Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer
File:                     5cc9dbf17ab87f53456274667413bf07a4f85fc9.cer (raw, json)
Hash identifier:          6sptcIEn95JZWz6FrHFyYK4XSKj2AwBoNekRhpbDgwQ=
Subject key identifier:   20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F33A69
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 Apr 2018 19:34:08 +0000
Certificate not after:    Wed 28 Aug 2024 20:02:12 +0000
Subordinate resources:    AS: 263244
                          IP: 131.72.132.0/22
                          IP: 138.99.184.0/22
                          IP: 170.247.140.0/22
                          IP: 186.0.180.0/22
                          IP: 190.106.32.0/21
                          IP: 2800:cb0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15940201 (0xf33a69)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 19:34:08 2018 GMT
            Not After : Aug 28 20:02:12 2024 GMT
        Subject: CN=5cc9dbf17ab87f53456274667413bf07a4f85fc9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:85:5d:60:db:3d:f1:a8:95:d7:57:69:b4:6d:
                    7a:bd:17:c4:46:20:25:d3:3b:75:cb:68:be:a4:1f:
                    cb:03:4c:d0:d3:63:af:74:e0:33:69:f4:04:03:05:
                    db:f1:d5:77:50:25:23:89:d4:d1:50:36:7e:29:ac:
                    9a:3a:1e:0d:37:d2:19:5b:c3:67:8f:1d:5d:15:3c:
                    31:a9:c8:05:aa:49:d6:f3:70:fd:12:88:6f:b2:81:
                    54:c1:1c:42:ef:d8:84:9a:08:fe:e3:12:fd:1b:ee:
                    43:d0:9f:37:8c:65:8f:f9:aa:5c:27:40:5f:8c:8a:
                    1c:29:83:6f:32:fa:b3:f0:99:18:76:ab:73:d4:2a:
                    35:4a:83:41:90:f0:d4:ae:cf:45:1e:2e:91:8c:1d:
                    74:77:ae:49:7c:e4:99:55:bb:be:80:fe:2c:cd:15:
                    8f:5b:54:d7:cf:0d:c7:81:b6:20:93:54:23:8f:6d:
                    82:0a:56:1f:d8:f6:11:4e:04:48:8d:b9:4e:f5:b5:
                    bd:25:22:7f:1d:54:98:6f:5f:7b:78:51:f8:5c:5a:
                    33:a1:49:16:1e:c9:1a:d4:4f:02:77:0a:2c:a1:c9:
                    e7:54:69:8b:1a:dc:71:42:a1:a0:f2:40:4d:4b:b6:
                    ba:55:55:2b:63:ab:9a:6c:ac:5d:e8:4a:1e:bf:20:
                    7f:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:4F:BB:94:06:56:BA:86:D7:92:22:24:CD:DB:19:79:44:C0:B2:84
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/250bdbec-1e2e-4e8b-93fd-e23e8cfe8531/5cc9dbf17ab87f53456274667413bf07a4f85fc9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.132.0/22
                  138.99.184.0/22
                  170.247.140.0/22
                  186.0.180.0/22
                  190.106.32.0/21
                IPv6:
                  2800:cb0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263244

    Signature Algorithm: sha256WithRSAEncryption
         1e:ad:94:65:b3:5f:91:bf:e1:b2:cb:bd:05:b8:f4:1d:a7:b4:
         53:8e:6f:c9:52:f3:0c:58:2f:3d:aa:30:2f:9c:72:54:7c:d0:
         bd:15:2b:44:9a:b7:27:6b:67:05:23:89:12:60:57:39:3a:b3:
         a4:28:98:5f:af:1d:c6:da:d7:a6:7e:4a:ee:02:20:79:0c:8c:
         a3:f4:3f:be:dc:67:0b:b8:1c:8c:01:38:64:6e:f5:c7:20:a3:
         f1:93:20:42:af:84:b2:da:8d:ec:b3:46:15:30:d4:58:37:39:
         d7:f1:c7:80:66:8f:0e:e5:74:40:95:6b:a5:f0:d2:9f:c3:37:
         c5:02:13:e6:89:49:76:79:ae:80:f9:85:85:c0:e7:b5:0d:7a:
         40:b5:c9:50:58:6c:e2:c8:87:a0:1d:69:4b:89:db:4e:b6:3c:
         99:07:47:22:a2:5d:87:de:d0:3f:c9:d0:8f:04:f4:27:ef:cb:
         29:56:6b:33:ab:4b:21:58:d9:ea:88:ab:17:1c:1e:4c:12:a3:
         9b:54:94:7a:c0:83:05:1a:32:a3:f8:ab:0a:60:c6:c3:6b:09:
         ab:da:21:22:49:fb:88:8d:e9:19:93:9e:e0:b4:86:1f:31:d4:
         14:0c:00:24:bf:e9:3e:35:30:5a:ef:69:64:a4:1c:29:b3:5f:
         28:e8:42:d9
-----BEGIN CERTIFICATE-----
MIIF8jCCBNqgAwIBAgIEAPM6aTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDQwNTE5MzQwOFoXDTI0MDgyODIwMDIx
MlowMzExMC8GA1UEAxMoNWNjOWRiZjE3YWI4N2Y1MzQ1NjI3NDY2NzQxM2JmMDdh
NGY4NWZjOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMqFXWDbPfGo
lddXabRter0XxEYgJdM7dctovqQfywNM0NNjr3TgM2n0BAMF2/HVd1AlI4nU0VA2
fimsmjoeDTfSGVvDZ48dXRU8ManIBapJ1vNw/RKIb7KBVMEcQu/YhJoI/uMS/Rvu
Q9CfN4xlj/mqXCdAX4yKHCmDbzL6s/CZGHarc9QqNUqDQZDw1K7PRR4ukYwddHeu
SXzkmVW7voD+LM0Vj1tU188Nx4G2IJNUI49tggpWH9j2EU4ESI25TvW1vSUifx1U
mG9fe3hR+FxaM6FJFh7JGtRPAncKLKHJ51RpixrccUKhoPJATUu2ulVVK2Ormmys
XehKHr8gf/MCAwEAAaOCAyEwggMdMB0GA1UdDgQWBBQgT7uUBla6hteSIiTN2xl5
RMCyhDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yNTBiZGJlYy0xZTJl
LTRlOGItOTNmZC1lMjNlOGNmZTg1MzEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjUwYmRiZWMtMWUyZS00
ZThiLTkzZmQtZTIzZThjZmU4NTMxLzVjYzlkYmYxN2FiODdmNTM0NTYyNzQ2Njc0
MTNiZjA3YTRmODVmYzkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAoNIhAMEAopjuAMEAqr3jAMEAroA
tAMEA75qIDANBAIAAjAHAwUAKAAMsDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgME
BEwwDQYJKoZIhvcNAQELBQADggEBAB6tlGWzX5G/4bLLvQW49B2ntFOOb8lS8wxY
Lz2qMC+cclR80L0VK0SatydrZwUjiRJgVzk6s6QomF+vHcba16Z+Su4CIHkMjKP0
P77cZwu4HIwBOGRu9ccgo/GTIEKvhLLajeyzRhUw1Fg3Odfxx4Bmjw7ldECVa6Xw
0p/DN8UCE+aJSXZ5roD5hYXA57UNekC1yVBYbOLIh6AdaUuJ2062PJkHRyKiXYfe
0D/J0I8E9CfvyylWazOrSyFY2eqIqxccHkwSo5tUlHrAgwUaMqP4qwpgxsNrCava
ISJJ+4iN6RmTnuC0hh8x1BQMACS/6T41MFrvaWSkHCmzXyjoQtk=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org