Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6073bb1fe384abff375ad4e17bea5b9cd8716010.cer
File:                     6073bb1fe384abff375ad4e17bea5b9cd8716010.cer (raw, json)
Hash identifier:          Kh1CNdipQRBPs2J35pduYy3vASRIcTufbxP9cL7eVjo=
Subject key identifier:   56:71:39:C9:0F:11:51:6C:17:56:B0:90:4C:EE:4F:50:45:6A:A9:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E492F9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/6073bb1fe384abff375ad4e17bea5b9cd8716010.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jun 2020 19:05:50 +0000
Certificate not after:    Sat 11 May 2024 15:00:00 +0000
Subordinate resources:    AS: 28509
                          AS: 28512
                          AS: 28516
                          AS: 28538
                          AS: 28545
                          AS: 28554 -- 28558
                          IP: 177.236.0.0/14
                          IP: 187.184.0.0/15
                          IP: 187.252.0.0/15
                          IP: 189.202.0.0/17
                          IP: 189.214.0.0/15
                          IP: 189.220.0.0/15
                          IP: 200.34.142.0/24
                          IP: 200.77.192.0/19
                          IP: 200.79.192.0/18
                          IP: 200.94.160.0/20
                          IP: 200.95.128.0/19
                          IP: 201.139.64.0/20
                          IP: 201.139.128.0/19
                          IP: 201.140.64.0/20
                          IP: 201.140.192.0/20
                          IP: 201.150.64.0/20
                          IP: 201.150.128.0/20
                          IP: 201.160.0.0/16
                          IP: 201.166.0.0/17
                          IP: 2806:250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14979833 (0xe492f9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  8 19:05:50 2020 GMT
            Not After : May 11 15:00:00 2024 GMT
        Subject: CN=6073bb1fe384abff375ad4e17bea5b9cd8716010
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:1e:cc:b6:a6:d6:77:70:86:a3:39:0f:da:45:
                    14:06:62:64:92:34:6e:90:03:03:08:cf:11:51:b7:
                    3a:a2:86:77:74:31:b4:b2:bc:d8:67:d1:e9:ff:35:
                    ef:d2:5b:59:4f:11:56:df:55:b5:7c:68:b8:49:81:
                    50:84:79:52:83:ef:cd:7e:99:4a:51:b0:a0:62:ec:
                    9b:ec:e9:f2:47:65:cd:df:1d:24:3c:7e:ca:2b:96:
                    9d:36:a3:8b:e8:57:fb:ee:3c:88:7b:90:8c:de:5a:
                    23:a5:65:5e:b5:94:ae:ad:e2:85:a2:7b:1f:22:94:
                    ea:8f:e1:ff:fa:7e:77:f9:04:3a:d7:0a:19:ea:21:
                    4d:95:f7:df:1b:25:6f:02:fd:9c:fd:55:17:58:33:
                    5b:f8:cb:e3:48:98:ed:71:93:a2:08:d0:c9:f2:3f:
                    51:f7:66:e3:f5:7e:02:58:3c:ef:71:bb:bf:d4:48:
                    31:89:fe:ed:7d:3b:33:e9:16:f5:d9:41:ea:3e:a6:
                    d6:54:be:fe:91:61:15:f1:9a:19:d9:cc:6d:c3:b8:
                    0a:6d:74:d4:06:22:86:b5:02:84:c4:10:a5:53:f6:
                    08:f5:48:a5:ad:ca:82:00:18:67:93:c8:ba:59:3c:
                    66:e9:7e:7a:cd:ca:4e:f0:a1:a1:ac:6b:75:91:78:
                    6b:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:71:39:C9:0F:11:51:6C:17:56:B0:90:4C:EE:4F:50:45:6A:A9:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/218bba34-18f9-4eed-922b-5fc5f6ebcf7e/6073bb1fe384abff375ad4e17bea5b9cd8716010.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.236.0.0/14
                  187.184.0.0/15
                  187.252.0.0/15
                  189.202.0.0/17
                  189.214.0.0/15
                  189.220.0.0/15
                  200.34.142.0/24
                  200.77.192.0/19
                  200.79.192.0/18
                  200.94.160.0/20
                  200.95.128.0/19
                  201.139.64.0/20
                  201.139.128.0/19
                  201.140.64.0/20
                  201.140.192.0/20
                  201.150.64.0/20
                  201.150.128.0/20
                  201.160.0.0/16
                  201.166.0.0/17
                IPv6:
                  2806:250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28509
                  28512
                  28516
                  28538
                  28545
                  28554-28558

    Signature Algorithm: sha256WithRSAEncryption
         94:5a:28:da:88:b7:26:99:ac:df:0a:07:cd:10:68:ab:1c:92:
         66:4e:9d:d2:1e:ef:d6:6d:df:9f:b7:a2:38:c8:79:4f:6d:ee:
         51:c2:a1:3f:f5:95:17:8f:ac:5e:d1:6e:fb:03:f8:33:50:70:
         94:b1:3b:37:66:42:66:83:80:a8:9b:0e:e0:69:8f:03:b4:2d:
         12:d3:49:ab:f3:47:14:68:c8:21:c2:a3:b1:fa:7e:34:14:67:
         7f:d3:b5:92:dc:ec:f8:69:e5:f4:ed:36:54:bb:82:47:9f:f9:
         1c:58:d5:98:84:2c:cf:4c:bc:fd:59:f4:11:f4:6d:7d:4a:b2:
         84:19:98:4c:0b:2e:4b:b5:91:3c:0d:06:8d:48:f8:f7:ae:98:
         2b:d7:8b:c8:34:d6:0d:e8:ff:66:d6:2b:13:69:9c:0b:96:17:
         de:2b:7f:66:42:d5:d6:bd:0a:cf:1d:c5:fc:5d:77:1c:54:a3:
         d3:cd:69:8e:62:44:a6:e9:ae:7a:c6:06:a9:fd:d6:fa:67:6e:
         4b:52:ce:b1:ed:d4:45:8c:09:a0:97:ae:de:30:7c:4f:82:f7:
         ef:7a:6e:ff:1f:2a:85:fc:da:d5:6e:a2:0e:99:53:ae:b5:f4:
         2c:87:aa:9c:4d:09:8b:b0:b4:60:e0:1c:6b:b6:fe:9f:67:a7:
         f5:e6:95:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org