Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a3953635c673af09ceb6d4d9a4dbe357e4aef64.cer
File:                     5a3953635c673af09ceb6d4d9a4dbe357e4aef64.cer (raw, json)
Hash identifier:          UVIWkSqM++3+UIBVFHeZrNXypYLiZl1DqQEU6UPH4f8=
Subject key identifier:   EB:C9:C8:0B:3F:4B:19:F3:EE:BF:EE:85:29:FD:07:29:A2:E0:A5:DA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC3345
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4941998-c538-4433-84b5-e7b17baf7138/5a3953635c673af09ceb6d4d9a4dbe357e4aef64.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4941998-c538-4433-84b5-e7b17baf7138/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:39 +0000
Certificate not after:    Thu 07 Nov 2024 17:19:43 +0000
Subordinate resources:    AS: 52312
                          IP: 138.94.12.0/22
                          IP: 170.84.124.0/22
                          IP: 181.177.192.0/21
                          IP: 190.52.32.0/21
                          IP: 201.140.224.0/22
                          IP: 2803:a500::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16528197 (0xfc3345)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:39 2017 GMT
            Not After : Nov  7 17:19:43 2024 GMT
        Subject: CN=5a3953635c673af09ceb6d4d9a4dbe357e4aef64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:a2:e4:a2:82:ed:02:fb:9c:27:49:40:72:83:
                    49:00:e1:3c:27:ec:ac:3b:bd:03:7d:f7:72:81:48:
                    6e:7c:95:40:5d:54:47:15:d6:a2:65:c8:99:64:89:
                    48:02:a4:27:a2:55:c2:4e:53:c8:bf:50:62:9a:7b:
                    6f:7a:39:1b:97:f0:6e:24:7c:c7:7a:7c:2c:ee:53:
                    70:9a:03:22:9c:b4:b9:52:1b:71:60:77:0b:4e:04:
                    8d:37:f6:57:4a:26:dc:a4:26:1e:a0:ae:38:4c:e1:
                    fe:11:e8:d5:cc:68:22:73:ec:7b:35:49:75:f3:7a:
                    0c:56:bd:69:66:44:2d:7e:6d:23:9a:44:b7:54:09:
                    76:be:47:c0:4c:ed:6e:7a:9b:eb:94:ef:8d:0b:77:
                    da:79:34:78:8a:33:35:39:c2:6d:12:af:90:85:59:
                    b5:ad:64:93:a4:64:29:ec:b7:ba:9f:ba:b8:fc:4e:
                    43:67:57:7a:ea:2b:67:58:cf:d3:7f:81:eb:f5:11:
                    d2:c5:37:45:74:fd:4d:5c:8e:a7:47:eb:c7:5f:5a:
                    79:83:b4:81:20:7c:69:56:30:39:d2:24:8a:0c:6f:
                    3d:8d:93:b7:ff:37:39:1e:dc:81:ba:d0:68:fb:6a:
                    86:70:37:aa:50:ce:45:d6:23:f0:b1:51:63:59:73:
                    65:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:C9:C8:0B:3F:4B:19:F3:EE:BF:EE:85:29:FD:07:29:A2:E0:A5:DA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4941998-c538-4433-84b5-e7b17baf7138/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4941998-c538-4433-84b5-e7b17baf7138/5a3953635c673af09ceb6d4d9a4dbe357e4aef64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.12.0/22
                  170.84.124.0/22
                  181.177.192.0/21
                  190.52.32.0/21
                  201.140.224.0/22
                IPv6:
                  2803:a500::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52312

    Signature Algorithm: sha256WithRSAEncryption
         18:fd:a8:b4:df:59:ac:31:d3:95:f0:3a:16:de:38:91:82:c8:
         75:eb:bf:05:5e:7d:e7:ca:55:61:93:23:68:1b:b6:8d:81:88:
         8c:08:e5:aa:12:d7:01:57:56:a3:22:e9:f1:90:80:4f:5b:15:
         65:00:0e:be:46:bc:25:48:4b:ae:02:ab:15:2e:cf:93:ae:fe:
         03:81:27:6d:2d:3e:8e:40:ee:4b:5a:fc:ed:23:84:24:7a:0b:
         fc:8b:3d:19:b7:8a:11:33:95:8e:f3:0c:6f:1e:28:b5:0c:42:
         6b:82:da:28:65:f9:3a:78:73:44:0f:94:1b:de:4b:0c:1a:9a:
         c9:cb:c7:7d:74:30:a0:81:74:3c:12:c7:fa:9b:ae:ef:bd:b0:
         b9:a2:87:82:2b:f9:b2:3f:fb:0c:6e:86:b2:7b:74:db:53:fc:
         63:62:c8:52:f2:d2:d2:35:7b:7a:91:34:c1:2b:9b:fd:c0:42:
         ad:77:c7:da:de:cd:b0:1b:ca:c7:5d:cf:9b:7e:04:df:53:ca:
         6c:04:14:0b:7a:f7:24:2d:4f:ef:24:db:b6:cf:0f:c6:2d:fe:
         80:fa:45:63:81:ff:86:90:60:6c:c3:9b:8d:ec:7c:32:6a:38:
         74:ac:b5:d2:19:bc:10:36:7f:57:83:7b:ea:16:35:fd:5b:f6:
         c2:58:58:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org