Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer
File:                     5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.cer (raw, json)
Hash identifier:          Mz/BTi7S7DAsDKxIjj0rpary499YUiKuTD+JQna7jYE=
Subject key identifier:   7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E208CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Aug 2019 00:08:13 +0000
Certificate not after:    Sat 20 Apr 2024 21:35:43 +0000
Subordinate resources:    AS: 52439
                          IP: 131.161.200.0/22
                          IP: 138.99.176.0/22
                          IP: 143.208.52.0/22
                          IP: 170.82.224.0/22
                          IP: 179.63.244.0/22
                          IP: 190.113.244.0/22
                          IP: 201.218.128.0/19
                          IP: 2803:5200::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14813386 (0xe208ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 30 00:08:13 2019 GMT
            Not After : Apr 20 21:35:43 2024 GMT
        Subject: CN=5d32623b33e04fadc1af80fccf6d12aabbcfbfa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:0f:ca:f3:ff:9d:33:b8:98:94:85:c0:cc:9e:
                    cb:d5:5b:1e:6c:ae:5c:74:b9:42:0a:ca:50:43:14:
                    86:86:29:17:a8:1d:73:6e:ea:91:7f:9d:51:e3:3e:
                    02:69:59:9c:2b:6a:ac:7b:6f:33:c6:f1:2b:f0:74:
                    49:04:63:ab:2b:89:4a:94:f5:54:f0:b0:71:af:e0:
                    98:da:b4:a8:4e:eb:90:43:03:0f:98:e9:c3:11:f7:
                    98:5d:54:b6:0d:7e:a0:cd:9b:d4:93:c4:09:e3:cf:
                    80:b4:ce:90:dc:0b:ef:10:12:0e:91:fe:08:eb:06:
                    61:68:aa:57:17:4a:6e:8c:65:20:08:a7:63:78:83:
                    da:6b:e9:fd:23:0c:6f:8e:ba:c9:f2:1c:27:1f:ef:
                    13:c8:e9:c0:f1:90:3e:32:1f:db:c4:24:9d:92:f8:
                    74:1a:e8:04:f6:cf:f2:2b:aa:d6:61:2c:ae:56:24:
                    77:36:11:3b:9c:e0:33:a3:33:65:ab:1d:6b:5c:7b:
                    ed:d8:e5:1b:16:e8:b7:e1:4c:31:3c:b3:29:67:6f:
                    e0:99:d7:a6:26:5d:a9:ab:6b:61:de:c3:a2:3e:f1:
                    b4:95:ec:9d:ee:3a:41:67:5b:90:4e:9c:7f:60:70:
                    38:81:24:62:6c:3f:5c:78:1d:66:59:bf:ab:57:7a:
                    22:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:3D:3D:84:5A:21:26:7B:9C:7E:F6:54:A8:53:05:ED:86:7E:E9:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/977d3d35-bbec-4cad-a0c5-0607a29e1f0f/5d32623b33e04fadc1af80fccf6d12aabbcfbfa5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.200.0/22
                  138.99.176.0/22
                  143.208.52.0/22
                  170.82.224.0/22
                  179.63.244.0/22
                  190.113.244.0/22
                  201.218.128.0/19
                IPv6:
                  2803:5200::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52439

    Signature Algorithm: sha256WithRSAEncryption
         5f:54:a1:98:6b:fd:79:01:04:d7:d3:79:40:2b:de:02:df:0f:
         33:44:bf:90:82:14:36:cb:3c:fd:fe:69:86:6d:b0:05:1a:fa:
         3d:e5:be:04:17:df:88:d1:59:80:6e:d6:35:a9:13:1b:77:3e:
         71:ce:d5:90:1a:f7:37:98:4f:f2:7b:5d:60:d6:e3:d5:25:0e:
         c2:fc:2d:08:ec:24:b6:e2:13:a0:09:b0:a4:51:2c:be:84:51:
         92:0a:26:38:fa:2c:94:97:c1:5b:0c:a7:17:f7:a9:27:d7:ac:
         2b:18:87:6a:d8:87:f4:52:5f:00:fa:4a:cb:bc:f0:d1:da:0a:
         7f:8c:49:1c:d3:2e:fa:e2:24:9b:24:23:50:7f:a0:da:1e:9e:
         cc:a7:de:61:04:9f:c5:8a:1e:1d:2c:b9:af:db:a6:d9:79:69:
         78:54:21:d6:2a:29:af:ee:0f:5e:22:81:d9:36:5f:4e:cd:05:
         44:ed:31:66:70:ff:e8:42:3f:9b:11:6c:d6:52:af:87:f6:c1:
         1b:2c:2c:02:54:5c:f6:dd:30:fe:26:f8:bf:8e:9f:ee:0c:dd:
         74:05:fa:0a:70:7c:d6:68:23:42:aa:c1:c3:09:be:50:13:39:
         86:50:e4:31:b7:8a:38:5d:d2:f4:e6:b9:77:cd:87:32:f1:ef:
         1c:4d:49:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org