Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6629fdd5cda4c01f202e4b42e2e1d4bd2db9e248.cer
File:                     6629fdd5cda4c01f202e4b42e2e1d4bd2db9e248.cer (raw, json)
Hash identifier:          +TQ6Gs+CtdDgu+KVtiyt7ZEJGS20g4Ri2JqfoM9eh5s=
Subject key identifier:   FC:66:FD:90:96:46:B3:DB:D4:BD:4E:67:07:C6:F5:E9:E4:52:A0:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F07477
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/6629fdd5cda4c01f202e4b42e2e1d4bd2db9e248.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:39 +0000
Certificate not after:    Sun 30 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 11664
                          AS: 14535
                          IP: 138.36.52.0/22
                          IP: 177.234.128.0/22
                          IP: 186.182.0.0/16
                          IP: 190.3.0.0/17
                          IP: 190.220.0.0/15
                          IP: 200.49.64.0/19
                          IP: 200.59.128.0 -- 200.59.175.255
                          IP: 200.61.32.0/19
                          IP: 200.69.128.0/19
                          IP: 200.80.128.0/17
                          IP: 200.123.64.0/18
                          IP: 2800:190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15758455 (0xf07477)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:39 2017 GMT
            Not After : Mar 30 15:00:00 2025 GMT
        Subject: CN=6629fdd5cda4c01f202e4b42e2e1d4bd2db9e248
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:62:4e:f5:41:9b:11:ba:37:12:20:f6:e7:2a:
                    71:80:fb:5d:f3:42:72:10:db:e5:b3:19:da:7e:82:
                    f0:37:f6:fd:cf:88:d6:57:c0:2f:a1:ca:d5:f8:36:
                    80:cd:69:d6:7b:80:de:ed:28:10:1e:77:f6:ef:6e:
                    6c:a2:f7:27:db:50:6f:b9:de:5f:f0:a3:5d:0c:41:
                    03:b5:59:41:61:70:6a:b6:14:58:da:16:95:b4:c3:
                    92:56:b4:69:fb:89:29:0e:46:84:9c:41:cd:5b:de:
                    27:ab:c5:24:ce:ef:88:d4:36:d6:9d:cf:cd:a3:30:
                    bd:cf:a0:e0:62:34:4c:38:fa:3f:46:ea:2f:0f:25:
                    59:85:03:74:c3:fa:9a:ac:61:53:45:89:10:1f:49:
                    37:e0:63:f7:26:23:a7:4d:36:d4:42:12:43:4a:b3:
                    1d:4d:ca:78:7c:6b:c5:ce:05:ad:e7:db:87:9e:2e:
                    94:c4:f9:63:70:08:cc:7b:86:c8:35:fc:9c:68:fa:
                    1b:84:c0:e7:44:a2:52:db:1b:6c:5d:f5:3f:25:d4:
                    1f:1d:eb:6b:36:01:48:6b:54:47:9d:0c:ab:f5:9b:
                    04:df:df:a0:18:76:56:89:6e:68:16:1b:ef:65:23:
                    88:66:aa:26:cd:d8:58:68:c8:c8:e4:2e:ad:c2:59:
                    41:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FC:66:FD:90:96:46:B3:DB:D4:BD:4E:67:07:C6:F5:E9:E4:52:A0:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/6629fdd5cda4c01f202e4b42e2e1d4bd2db9e248.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.52.0/22
                  177.234.128.0/22
                  186.182.0.0/16
                  190.3.0.0/17
                  190.220.0.0/15
                  200.49.64.0/19
                  200.59.128.0-200.59.175.255
                  200.61.32.0/19
                  200.69.128.0/19
                  200.80.128.0/17
                  200.123.64.0/18
                IPv6:
                  2800:190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11664
                  14535

    Signature Algorithm: sha256WithRSAEncryption
         82:0c:a2:f5:ac:48:04:d8:c6:a7:dd:00:4d:76:52:87:b9:24:
         b3:7f:3d:22:e4:78:5a:ab:a6:43:78:f4:96:a1:b7:08:38:ca:
         96:1c:2c:56:cf:66:b0:1a:e9:18:2e:5f:ac:72:4a:c6:00:c2:
         b0:f8:a0:32:4d:01:0f:16:8f:0d:06:e5:66:76:ff:1e:3c:89:
         74:04:a1:9b:08:06:8a:6b:5f:cf:cb:78:cb:6a:ae:60:0b:c1:
         96:1d:2f:5c:57:d2:f3:44:e4:9f:fb:b2:20:f8:aa:f8:48:b9:
         1f:17:e8:98:6c:63:21:a2:17:52:90:59:88:4f:1f:51:4c:93:
         c2:23:79:67:e0:80:5e:9c:9b:80:1d:d3:92:ff:b9:38:1d:3e:
         d2:2e:87:60:e5:65:0f:06:ff:81:09:34:57:99:5a:b9:19:fd:
         d4:3f:fb:dd:26:c3:81:d4:00:fa:32:80:5d:8c:3a:8c:b5:87:
         c7:a7:78:1c:01:ca:e5:4d:36:1c:ca:d4:72:39:e0:94:12:14:
         4d:c4:f8:eb:a0:28:04:dc:fc:92:60:b4:10:a6:37:01:13:0b:
         3a:50:46:d5:85:b3:42:2d:48:09:d7:60:b1:0e:da:97:b1:bb:
         84:5d:59:63:47:4e:28:7f:81:93:94:5e:d6:81:79:33:1e:a7:
         58:04:6c:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:34 2024 by rpki-client on console-fra.rpki-client.org