Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5260ef8ee46e8e7d6375f32bcfb388b9c6502014.cer
File:                     5260ef8ee46e8e7d6375f32bcfb388b9c6502014.cer (raw, json)
Hash identifier:          pUQpGOW7taraKciOK8R+arf50qqGcQBzajYtIl7OAiM=
Subject key identifier:   99:CF:7B:E9:75:3A:16:B9:D6:78:78:D3:65:5B:2C:31:97:C3:F0:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE9BC1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09ebcf92-eb5b-4f64-853e-047c2a7b9e0e/5260ef8ee46e8e7d6375f32bcfb388b9c6502014.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09ebcf92-eb5b-4f64-853e-047c2a7b9e0e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:04:06 +0000
Certificate not after:    Thu 14 Aug 2025 20:02:23 +0000
Subordinate resources:    AS: 28343
                          IP: 45.234.184.0/22
                          IP: 131.72.108.0/22
                          IP: 131.72.148.0/22
                          IP: 131.161.16.0/22
                          IP: 131.161.144.0/22
                          IP: 131.221.88.0/22
                          IP: 131.221.176.0/22
                          IP: 132.255.12.0/22
                          IP: 138.0.200.0/22
                          IP: 138.36.204.0/22
                          IP: 138.94.72.0/22
                          IP: 138.94.188.0/22
                          IP: 138.97.136.0/22
                          IP: 138.118.28.0/22
                          IP: 138.118.148.0/22
                          IP: 138.121.188.0/22
                          IP: 138.122.208.0/22
                          IP: 138.204.60.0/22
                          IP: 143.0.212.0/22
                          IP: 143.208.96.0/22
                          IP: 143.208.196.0/22
                          IP: 143.208.212.0/22
                          IP: 143.255.220.0/22
                          IP: 167.249.224.0/22
                          IP: 167.250.176.0/22
                          IP: 168.0.120.0/22
                          IP: 168.194.36.0/22
                          IP: 168.196.132.0/22
                          IP: 168.232.24.0/22
                          IP: 168.232.232.0/22
                          IP: 170.78.198.0/23
                          IP: 170.78.212.0/22
                          IP: 170.81.216.0/21
                          IP: 170.82.176.0/22
                          IP: 170.82.240.0/22
                          IP: 170.84.120.0/22
                          IP: 170.231.24.0/22
                          IP: 170.238.216.0/22
                          IP: 170.254.220.0/22
                          IP: 177.8.240.0/21
                          IP: 177.10.96.0/20
                          IP: 177.53.124.0/22
                          IP: 177.54.0.0/20
                          IP: 177.67.200.0/21
                          IP: 177.72.40.0/21
                          IP: 177.73.136.0/21
                          IP: 177.73.184.0/22
                          IP: 177.74.208.0/20
                          IP: 177.74.240.0/20
                          IP: 177.101.96.0/19
                          IP: 177.104.0.0/20
                          IP: 177.125.104.0/22
                          IP: 177.125.232.0/21
                          IP: 177.129.104.0/22
                          IP: 177.130.224.0/20
                          IP: 177.130.248.0/21
                          IP: 177.136.160.0/21
                          IP: 177.184.144.0/21
                          IP: 177.200.192.0/19
                          IP: 177.221.160.0/20
                          IP: 179.127.160.0/19
                          IP: 179.190.96.0/19
                          IP: 186.208.16.0/20
                          IP: 186.209.16.0/20
                          IP: 186.209.192.0/20
                          IP: 186.216.240.0/20
