Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.cer
File:                     6af5832d0aca6d2bfb240d2006f0cb7be7893abb.cer (raw, json)
Hash identifier:          5y2TDDu9dNnSkPtBP8Zw9Nx5T+nAqAKh8U7/T6Tlanw=
Subject key identifier:   88:C3:5F:75:02:5E:33:35:D2:29:3B:7A:7D:AB:EA:13:1D:0A:E4:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3A00B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 18:41:00 +0000
Certificate not after:    Thu 01 Aug 2024 06:00:00 +0000
Subordinate resources:    AS: 6503
                          AS: 14000
                          IP: 148.240.0.0/16
                          IP: 148.243.0.0/16
                          IP: 148.245.0.0/16
                          IP: 187.162.0.0 -- 187.167.255.255
                          IP: 187.176.0.0 -- 187.179.159.255
                          IP: 189.205.0.0/16
                          IP: 189.207.0.0 -- 189.213.255.255
                          IP: 200.23.72.0/23
                          IP: 200.23.147.0/24
                          IP: 200.33.192.0/21
                          IP: 200.33.208.0 -- 200.33.231.255
                          IP: 200.34.64.0/19
                          IP: 200.34.141.0/24
                          IP: 200.36.96.0/19
                          IP: 200.38.64.0/19
                          IP: 200.38.224.0/19
                          IP: 200.39.224.0/19
                          IP: 200.52.0.0/20
                          IP: 200.52.32.0/19
                          IP: 200.56.0.0 -- 200.56.95.255
                          IP: 200.57.96.0/19
                          IP: 200.57.192.0/18
                          IP: 200.76.192.0/19
                          IP: 200.78.128.0/17
                          IP: 200.94.192.0/19
                          IP: 200.188.0.0/17
                          IP: 200.194.0.0/18
                          IP: 200.236.64.0/18
                          IP: 201.140.0.0/18
                          IP: 201.156.0.0/16
                          IP: 201.158.128.0/17
                          IP: 207.249.128.0/18
                          IP: 2806::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14917643 (0xe3a00b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 18:41:00 2023 GMT
            Not After : Aug  1 06:00:00 2024 GMT
        Subject: CN=6af5832d0aca6d2bfb240d2006f0cb7be7893abb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:f9:2f:f8:3c:ae:51:e8:c8:20:cb:94:a4:f6:
                    fd:a6:21:86:d6:18:0e:42:3a:34:5a:25:d0:38:4f:
                    05:f2:eb:db:84:11:a1:e8:a9:0c:63:a0:65:b4:16:
                    c2:04:6f:89:54:38:91:16:54:1b:66:b2:6b:15:de:
                    02:ac:10:0a:10:3c:a9:f6:ac:98:32:75:22:0b:dc:
                    8f:25:f9:50:1f:47:6e:9f:b2:b1:c5:98:28:52:e0:
                    08:e7:da:7f:a5:e9:cb:05:54:9d:da:8d:9c:82:54:
                    f7:40:ef:21:b9:38:cc:9f:db:bf:98:62:30:8d:e9:
                    62:b4:ea:b3:c5:34:8b:6d:d6:38:42:19:2b:3f:30:
                    26:ad:44:22:6d:a0:94:65:79:5e:4b:36:ee:8b:8e:
                    fd:b1:81:ac:d1:99:e2:22:6f:7d:ed:bd:f8:85:70:
                    e7:00:00:98:f9:ef:fd:46:b5:32:96:7e:58:e8:28:
                    99:a3:74:b5:9a:11:5d:5f:2c:54:62:b8:9c:d0:99:
                    fa:34:51:b9:97:d1:5f:d9:2c:39:65:b5:e8:df:91:
                    1a:81:f4:db:0b:58:81:32:3a:d9:80:8a:59:91:6c:
                    69:6a:13:d0:40:fb:45:0a:3b:73:65:a2:01:f7:25:
                    b5:8a:d0:66:ba:06:60:37:66:21:75:2b:32:b2:91:
                    59:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:C3:5F:75:02:5E:33:35:D2:29:3B:7A:7D:AB:EA:13:1D:0A:E4:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/6af5832d0aca6d2bfb240d2006f0cb7be7893abb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.240.0.0/16
                  148.243.0.0/16
                  148.245.0.0/16
                  187.162.0.0-187.167.255.255
