Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53fe257dcf8bca4ea5c613680400a9cf495caccb.cer
File:                     53fe257dcf8bca4ea5c613680400a9cf495caccb.cer (raw, json)
Hash identifier:          4V57OoAxs6Hmo/8coMCQ/um13gPgxxYszCaC/gaIBic=
Subject key identifier:   C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5FD3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:30 +0000
Certificate not after:    Sat 21 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 262168
                          IP: 138.117.160.0/22
                          IP: 179.49.64.0/21
                          IP: 200.115.20.0/22
                          IP: 2803:500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16121146 (0xf5fd3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:30 2017 GMT
            Not After : Sep 21 05:00:00 2024 GMT
        Subject: CN=53fe257dcf8bca4ea5c613680400a9cf495caccb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e0:1a:2f:97:08:d2:76:7a:42:df:42:45:63:
                    e7:81:8c:04:c2:63:6d:44:ee:aa:68:a5:71:16:82:
                    23:2a:8e:ea:57:7e:5e:4a:ea:a8:5f:51:9b:33:d4:
                    26:1a:ed:e9:22:6c:59:22:de:04:94:08:39:b9:56:
                    86:e4:a1:62:8a:8c:af:34:5d:02:e8:3b:93:f3:c5:
                    8f:cd:31:30:f2:37:39:94:99:96:3d:6e:7d:4b:d5:
                    ea:54:cf:ea:5d:da:5a:92:fd:0f:c4:fe:0b:d8:8e:
                    55:c7:13:25:73:d7:08:b3:73:84:c5:21:41:0b:fb:
                    ff:0e:85:90:37:94:8f:2c:98:be:f0:a0:80:41:4a:
                    93:8d:b3:dc:f9:a0:2d:b5:1b:eb:43:88:a9:54:ce:
                    78:da:ea:0d:5c:9c:ee:08:16:f3:af:0a:80:2f:7b:
                    2b:b7:72:fe:be:8b:66:22:38:d2:ce:b2:70:8f:8e:
                    6b:77:05:e0:39:f8:6b:3d:54:09:63:57:4a:29:ef:
                    d4:b8:3e:d4:0b:2b:f7:3d:35:1e:21:89:ca:5d:91:
                    37:05:a2:ed:f2:ff:1c:10:05:dc:a7:c6:7e:a7:61:
                    ee:90:6c:dd:53:73:b7:44:bc:42:59:c2:62:e2:4d:
                    d7:59:5f:f5:64:d4:e1:ab:e6:fd:75:d9:60:2d:bb:
                    6f:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:65:04:76:5F:5B:06:AB:B5:EC:85:2C:4C:F1:85:76:5A:88:98:66
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/29f7b931-4c3f-4df8-99cd-a873d992e0a0/53fe257dcf8bca4ea5c613680400a9cf495caccb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.117.160.0/22
                  179.49.64.0/21
                  200.115.20.0/22
                IPv6:
                  2803:500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262168

    Signature Algorithm: sha256WithRSAEncryption
         9b:ab:bb:1f:d8:b5:ef:f9:0f:78:df:f4:5c:ea:d3:07:0a:06:
         42:da:8e:07:94:1c:8e:70:30:44:0e:92:89:bd:35:a0:1e:88:
         6e:e2:62:1c:36:e7:3a:66:c7:b9:28:06:37:1f:86:ea:17:92:
         76:7e:df:ae:db:de:c9:f7:d6:99:9f:7b:36:bd:66:d9:40:fa:
         8f:59:da:6c:f5:e2:68:17:92:81:69:10:a4:0b:0f:4a:48:f6:
         4c:09:01:31:0a:86:96:af:65:d1:56:1a:c3:16:b3:88:3c:aa:
         00:c8:e3:2f:e4:56:af:dd:7d:b5:88:2d:90:2a:2d:d3:62:f6:
         c2:77:89:9f:dc:3f:9a:c7:73:70:0b:5d:1a:66:1f:38:19:2f:
         b5:01:a9:25:81:35:0b:29:36:6a:85:b9:f8:b7:f2:dd:db:9a:
         06:7f:61:ab:01:a6:7e:77:d5:31:e3:e4:ee:41:ff:32:9d:68:
         6b:6d:9e:ce:62:53:3a:aa:d1:a9:8c:51:46:fd:9c:f3:d3:c5:
         73:ed:c2:8d:f8:de:6e:3e:fb:00:69:3a:49:49:be:3f:13:53:
         3b:96:ea:ea:7b:e6:54:33:24:74:3f:c5:ba:0b:a2:7d:70:fe:
         6a:fd:79:24:73:f5:ca:a1:bd:0b:3a:b0:d4:69:27:57:a1:9d:
         32:be:14:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org