                          IP: 186.225.0.0/20
                          IP: 186.226.144.0/20
                          IP: 186.227.136.0/21
                          IP: 186.237.144.0/21
                          IP: 186.249.192.0/20
                          IP: 186.251.108.0/22
                          IP: 187.45.64.0/20
                          IP: 187.85.160.0/19
                          IP: 187.87.96.0/20
                          IP: 187.94.96.0/20
                          IP: 187.102.0.0/20
                          IP: 187.108.208.0/20
                          IP: 189.28.192.0/19
                          IP: 189.45.192.0/20
                          IP: 189.90.48.0/20
                          IP: 189.113.224.0/19
                          IP: 189.127.16.0/20
                          IP: 191.6.88.0/21
                          IP: 191.37.172.0/22
                          IP: 191.52.240.0/21
                          IP: 191.240.216.0/21
                          IP: 191.253.96.0/19
                          IP: 200.10.4.0/22
                          IP: 201.131.80.0/21
                          IP: 201.131.136.0/21
                          IP: 201.131.156.0/22
                          IP: 201.159.248.0/22
                          IP: 2804:c::/32
                          IP: 2804:30c::/32
                          IP: 2804:ed8::/32
                          IP: 2804:f58::/32
                          IP: 2804:fe4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16686017 (0xfe9bc1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:04:06 2023 GMT
            Not After : Aug 14 20:02:23 2025 GMT
        Subject: CN=5260ef8ee46e8e7d6375f32bcfb388b9c6502014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:25:2f:20:a3:4f:3b:a6:3b:e9:85:ca:d3:87:
                    1f:bf:88:10:f5:84:ab:ed:a8:d6:a3:0c:47:5c:ca:
                    2f:07:d6:02:cc:39:76:88:de:51:35:8b:f0:26:03:
                    e3:8d:28:8e:65:6d:c2:19:4b:24:e5:de:bc:29:52:
                    d8:bc:a7:bd:ac:55:46:d4:78:c1:7c:24:30:73:e7:
                    79:dc:8f:51:71:6c:45:1f:67:94:59:96:a9:d4:44:
                    cd:38:46:5e:6b:54:06:25:76:48:c2:9b:5e:2a:1b:
                    5a:40:29:f2:d5:8e:0c:63:11:ca:b2:68:76:c8:47:
                    d7:9b:69:16:5e:48:51:1b:6e:51:bf:49:ed:49:0f:
                    5f:27:19:3f:e7:6c:c8:c0:25:f7:48:bf:60:7a:ec:
                    f9:c7:ff:08:db:71:eb:51:b3:84:9d:d4:da:b0:9c:
                    4f:4d:70:f5:ed:5f:e5:e8:58:4c:ea:bf:d5:74:82:
                    31:73:0c:8c:bd:6a:56:ca:ac:2c:f1:e4:24:1d:94:
                    d9:e6:d9:8d:13:78:bf:f0:07:68:87:f6:aa:14:98:
                    09:ea:c4:08:bc:60:46:cc:15:95:02:ac:25:5a:40:
                    2c:65:ce:15:c4:e7:46:37:2e:ef:5c:48:31:93:75:
                    7c:2c:03:3d:61:63:03:be:4f:98:54:31:f3:58:49:
                    00:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:CF:7B:E9:75:3A:16:B9:D6:78:78:D3:65:5B:2C:31:97:C3:F0:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09ebcf92-eb5b-4f64-853e-047c2a7b9e0e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09ebcf92-eb5b-4f64-853e-047c2a7b9e0e/5260ef8ee46e8e7d6375f32bcfb388b9c6502014.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.184.0/22
                  131.72.108.0/22
                  131.72.148.0/22
                  131.161.16.0/22
                  131.161.144.0/22
                  131.221.88.0/22
                  131.221.176.0/22
                  132.255.12.0/22
                  138.0.200.0/22
                  138.36.204.0/22
                  138.94.72.0/22
                  138.94.188.0/22
                  138.97.136.0/22
                  138.118.28.0/22
                  138.118.148.0/22
                  138.121.188.0/22
                  138.122.208.0/22
