Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer
File:                     657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.cer (raw, json)
Hash identifier:          80K/UBHVhlKWNnT4V19sCgMfhcxrcyoaeY6E82bMYmk=
Subject key identifier:   58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9C6ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Jan 2022 19:43:47 +0000
Certificate not after:    Wed 17 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 4926
                          AS: 10834
                          AS: 22927
                          IP: 138.219.80.0/22
                          IP: 168.226.0.0/16
                          IP: 179.36.0.0 -- 179.41.255.255
                          IP: 181.20.0.0 -- 181.27.255.255
                          IP: 186.38.0.0/15
                          IP: 186.56.0.0/13
                          IP: 186.128.0.0/13
                          IP: 190.48.0.0/14
                          IP: 190.172.0.0 -- 190.179.255.255
                          IP: 191.80.0.0 -- 191.85.255.255
                          IP: 200.0.192.0/23
                          IP: 200.0.224.0/19
                          IP: 200.5.64.0/18
                          IP: 200.5.192.0/18
                          IP: 200.9.212.0/23
                          IP: 200.9.235.0/24
                          IP: 200.10.96.0 -- 200.10.129.255
                          IP: 200.16.128.0/17
                          IP: 200.32.32.0/19
                          IP: 200.41.128.0/17
                          IP: 200.51.0.0/16
                          IP: 200.63.128.0/18
                          IP: 200.70.0.0/16
                          IP: 201.176.0.0 -- 201.181.255.255
                          IP: 201.250.0.0/15
                          IP: 201.254.0.0/15
                          IP: 209.13.0.0/16
                          IP: 2800:380::/31
                          IP: 2802:8000::/24
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14272237 (0xd9c6ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 13 19:43:47 2022 GMT
            Not After : Jan 17 05:00:00 2024 GMT
        Subject: CN=657d9dd95ecfd67113ddcd4cff4ced5d8177cf65
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:7c:f4:73:1f:14:27:40:37:59:15:6a:d8:21:
                    17:5d:53:57:25:9b:8e:d0:cd:ac:28:b5:02:d7:04:
                    11:45:7c:53:84:62:03:3f:65:ca:ba:9b:16:b7:ec:
                    94:4e:84:a9:09:08:7b:12:0a:7b:7e:09:f7:4f:fd:
                    1d:d2:8d:7f:af:da:8f:0e:1c:78:42:28:dd:11:5b:
                    4a:3f:92:02:8d:d9:e4:32:0c:73:22:a7:67:ad:12:
                    be:37:ae:60:c1:b2:f3:41:49:1a:2b:a1:2f:d6:af:
                    d1:8f:a6:2a:d2:38:44:eb:96:2f:85:60:6f:a9:e2:
                    3e:69:6f:5b:fb:5d:d6:e6:cf:45:29:62:6d:bd:8d:
                    70:f7:f9:29:18:d6:af:b8:9f:23:e1:7f:35:ea:7a:
                    6c:12:db:6b:f1:aa:e9:3c:e8:2e:46:6d:03:90:f7:
                    26:b2:2f:c9:ad:3b:4c:b2:b8:74:38:69:23:2c:56:
                    24:b2:d0:d7:d7:c3:a1:21:de:f7:68:36:4d:c4:3a:
                    d0:c0:3e:86:37:48:f2:c3:2f:01:c6:de:bc:47:8b:
                    1e:fc:1a:58:4c:ec:7f:a6:fe:78:94:5b:a5:8c:7e:
                    9d:c5:1f:6c:03:ff:e1:62:0c:c0:df:63:d3:a3:73:
                    29:33:f3:79:f4:43:ca:13:66:19:54:53:02:e1:8b:
                    8a:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:8B:D2:7A:78:D9:8D:63:93:83:95:E9:E1:80:7D:75:C6:13:D1:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/657d9dd95ecfd67113ddcd4cff4ced5d8177cf65.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.80.0/22
                  168.226.0.0/16
                  179.36.0.0-179.41.255.255
                  181.20.0.0-181.27.255.255
                  186.38.0.0/15
                  186.56.0.0/13
                  186.128.0.0/13
                  190.48.0.0/14
                  190.172.0.0-190.179.255.255
                  191.80.0.0-191.85.255.255
                  200.0.192.0/23
                  200.0.224.0/19
                  200.5.64.0/18
                  200.5.192.0/18
                  200.9.212.0/23
                  200.9.235.0/24
                  200.10.96.0-200.10.129.255
                  200.16.128.0/17
                  200.32.32.0/19
                  200.41.128.0/17
                  200.51.0.0/16
                  200.63.128.0/18
                  200.70.0.0/16
                  201.176.0.0-201.181.255.255
                  201.250.0.0/15
                  201.254.0.0/15
                  209.13.0.0/16
                IPv6:
                  2800:380::/31
                  2802:8000::/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4926
                  10834
                  22927

    Signature Algorithm: sha256WithRSAEncryption
         72:fd:c6:0b:4f:4c:5d:6b:38:52:b6:ad:68:2c:e0:5f:74:31:
         6c:f4:27:f8:68:8b:2b:65:29:ca:d6:bc:f7:d4:ae:8f:f8:42:
         98:31:62:6c:fd:c1:66:7f:35:6c:fd:4b:fc:da:3c:46:09:24:
         7a:da:15:79:32:d4:33:af:30:ff:b6:eb:cd:2d:4e:65:69:23:
         0a:e9:9f:eb:9d:82:73:b8:e1:35:b6:1c:ae:67:8c:79:f8:04:
         6f:a0:d4:f0:16:02:7b:9f:95:3e:94:9e:02:f8:9c:7d:2e:16:
         4c:68:d2:18:31:23:9d:54:cb:ec:ac:f4:39:1c:cb:bf:e8:d6:
         82:37:df:f8:3c:4c:ed:ea:6f:af:d3:d8:2b:4f:36:fc:db:df:
         a9:2d:0d:9c:65:1e:7c:34:0d:58:b2:2a:30:b2:a8:2b:63:09:
         bf:a2:3c:48:29:8b:6c:f0:69:13:8d:62:6d:e7:76:c1:3d:fe:
         0b:4e:90:13:53:73:a6:98:78:ca:f3:7a:be:4f:4c:5f:71:50:
         96:39:fa:9c:f4:a4:6f:f7:2b:5d:f2:51:85:de:5f:21:8f:3e:
         42:00:13:69:10:06:bd:1a:bd:9e:6e:e8:97:29:e8:14:fe:99:
         39:26:9e:78:ad:c5:41:9b:b1:08:94:b3:1b:e1:9d:76:70:c4:
         cd:48:9c:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Apr 5 07:21:32 2025 by rpki-client