                  187.176.0.0-187.179.159.255
                  189.205.0.0/16
                  189.207.0.0-189.213.255.255
                  200.23.72.0/23
                  200.23.147.0/24
                  200.33.192.0/21
                  200.33.208.0-200.33.231.255
                  200.34.64.0/19
                  200.34.141.0/24
                  200.36.96.0/19
                  200.38.64.0/19
                  200.38.224.0/19
                  200.39.224.0/19
                  200.52.0.0/20
                  200.52.32.0/19
                  200.56.0.0-200.56.95.255
                  200.57.96.0/19
                  200.57.192.0/18
                  200.76.192.0/19
                  200.78.128.0/17
                  200.94.192.0/19
                  200.188.0.0/17
                  200.194.0.0/18
                  200.236.64.0/18
                  201.140.0.0/18
                  201.156.0.0/16
                  201.158.128.0/17
                  207.249.128.0/18
                IPv6:
                  2806::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6503
                  14000

    Signature Algorithm: sha256WithRSAEncryption
         87:fc:e2:a0:55:6f:2f:e0:5f:a2:42:a5:ad:b5:ab:fb:d7:6b:
         f8:9c:dc:c3:21:99:1e:bc:b8:88:6f:dd:11:40:11:51:78:06:
         bd:fa:7d:d5:71:45:4b:f1:09:91:b8:03:fe:7d:27:9b:f8:66:
         8a:d4:b7:a2:c9:02:20:ec:f3:bd:58:a6:09:d9:d4:c1:9a:81:
         e7:82:ce:ff:28:4d:7f:40:9b:1d:ef:bd:05:da:f5:c5:0e:bc:
         9f:21:08:7a:dc:15:f7:9b:b7:cf:fd:21:4e:7a:13:50:3f:78:
         3d:a0:cb:c6:ad:c8:ed:c3:39:6f:b5:51:9a:85:39:b3:04:aa:
         ef:e1:c6:a9:df:5f:02:74:a3:06:2b:d1:3a:df:d2:72:e3:64:
         f5:d5:90:34:a1:c7:fe:07:cc:b1:f3:ae:9f:70:68:1e:de:16:
         5b:f2:ec:7c:20:7e:73:2e:94:2d:12:dd:e3:f4:8f:fd:42:69:
         2a:6e:fc:d8:09:a8:8f:bc:ef:84:b3:7f:b2:72:1c:84:66:77:
         0b:92:75:d7:79:a7:8c:7e:d8:c3:15:b0:92:73:05:b7:da:ef:
         50:c4:96:a6:6c:c0:6b:ee:0a:01:d8:14:61:7b:cc:fe:8a:06:
         1f:f7:db:93:4e:e9:e5:43:e7:e9:9c:9f:cb:a5:1e:ee:4e:13:
         39:92:26:3a
-----BEGIN CERTIFICATE-----
MIIGujCCBaKgAwIBAgIEAOOgCzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQwNDE4NDEwMFoXDTI0MDgwMTA2MDAw
MFowMzExMC8GA1UEAxMoNmFmNTgzMmQwYWNhNmQyYmZiMjQwZDIwMDZmMGNiN2Jl
Nzg5M2FiYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIn5L/g8rlHo
yCDLlKT2/aYhhtYYDkI6NFol0DhPBfLr24QRoeipDGOgZbQWwgRviVQ4kRZUG2ay
axXeAqwQChA8qfasmDJ1IgvcjyX5UB9Hbp+yscWYKFLgCOfaf6XpywVUndqNnIJU
90DvIbk4zJ/bv5hiMI3pYrTqs8U0i23WOEIZKz8wJq1EIm2glGV5Xks27ouO/bGB
rNGZ4iJvfe29+IVw5wAAmPnv/Ua1MpZ+WOgomaN0tZoRXV8sVGK4nNCZ+jRRuZfR
X9ksOWW16N+RGoH02wtYgTI62YCKWZFsaWoT0ED7RQo7c2WiAfcltYrQZroGYDdm
IXUrMrKRWRsCAwEAAaOCA+kwggPlMB0GA1UdDgQWBBSIw191Al4zNdIpO3p9q+oT
HQrk1TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80ZmU5YmM2MS0xODZh
LTQ1ZGItOWE3YS0xMWUxMDJhOTBiZjQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNGZlOWJjNjEtMTg2YS00
NWRiLTlhN2EtMTFlMTAyYTkwYmY0LzZhZjU4MzJkMGFjYTZkMmJmYjI0MGQyMDA2
ZjBjYjdiZTc4OTNhYmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCC
AQkGCCsGAQUFBwEHAQH/BIH5MIH2MIHkBAIAATCB3QMDAJTwAwMAlPMDAwCU9TAK
AwMBu6IDAwO7oDALAwMEu7ADBAW7s4ADAwC9zTAKAwMAvc8DAwG91AMEAcgXSAME
AMgXkwMEA8ghwDAMAwQEyCHQAwQDyCHgAwQFyCJAAwQAyCKNAwQFyCRgAwQFyCZA
AwQFyCbgAwQFyCfgAwQEyDQAAwQFyDQgMAsDAwPIOAMEBcg4QAMEBcg5YAMEBsg5
wAMEBchMwAMEB8hOgAMEBchewAMEB8i8AAMEBsjCAAMEBsjsQAMEBsmMAAMDAMmc
AwQHyZ6AAwQGz/mAMA0EAgACMAcDBQQoBgAAMB0GCCsGAQUFBwEIAQH/BA4wDKAK
MAgCAhlnAgI2sDANBgkqhkiG9w0BAQsFAAOCAQEAh/zioFVvL+BfokKlrbWr+9dr
+JzcwyGZHry4iG/dEUARUXgGvfp91XFFS/EJkbgD/n0nm/hmitS3oskCIOzzvVim
CdnUwZqB54LO/yhNf0CbHe+9Bdr1xQ68nyEIetwV95u3z/0hTnoTUD94PaDLxq3I
7cM5b7VRmoU5swSq7+HGqd9fAnSjBivROt/ScuNk9dWQNKHH/gfMsfOun3BoHt4W
W/LsfCB+cy6ULRLd4/SP/UJpKm782Amoj7zvhLN/snIchGZ3C5J113mnjH7YwxWw
knMFt9rvUMSWpmzAa+4KAdgUYXvM/ooGH/fbk07p5UPn6Zyfy6Ue7k4TOZImOg==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:25 2024 by rpki-client on console-ams.rpki-client.org