Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e37ba61cda2665349146e3f47d9626599bc42f0.cer
File:                     6e37ba61cda2665349146e3f47d9626599bc42f0.cer (raw, json)
Hash identifier:          NGkFVzsE+ngKLijPA03w6eUim94MoI52dxoUCh9+saw=
Subject key identifier:   95:AE:CE:6D:67:BE:1D:4E:2D:8F:34:DB:70:3E:01:B2:11:53:03:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D5E346
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/6e37ba61cda2665349146e3f47d9626599bc42f0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Tue 28 Nov 2023 04:00:00 +0000
Subordinate resources:    AS: 6057
                          AS: 7167
                          AS: 267718
                          IP: 167.56.0.0/13
                          IP: 167.108.0.0/16
                          IP: 167.116.0.0/16
                          IP: 179.24.0.0/13
                          IP: 186.48.0.0/13
                          IP: 190.0.128.0/19
                          IP: 190.64.0.0/16
                          IP: 190.132.0.0/14
                          IP: 200.2.32.0/19
                          IP: 200.40.0.0/16
                          IP: 200.125.0.0/18
                          IP: 201.217.128.0/18
                          IP: 201.221.32.0/19
                          IP: 2800:a0::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14017350 (0xd5e346)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Nov 28 04:00:00 2023 GMT
        Subject: CN=6e37ba61cda2665349146e3f47d9626599bc42f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:3a:6d:6e:3e:24:48:b8:eb:5f:7c:98:61:
                    8a:e4:66:d8:91:df:dc:4f:d7:1d:d2:9f:95:a2:1a:
                    1a:5d:77:cd:68:72:2d:c7:e1:2a:91:62:4f:60:4d:
                    af:dc:b9:4e:90:d6:6a:d2:8b:47:56:8b:e8:c1:46:
                    14:8c:1f:e3:20:f8:c4:d3:13:26:56:07:33:b5:9b:
                    45:62:0d:4d:75:14:b8:51:b5:9e:20:61:8b:65:5f:
                    1d:a3:c0:57:fa:81:20:e1:67:de:8d:d4:47:d0:86:
                    6b:1c:0d:bb:39:d1:e8:bb:ba:4b:3a:f0:1d:41:a4:
                    7e:f4:4f:4b:26:af:60:0a:24:9f:28:55:58:2e:6a:
                    e9:3f:c5:b0:aa:b6:1a:f1:1e:f0:df:70:10:c6:2d:
                    78:02:44:aa:15:4d:40:c0:dd:0b:0e:61:93:99:80:
                    4c:05:aa:6f:00:24:f7:83:fb:00:c5:6a:3f:8b:30:
                    1f:d9:bc:20:48:47:69:af:b4:11:c8:8d:8d:56:b1:
                    ac:91:b3:54:e6:e2:16:f7:35:25:1b:5c:56:b4:ca:
                    09:3b:2a:64:50:b2:0f:d6:73:fb:e7:3a:f9:c1:a6:
                    2a:b9:2a:98:ea:8e:aa:1a:32:95:e5:78:60:36:83:
                    24:11:cd:b8:29:f3:aa:08:3b:6e:7f:8b:39:55:ff:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:CE:6D:67:BE:1D:4E:2D:8F:34:DB:70:3E:01:B2:11:53:03:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/6e37ba61cda2665349146e3f47d9626599bc42f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.56.0.0/13
                  167.108.0.0/16
                  167.116.0.0/16
                  179.24.0.0/13
                  186.48.0.0/13
                  190.0.128.0/19
                  190.64.0.0/16
                  190.132.0.0/14
                  200.2.32.0/19
                  200.40.0.0/16
                  200.125.0.0/18
                  201.217.128.0/18
                  201.221.32.0/19
                IPv6:
                  2800:a0::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6057
                  7167
                  267718

    Signature Algorithm: sha256WithRSAEncryption
         6e:bd:25:a0:4e:db:58:63:2a:60:00:f3:ce:95:25:f4:7f:07:
         b9:c1:e8:54:54:d2:e8:5f:7b:b9:e4:d8:f4:ec:85:57:7d:b7:
         d4:8f:f0:5e:e1:7d:f3:16:f7:80:3a:9e:90:8e:4b:24:9c:b5:
         8b:62:3a:db:7d:3a:db:f0:89:86:1e:43:11:71:19:39:f7:40:
         dd:07:43:ae:a6:86:f6:45:35:74:19:a3:d8:5c:0f:2f:22:c0:
         6f:5e:8f:9c:90:3f:e7:97:7b:c1:2c:28:df:31:3f:91:c9:3b:
         0b:6c:f8:fe:d4:fd:2c:4e:1d:a4:a9:e2:fd:48:4b:ce:87:61:
         36:10:48:96:5f:67:18:70:a8:27:0c:ea:f0:f0:10:eb:6a:e5:
         ea:9f:79:10:ee:d1:79:08:93:55:ad:a4:3e:31:c8:be:ad:c4:
         86:12:da:6e:1e:54:96:01:7c:98:56:75:1a:e0:a3:86:c9:30:
         5d:f8:f6:17:bb:31:88:00:fb:ec:e7:d8:1d:a5:45:2b:0d:81:
         63:e7:da:e5:dc:3e:83:eb:da:6c:35:33:c8:b4:13:6a:e5:02:
         0f:86:5c:06:da:b6:79:06:c6:96:8a:71:c7:7e:9d:00:c0:53:
         bf:92:dd:e0:f7:24:9f:d3:12:d3:ef:bd:52:e2:87:27:fb:21:
         5f:85:f0:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:25 2024 by rpki-client on console-ams.rpki-client.org