Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b0a86d49ce005d0437d8fe8511f5f8c71c85a7f.cer
File:                     5b0a86d49ce005d0437d8fe8511f5f8c71c85a7f.cer (raw, json)
Hash identifier:          trLT1wZKQ2nTB4i0CDElElyMJzo4MPo6VW6jN1ZS8s4=
Subject key identifier:   03:93:36:D0:42:5F:78:82:57:03:BE:3F:C7:00:A7:F5:2B:FB:C5:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEA091
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50b0cff5-9122-49e3-8103-171d3b1ed45a/5b0a86d49ce005d0437d8fe8511f5f8c71c85a7f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50b0cff5-9122-49e3-8103-171d3b1ed45a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:04:29 +0000
Certificate not after:    Mon 07 Oct 2024 17:15:47 +0000
Subordinate resources:    AS: 14868
                          IP: 138.36.32.0/22
                          IP: 138.204.24.0/22
                          IP: 168.181.48.0/22
                          IP: 168.194.160.0/22
                          IP: 177.92.0.0/18
                          IP: 177.220.128.0/18
                          IP: 187.95.96.0/19
                          IP: 200.150.64.0/18
                          IP: 200.195.128.0/18
                          IP: 2001:1284::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16687249 (0xfea091)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:04:29 2023 GMT
            Not After : Oct  7 17:15:47 2024 GMT
        Subject: CN=5b0a86d49ce005d0437d8fe8511f5f8c71c85a7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:ad:e2:e6:f2:e2:86:4b:b5:f9:df:00:f7:4f:
                    1e:eb:d3:82:7a:2e:20:40:a7:8a:03:9e:ec:91:26:
                    76:dc:5d:e5:a6:38:9e:3a:d0:38:89:42:1d:27:66:
                    a9:17:94:74:55:e3:70:f6:0b:85:3d:8a:30:c5:a3:
                    bf:42:c5:12:9b:43:15:cf:05:a4:51:5f:64:0c:32:
                    44:e0:86:8e:4f:f7:47:4a:6a:4d:c4:11:dd:48:d8:
                    c6:04:58:ea:86:84:7d:5d:b2:4e:a5:c8:0d:88:b5:
                    5a:50:d6:e8:c9:3b:13:f6:5b:57:40:73:d9:17:c6:
                    48:df:9f:3e:da:08:23:7a:e0:86:38:5d:05:a5:94:
                    43:45:f5:b8:9c:db:cf:6e:fd:b4:96:0b:6f:b8:79:
                    d4:bd:fe:59:18:1e:f5:aa:3a:0b:cf:34:d9:44:07:
                    03:9e:0b:bd:ce:83:d9:01:c2:ff:c6:99:49:34:3e:
                    6b:80:45:9b:1d:8b:43:48:32:a2:ea:f8:c8:eb:8f:
                    c6:79:b9:f4:02:a4:cf:b1:d8:ee:fa:01:a1:19:68:
                    22:e3:f2:ab:8b:7a:94:db:ce:3f:85:26:be:32:ea:
                    6f:e6:ef:a7:88:a6:2a:fe:88:2a:c6:99:73:06:0c:
                    1a:5d:8c:6f:89:2c:c3:a5:84:e7:aa:43:ce:d4:fc:
                    d7:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:93:36:D0:42:5F:78:82:57:03:BE:3F:C7:00:A7:F5:2B:FB:C5:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50b0cff5-9122-49e3-8103-171d3b1ed45a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50b0cff5-9122-49e3-8103-171d3b1ed45a/5b0a86d49ce005d0437d8fe8511f5f8c71c85a7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.32.0/22
                  138.204.24.0/22
                  168.181.48.0/22
                  168.194.160.0/22
                  177.92.0.0/18
                  177.220.128.0/18
                  187.95.96.0/19
                  200.150.64.0/18
                  200.195.128.0/18
                IPv6:
                  2001:1284::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14868

    Signature Algorithm: sha256WithRSAEncryption
         36:14:28:2d:02:03:92:1a:8c:00:ee:8a:81:22:e6:78:d0:12:
         8f:4e:ff:b1:d9:1b:94:dd:51:a1:1a:39:70:91:e6:9f:69:7a:
         ff:a9:c1:d1:ac:3b:01:19:7c:00:c8:95:6e:fc:5c:0c:bb:33:
         3d:c9:53:38:5a:69:e1:76:37:7b:71:65:02:2f:8b:61:20:68:
         b9:8b:f4:dd:fb:28:98:98:07:5b:de:92:5c:e7:83:78:2e:2b:
         d2:4f:b1:e8:14:1e:16:ef:d7:b2:51:80:71:a1:78:ba:a4:c7:
         bd:23:d0:fb:44:4b:74:a3:5c:9a:82:32:45:87:79:8f:0f:06:
         15:7e:fe:3f:74:19:cc:08:ec:90:23:ad:1f:56:62:2f:7b:0e:
         ae:dd:65:1b:c1:64:df:b9:90:41:62:be:8d:73:09:45:04:3f:
         2f:fd:08:99:a7:98:6e:ee:7d:84:ff:f6:b9:37:1c:46:f9:6c:
         9e:9c:07:42:e0:34:3c:a3:c7:e3:e8:58:8d:b0:f1:3d:46:11:
         65:e9:a4:76:4a:b1:f7:de:93:4f:85:3a:99:c5:de:c8:3d:a5:
         f1:8c:c9:4d:c5:b0:ae:87:cd:50:69:79:56:ef:c5:70:06:61:
         cd:7e:00:0b:b4:7f:b4:5e:69:d1:5b:da:f0:2f:90:59:ad:0d:
         54:63:5a:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org