Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/570e3c2513f96c0661b2126fa6e9ff9ce35a0fa1.cer
File:                     570e3c2513f96c0661b2126fa6e9ff9ce35a0fa1.cer (raw, json)
Hash identifier:          5iRpaC+luh1o/aC9zUNmz2IlvQ3SYVFd2gAozZwkZBk=
Subject key identifier:   04:1C:15:76:E8:A8:A3:1D:A6:28:5F:A2:B1:D5:C5:31:F0:80:84:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF4FD1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72741618-af3a-452c-8fe7-cbfbb7c2c034/570e3c2513f96c0661b2126fa6e9ff9ce35a0fa1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72741618-af3a-452c-8fe7-cbfbb7c2c034/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:14:53 +0000
Certificate not after:    Tue 03 Dec 2024 12:07:29 +0000
Subordinate resources:    AS: 262903
                          IP: 177.23.208.0/21
                          IP: 177.86.104.0/21
                          IP: 179.109.56.0/21
                          IP: 186.251.56.0/22
                          IP: 2804:1644::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16732113 (0xff4fd1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:14:53 2023 GMT
            Not After : Dec  3 12:07:29 2024 GMT
        Subject: CN=570e3c2513f96c0661b2126fa6e9ff9ce35a0fa1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:00:55:a9:cb:66:f0:f6:31:34:ee:57:b1:10:
                    42:08:4e:29:75:01:aa:46:9f:3b:45:ee:87:a2:ac:
                    15:e7:f1:5e:84:9d:7e:ce:2b:ca:60:b1:5d:92:4a:
                    0e:45:ba:e6:24:28:c3:69:8f:43:94:f0:31:7f:6e:
                    86:4e:c6:3f:79:f7:39:fb:a9:11:25:96:ea:c0:3e:
                    76:68:30:8f:e5:fc:60:aa:3d:3b:c2:b3:95:b2:ed:
                    9d:27:5b:d4:bf:6b:7f:4b:63:cf:67:9b:6d:2d:4e:
                    6f:ef:8c:ed:21:e1:f1:27:fc:c2:b7:0d:33:73:70:
                    37:db:b8:67:aa:ae:1f:c2:c9:40:ba:55:67:24:71:
                    47:43:79:bc:f8:63:c9:10:44:94:d6:a0:59:2f:e9:
                    a2:75:be:53:d9:fc:48:cf:77:0a:07:97:55:ad:d6:
                    48:d3:97:c6:f3:45:70:c6:f0:39:3a:6d:ff:06:11:
                    70:97:49:94:49:65:ef:a3:3f:6f:17:c7:27:19:41:
                    6c:b3:33:a1:d7:c7:dc:ad:d2:3f:04:aa:64:e0:9f:
                    6a:c8:56:84:f2:77:eb:1e:b2:91:46:46:84:21:85:
                    9f:d8:ed:91:11:6d:f4:68:8b:82:39:41:51:0c:05:
                    a4:0a:c1:e9:e9:df:58:4e:97:45:1f:4e:60:19:50:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:1C:15:76:E8:A8:A3:1D:A6:28:5F:A2:B1:D5:C5:31:F0:80:84:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72741618-af3a-452c-8fe7-cbfbb7c2c034/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72741618-af3a-452c-8fe7-cbfbb7c2c034/570e3c2513f96c0661b2126fa6e9ff9ce35a0fa1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.23.208.0/21
