Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer
File:                     5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.cer (raw, json)
Hash identifier:          Nc6ezonAT9skKGlBuGrb2zzk3rkcmj2KgShjaJB5Vb4=
Subject key identifier:   0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEA529
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Sep 2018 19:59:07 +0000
Certificate not after:    Mon 10 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 52471
                          IP: 103.7.135.0/24
                          IP: 103.8.92.0/22
                          IP: 138.99.236.0/22
                          IP: 168.228.232.0/22
                          IP: 170.244.40.0/22
                          IP: 179.51.64.0/20
                          IP: 186.148.88.0/21
                          IP: 191.97.104.0/22
                          IP: 201.49.186.0/23
                          IP: 2803:ab00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15639849 (0xeea529)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 17 19:59:07 2018 GMT
            Not After : Mar 10 06:00:00 2025 GMT
        Subject: CN=5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:c2:86:d7:7b:dd:62:d1:72:60:57:6e:ee:5c:
                    b5:38:c7:54:99:c4:51:fc:5c:c2:08:d8:86:af:af:
                    24:02:81:72:b6:c6:25:4f:a5:01:51:ea:a5:dc:9e:
                    eb:9b:84:7f:72:32:37:22:f1:c2:ce:4f:69:47:8a:
                    48:57:ba:4f:98:e0:9a:6a:48:07:96:8a:94:92:b2:
                    01:68:fe:9d:e5:dd:45:76:8f:3d:7d:4c:51:23:e3:
                    3a:e6:e8:e6:5f:ca:fb:cf:c4:5a:b8:53:3d:12:cf:
                    b7:b8:9d:8c:6e:a7:89:02:07:e1:2e:29:26:54:aa:
                    1d:a8:9f:c1:ce:2f:80:50:87:85:6d:dc:2b:41:fd:
                    57:26:b2:43:1b:e1:db:32:3a:96:2a:87:8a:a1:48:
                    76:ff:ae:1f:e4:cd:dd:14:c1:77:ba:9a:3c:39:5e:
                    36:2e:a8:11:1c:93:d3:6c:9f:c4:a2:3d:93:4a:b4:
                    38:2d:49:cc:77:55:e6:8a:8d:02:1c:b7:72:11:54:
                    1c:72:96:ab:92:1f:7a:fd:83:1c:90:ee:4f:d4:7a:
                    a2:ba:1a:45:3e:82:2f:22:4c:a8:c6:16:1f:ff:cd:
                    9b:34:11:05:0b:fd:e1:4d:a2:5c:ce:6a:26:f5:34:
                    01:a8:be:80:ea:9d:b7:67:11:ab:06:f8:c2:df:e5:
                    9a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:EC:2A:D9:A6:7E:C1:FC:DC:41:66:E8:0F:84:57:90:EC:13:FE:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/235e8710-1eb9-4fec-b7d0-abbd3ec72a40/5608d6d1a8fbbf5ad4db84eaf109253b7ecf9845.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  103.7.135.0/24
                  103.8.92.0/22
                  138.99.236.0/22
                  168.228.232.0/22
                  170.244.40.0/22
                  179.51.64.0/20
                  186.148.88.0/21
                  191.97.104.0/22
                  201.49.186.0/23
                IPv6:
                  2803:ab00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52471

    Signature Algorithm: sha256WithRSAEncryption
         14:fc:52:c0:af:43:6e:98:68:c3:58:b8:2c:72:2d:5d:95:c8:
         70:90:92:5d:41:b5:bd:ff:bd:52:98:cd:aa:04:85:8c:94:57:
         4d:b3:19:cf:67:55:fc:0a:04:01:45:48:1c:cd:f3:5d:83:25:
         af:b3:ec:31:78:78:b6:72:77:5b:1e:c7:77:da:f7:ec:8d:14:
         0d:7a:5f:88:d2:55:be:d6:a6:e9:73:f8:6c:d2:e0:b0:a1:7f:
         fc:67:7d:01:43:1e:03:5b:88:6c:36:b6:77:01:99:ea:f6:42:
         48:af:5d:3b:d9:39:77:2d:2c:15:c8:39:5c:14:af:29:87:cf:
         76:fc:12:97:62:9f:b7:70:d8:a3:9b:ed:2b:2f:79:6b:b2:5c:
         86:2e:16:19:34:3c:9b:74:e0:2a:30:af:5f:e8:07:b9:f4:6e:
         ac:4f:b8:20:95:3f:d9:28:b6:95:c5:2a:13:e6:6f:ea:c7:04:
         2c:ac:88:4b:a1:b6:ac:84:9c:69:da:4b:3c:d7:fb:f7:87:c1:
         cd:e3:e7:fb:43:3f:be:be:ef:40:60:f5:95:93:a8:fd:5e:63:
         43:53:23:ef:e4:26:a4:4e:35:24:02:91:eb:d4:b6:83:6b:86:
         b6:9c:45:9f:3f:ba:fd:35:fd:3b:fd:d4:8a:4c:bc:17:76:42:
         de:18:a6:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org