                  138.204.60.0/22
                  143.0.212.0/22
                  143.208.96.0/22
                  143.208.196.0/22
                  143.208.212.0/22
                  143.255.220.0/22
                  167.249.224.0/22
                  167.250.176.0/22
                  168.0.120.0/22
                  168.194.36.0/22
                  168.196.132.0/22
                  168.232.24.0/22
                  168.232.232.0/22
                  170.78.198.0/23
                  170.78.212.0/22
                  170.81.216.0/21
                  170.82.176.0/22
                  170.82.240.0/22
                  170.84.120.0/22
                  170.231.24.0/22
                  170.238.216.0/22
                  170.254.220.0/22
                  177.8.240.0/21
                  177.10.96.0/20
                  177.53.124.0/22
                  177.54.0.0/20
                  177.67.200.0/21
                  177.72.40.0/21
                  177.73.136.0/21
                  177.73.184.0/22
                  177.74.208.0/20
                  177.74.240.0/20
                  177.101.96.0/19
                  177.104.0.0/20
                  177.125.104.0/22
                  177.125.232.0/21
                  177.129.104.0/22
                  177.130.224.0/20
                  177.130.248.0/21
                  177.136.160.0/21
                  177.184.144.0/21
                  177.200.192.0/19
                  177.221.160.0/20
                  179.127.160.0/19
                  179.190.96.0/19
                  186.208.16.0/20
                  186.209.16.0/20
                  186.209.192.0/20
                  186.216.240.0/20
                  186.225.0.0/20
                  186.226.144.0/20
                  186.227.136.0/21
                  186.237.144.0/21
                  186.249.192.0/20
                  186.251.108.0/22
                  187.45.64.0/20
                  187.85.160.0/19
                  187.87.96.0/20
                  187.94.96.0/20
                  187.102.0.0/20
                  187.108.208.0/20
                  189.28.192.0/19
                  189.45.192.0/20
                  189.90.48.0/20
                  189.113.224.0/19
                  189.127.16.0/20
                  191.6.88.0/21
                  191.37.172.0/22
                  191.52.240.0/21
                  191.240.216.0/21
                  191.253.96.0/19
                  200.10.4.0/22
                  201.131.80.0/21
                  201.131.136.0/21
                  201.131.156.0/22
                  201.159.248.0/22
                IPv6:
                  2804:c::/32
                  2804:30c::/32
                  2804:ed8::/32
                  2804:f58::/32
                  2804:fe4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28343

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:cc:51:97:a3:23:5e:fe:a1:e5:9c:8c:e1:4d:a2:2e:aa:
         51:c1:cd:f2:7f:16:ba:fb:d1:01:5a:26:c6:01:85:9c:4d:d2:
         4c:9d:f7:79:a6:90:3c:50:00:a9:5f:09:61:42:81:2e:a2:ea:
         6f:e7:fe:53:86:d7:36:6a:96:96:55:cf:d7:0d:93:38:96:63:
         ea:62:df:a1:91:2a:26:d2:41:49:f0:7c:54:ae:2b:0c:d9:a9:
         4e:8f:9c:18:7e:23:82:41:53:09:03:34:01:0c:97:fd:ec:98:
         d0:8b:eb:34:dd:b5:29:11:2a:f4:41:a6:65:f8:58:2e:fb:41:
         72:c8:90:62:63:3e:f7:1b:97:3d:4d:06:59:09:f4:e8:24:f1:
         6b:aa:b8:f9:b6:00:37:b3:bc:89:ac:b4:af:4f:e7:d7:0b:34:
         5c:23:bc:a4:09:2f:62:d4:81:c0:ec:c4:8a:62:7f:0b:b9:25:
         2b:2e:9d:f9:03:e6:e4:57:bc:4c:83:9b:6e:2d:7e:5b:97:88:
         f5:af:73:17:2c:c4:96:0e:3a:59:4a:c6:af:5e:48:08:da:c7:
         cf:58:93:90:f0:47:89:75:91:5f:98:9f:08:29:d3:09:d7:df:
         c1:76:e1:a8:cc:ef:f1:11:db:20:d4:20:39:4c:55:ec:97:50:
         19:b8:a8:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org