Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65c204767f404590bc5cf1ab5b3449ef14940fd0.cer
File:                     65c204767f404590bc5cf1ab5b3449ef14940fd0.cer (raw, json)
Hash identifier:          lQ+BjfIZhGoGBKfrekeBYwD8vqhxQ5c6cXwO1c0KlWc=
Subject key identifier:   2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AAE93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Tue 05 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 28000 -- 28002
                          AS: 28119
                          AS: 52224
                          AS: 264845 -- 264846
                          IP: 45.6.248.0/21
                          IP: 168.121.184.0/22
                          IP: 170.247.168.0/22
                          IP: 179.0.156.0/22
                          IP: 190.112.52.0/22
                          IP: 200.0.86.0 -- 200.0.88.255
                          IP: 200.3.12.0/22
                          IP: 200.7.84.0/22
                          IP: 200.10.60.0/22
                          IP: 2001:13c7:7001:: -- 2001:13c7:7003:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:13c7:7010::/46
                          IP: 2001:13c7:7020::/44
                          IP: 2801::/48
                          IP: 2801:1b8::/43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17477267 (0x10aae93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Aug  5 06:00:00 2025 GMT
        Subject: CN=65c204767f404590bc5cf1ab5b3449ef14940fd0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:4a:c4:17:fa:7a:dc:10:5f:fe:1a:b3:be:d7:
                    71:4e:ba:a9:dd:f5:4f:29:18:a8:c1:40:b2:b9:1a:
                    7f:13:f0:b5:07:25:ae:9b:87:58:f7:b4:43:54:3a:
                    75:1b:f6:ac:f2:e3:63:ca:47:6b:ca:df:7f:b3:61:
                    32:c8:79:d2:83:6c:ed:b1:96:c2:9d:8a:02:42:3e:
                    cb:6b:12:f5:3c:d8:ee:c4:a8:4f:2f:37:bd:c8:da:
                    16:30:d8:c1:ba:86:f4:b2:f1:c5:51:a2:4e:e3:4f:
                    d8:24:b2:ab:81:1c:a8:76:83:9b:5c:31:93:61:77:
                    17:a0:27:12:89:9b:71:01:75:54:09:e0:5f:86:ab:
                    e4:d6:06:c5:cb:44:e1:5e:c1:10:b1:cc:7a:c8:2d:
                    0f:5f:7e:64:4f:3b:a9:6f:38:9b:fc:29:f4:76:e6:
                    03:89:98:86:7f:1f:fe:d4:60:8d:a8:72:4d:46:ef:
                    8f:99:2d:4e:ca:a0:53:d1:7a:ea:fe:01:6d:1c:da:
                    90:8b:1e:7b:a1:b7:a2:2f:a6:00:7d:7c:22:93:60:
                    13:e4:5c:ce:39:19:70:65:e7:a7:e2:cb:42:74:55:
                    66:36:d6:04:22:c2:3f:ea:6d:c4:a2:bb:02:ae:7c:
                    fd:f7:3d:67:53:f2:af:23:68:ca:cc:ca:d3:0e:30:
                    ff:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:02:56:AA:9A:85:82:6B:BE:11:87:5E:57:72:BB:0B:00:D5:70:84
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/65c204767f404590bc5cf1ab5b3449ef14940fd0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21
                  168.121.184.0/22
                  170.247.168.0/22
                  179.0.156.0/22
                  190.112.52.0/22
                  200.0.86.0-200.0.88.255
                  200.3.12.0/22
                  200.7.84.0/22
                  200.10.60.0/22
                IPv6:
                  2001:13c7:7001::-2001:13c7:7003:ffff:ffff:ffff:ffff:ffff
                  2001:13c7:7010::/46
                  2001:13c7:7020::/44
                  2801::/48
                  2801:1b8::/43

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28000-28002
                  28119
                  52224
                  264845-264846

    Signature Algorithm: sha256WithRSAEncryption
         41:19:e4:6b:4d:1d:ad:cd:1c:22:2e:5f:3a:b2:b4:04:0b:b2:
         5f:e4:de:f0:9b:50:62:a3:62:4e:4c:25:2b:93:a5:8f:96:de:
         f6:b1:69:f1:cd:0c:06:de:36:d1:98:45:25:98:20:32:ac:70:
         b5:ae:b5:4b:dc:04:4f:1b:62:45:80:ba:e2:95:61:23:4c:a2:
         77:42:c7:64:7f:8d:6e:9d:4e:dc:73:f9:72:52:25:af:40:3d:
         e9:2a:1c:ce:a2:ac:94:4b:4c:f4:9c:f0:ab:94:06:0d:43:91:
         73:83:11:6c:c8:bf:88:ad:f2:a5:58:e5:9f:e2:fc:d8:4f:07:
         c5:18:62:15:02:2f:ca:b5:ec:89:47:d2:2a:1f:af:c4:27:cf:
         50:8e:47:a4:68:ff:a8:a9:57:ac:c9:2a:7d:cd:af:02:c5:18:
         5d:6f:41:ef:e4:92:fc:d0:79:30:80:38:e6:2e:e1:87:d1:c7:
         36:c3:3d:24:bf:f0:0d:a9:88:05:ce:78:03:2b:15:69:6c:f6:
         fc:5a:a0:f4:41:f6:37:37:9c:e0:56:7c:92:54:e4:21:a6:aa:
         06:dc:da:a7:98:98:a8:80:c6:3b:7b:a3:cf:49:a6:d4:ff:cd:
         0c:96:97:59:44:39:87:a7:4e:a6:49:98:81:ce:7c:95:97:05:
         d2:bc:1d:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-ams.rpki-client.org