0306138ee377ccd86fd9cd91fe13.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  198.41.32.0-198.41.46.255
                  200.0.158.0/24
                  200.6.64.0-200.6.78.255
                IPv6:
                  2801:0:b0::/45

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16874
                  52441
                  269967

    Signature Algorithm: sha256WithRSAEncryption
         9f:c0:db:b3:65:03:83:4f:c8:83:e1:b0:17:1f:fc:3c:52:13:
         17:67:c4:c5:a0:3f:79:ec:0c:3d:ea:7a:93:75:c5:df:72:c2:
         b4:a2:15:2c:7d:29:e5:91:3c:38:c8:ac:d9:2e:b1:38:d2:bc:
         7b:8f:a6:8d:20:4e:91:ad:80:bf:98:0b:0f:4d:5b:77:42:1b:
         27:44:0c:0a:9c:2b:36:eb:32:68:ac:c3:29:c7:86:bb:62:26:
         09:ae:a9:62:0e:75:3a:c7:2c:cf:44:4b:b1:be:75:5a:95:61:
         25:5d:47:34:43:c1:54:04:58:f5:06:9f:de:24:dd:2c:e3:4c:
         ba:fb:0f:e9:0d:ca:a9:a0:8a:85:93:68:c3:ee:dc:b6:c8:b1:
         d9:b0:c9:22:d2:d2:4b:91:e9:b3:c7:5d:80:9f:43:c9:19:e3:
         e9:53:34:54:53:f6:5c:a4:69:cd:b7:fd:5e:a6:ef:19:1d:a3:
         40:3f:d0:4e:31:05:0e:e8:dc:b5:2a:89:12:1c:16:82:43:aa:
         ad:31:6e:21:02:5f:7d:c5:39:62:d5:47:55:1d:76:53:ee:6a:
         52:51:e6:b4:1d:97:89:f1:24:36:3a:06:16:10:0e:55:7b:83:
         fb:f9:8a:03:3c:52:a4:04:ab:b2:16:72:58:a5:9d:06:5d:9a:
         f4:29:7c:5f
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIEAOIxojANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1MFoXDTI0MDQyMjA2MDAw
MFowMzExMC8GA1UEAxMoNGUzZjQwNmMwYjllMDMwNjEzOGVlMzc3Y2NkODZmZDlj
ZDkxZmUxMzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALHoY5Jp5Yo3
fFWeMv+fw2cKlBUDl4bm04z7mr3WOvZgmQqB+kg21NjdhSjpPBLqX4UuH/Q8yzA6
IlSs8CUDOrU4GDwnwVkU1HTglHfHEKOBMN6ZOi54HfF1QRGF9P74s400ZFWGV3Dy
jrguzSqx+uoZ5hr2IF/7i+uHia7gqiaGz9ZmbaLKT5AYexY2e91P3NSe7U15/H4e
0qxponRJGCV5FgJIB/rWGq3V/bL9K0YAp/TnAJ9X/yMBSbrC5RQSsfEt8tIizDqn
eW7JlqdGgykirzQ0d4bd0sIXw2jjz9rOEIk3Zj5OMTE808tM6BcZzNxePVlnBMuf
keIqm1sauW8CAwEAAaOCAzAwggMsMB0GA1UdDgQWBBSSlqdXOmdM1zjNGJcVG5fi
XeyJ1zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy85NDA5ZDYwMy05NDcw
LTQ1NzYtYWUzOS0wN2Y2ZTVjNGI2YzEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvOTQwOWQ2MDMtOTQ3MC00
NTc2LWFlMzktMDdmNmU1YzRiNmMxLzRlM2Y0MDZjMGI5ZTAzMDYxMzhlZTM3N2Nj
ZDg2ZmQ5Y2Q5MWZlMTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBM
BggrBgEFBQcBBwEB/wQ9MDswKAQCAAEwIjAMAwQFxikgAwQAxikuAwQAyACeMAwD
BAbIBkADBADIBk4wDwQCAAIwCQMHAygBAAAAsDAjBggrBgEFBQcBCAEB/wQUMBKg
EDAOAgJB6gIDAMzZAgMEHo8wDQYJKoZIhvcNAQELBQADggEBAJ/A27NlA4NPyIPh
sBcf/DxSExdnxMWgP3nsDD3qepN1xd9ywrSiFSx9KeWRPDjIrNkusTjSvHuPpo0g
TpGtgL+YCw9NW3dCGydEDAqcKzbrMmiswynHhrtiJgmuqWIOdTrHLM9ES7G+dVqV
YSVdRzRDwVQEWPUGn94k3SzjTLr7D+kNyqmgioWTaMPu3LbIsdmwySLS0kuR6bPH
XYCfQ8kZ4+lTNFRT9lykac23/V6m7xkdo0A/0E4xBQ7o3LUqiRIcFoJDqq0xbiEC
X33FOWLVR1UddlPualJR5rQdl4nxJDY6BhYQDlV7g/v5igM8UqQEq7IWclilnQZd
mvQpfF8=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org