                  177.86.104.0/21
                  179.109.56.0/21
                  186.251.56.0/22
                IPv6:
                  2804:1644::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262903

    Signature Algorithm: sha256WithRSAEncryption
         1f:b9:a8:34:10:47:ac:7b:a3:0d:1c:e1:77:66:9e:be:1f:3a:
         62:6e:ee:94:58:8a:7f:e9:61:17:47:05:9f:72:17:eb:80:f8:
         b1:e8:a6:6e:3e:d2:8e:16:f0:cf:bf:79:28:e7:7d:c6:d1:31:
         20:a9:62:23:20:2e:4e:da:2e:7c:f8:ea:99:b3:16:1d:65:44:
         f4:c1:0c:c4:05:2b:5d:2b:d4:2c:52:9c:ad:a0:c2:cf:e4:fa:
         45:37:6f:cb:13:1c:0d:c2:1b:19:b2:57:a1:bc:83:8e:85:09:
         ed:c1:dd:b9:40:56:40:ef:cb:5b:df:c4:37:bf:30:e1:6d:a6:
         72:c5:aa:80:df:40:73:a0:75:df:de:2b:4a:d5:f7:90:74:b3:
         b0:b6:24:69:8c:2e:9e:93:c0:24:98:b3:42:d9:1c:65:96:cd:
         a5:fc:5f:9e:14:29:50:e0:f1:68:95:32:8d:f6:fb:be:b6:8b:
         b5:54:be:10:85:45:c3:25:23:da:4b:d9:6b:87:69:42:c4:5b:
         fa:6b:12:8d:35:49:74:02:21:58:17:9d:06:d2:92:37:a5:23:
         ee:f1:a3:4a:63:f4:79:7c:3d:e1:93:65:dc:04:1d:d4:d3:5a:
         a4:1a:bc:50:19:37:94:a3:94:9a:ad:ca:b5:c8:b6:61:b3:33:
         27:42:5f:44
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgIEAP9P0TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyOTE3MTQ1M1oXDTI0MTIwMzEyMDcy
OVowMzExMC8GA1UEAxMoNTcwZTNjMjUxM2Y5NmMwNjYxYjIxMjZmYTZlOWZmOWNl
MzVhMGZhMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALIAVanLZvD2
MTTuV7EQQghOKXUBqkafO0Xuh6KsFefxXoSdfs4rymCxXZJKDkW65iQow2mPQ5Tw
MX9uhk7GP3n3OfupESWW6sA+dmgwj+X8YKo9O8KzlbLtnSdb1L9rf0tjz2ebbS1O
b++M7SHh8Sf8wrcNM3NwN9u4Z6quH8LJQLpVZyRxR0N5vPhjyRBElNagWS/ponW+
U9n8SM93CgeXVa3WSNOXxvNFcMbwOTpt/wYRcJdJlEll76M/bxfHJxlBbLMzodfH
3K3SPwSqZOCfashWhPJ36x6ykUZGhCGFn9jtkRFt9GiLgjlBUQwFpArB6enfWE6X
RR9OYBlQgAsCAwEAAaOCAxswggMXMB0GA1UdDgQWBBQEHBV26KijHaYoX6Kx1cUx
8ICEZzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83Mjc0MTYxOC1hZjNh
LTQ1MmMtOGZlNy1jYmZiYjdjMmMwMzQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzI3NDE2MTgtYWYzYS00
NTJjLThmZTctY2JmYmI3YzJjMDM0LzU3MGUzYzI1MTNmOTZjMDY2MWIyMTI2ZmE2
ZTlmZjljZTM1YTBmYTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEA7EX0AMEA7FWaAMEA7NtOAMEArr7
ODANBAIAAjAHAwUAKAQWRDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEAvcwDQYJ
KoZIhvcNAQELBQADggEBAB+5qDQQR6x7ow0c4Xdmnr4fOmJu7pRYin/pYRdHBZ9y
F+uA+LHopm4+0o4W8M+/eSjnfcbRMSCpYiMgLk7aLnz46pmzFh1lRPTBDMQFK10r
1CxSnK2gws/k+kU3b8sTHA3CGxmyV6G8g46FCe3B3blAVkDvy1vfxDe/MOFtpnLF
qoDfQHOgdd/eK0rV95B0s7C2JGmMLp6TwCSYs0LZHGWWzaX8X54UKVDg8WiVMo32
+762i7VUvhCFRcMlI9pL2WuHaULEW/prEo01SXQCIVgXnQbSkjelI+7xo0pj9Hl8
PeGTZdwEHdTTWqQavFAZN5SjlJqtyrXItmGzMydCX0Q=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org