Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/74b184780ab11522108afea08bba6483c8a4038c.cer
File:                     74b184780ab11522108afea08bba6483c8a4038c.cer (raw, json)
Hash identifier:          X+l6i/jsRGGLlUQQJbubNSeoWtvmxDzdGxII7KYEjaQ=
Subject key identifier:   55:25:D9:C8:3C:B5:EC:05:1E:0B:45:87:46:F1:59:28:93:13:ED:16
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F37236
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/74b184780ab11522108afea08bba6483c8a4038c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 24 Feb 2022 14:29:42 +0000
Certificate not after:    Sat 31 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 28024
                          IP: 161.22.128.0/17
                          IP: 161.56.0.0/16
                          IP: 161.138.0.0/16
                          IP: 179.58.0.0/15
                          IP: 181.227.0.0/16
                          IP: 186.2.0.0/17
                          IP: 186.27.0.0/17
                          IP: 200.85.144.0/21
                          IP: 2803:5700::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15954486 (0xf37236)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 24 14:29:42 2022 GMT
            Not After : Aug 31 15:00:00 2024 GMT
        Subject: CN=74b184780ab11522108afea08bba6483c8a4038c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:4c:ab:b2:36:94:40:32:5f:95:20:d8:0d:55:
                    30:42:31:ea:e3:c6:58:80:89:fd:bd:7f:9c:51:25:
                    3a:0e:b5:2d:2f:09:10:83:ed:6b:38:c0:51:21:cf:
                    aa:f7:bf:11:ee:20:15:88:83:3b:66:b7:2b:db:b4:
                    04:53:21:e0:f6:6d:67:6f:e5:6c:4c:a3:1e:56:ed:
                    99:40:0b:05:e7:23:15:8d:dc:35:a8:42:fa:64:9d:
                    1d:9f:ae:f5:0a:4f:1f:3f:16:f1:cd:0c:79:d6:d4:
                    d6:f3:b5:15:d7:34:cc:bb:0a:37:8b:40:8c:28:90:
                    4b:92:ce:aa:12:4d:e7:45:ff:fa:2f:54:2a:df:55:
                    0e:62:9a:47:bb:4d:a6:a7:77:c1:44:21:2c:73:cd:
                    94:9f:a1:53:e1:1a:1b:1b:1c:4b:62:0b:2c:72:65:
                    07:1d:d1:91:0a:02:80:b4:30:ce:de:e4:78:d1:b2:
                    2d:64:1a:36:56:d9:ca:cf:ab:5a:39:c4:50:b8:8d:
                    f2:0c:64:4f:48:b2:a9:61:7b:f3:87:03:48:70:84:
                    e7:d4:37:46:71:62:08:88:03:dd:b2:8d:a1:d9:21:
                    6c:fa:66:d9:c9:f4:3b:ea:d6:9c:15:94:b6:3a:f3:
                    3f:0a:b5:54:5e:e1:4d:41:98:21:d9:d2:5b:3a:b2:
                    78:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:25:D9:C8:3C:B5:EC:05:1E:0B:45:87:46:F1:59:28:93:13:ED:16
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e73e277c-4373-4608-aa3b-adccc70ec4bc/74b184780ab11522108afea08bba6483c8a4038c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.22.128.0/17
                  161.56.0.0/16
                  161.138.0.0/16
                  179.58.0.0/15
                  181.227.0.0/16
                  186.2.0.0/17
                  186.27.0.0/17
                  200.85.144.0/21
                IPv6:
                  2803:5700::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28024

    Signature Algorithm: sha256WithRSAEncryption
         71:da:51:dc:c8:56:ed:5a:70:9d:bf:c9:c2:54:d9:88:6c:14:
         e4:8e:b4:bd:c1:45:84:81:78:57:22:de:56:bf:09:38:00:de:
         75:77:43:45:bc:c1:cd:7d:59:6a:7b:0c:db:9f:b7:6a:84:09:
         b2:a4:ee:51:f0:fc:4b:ed:af:3e:23:21:5a:83:7a:75:65:88:
         ac:43:d1:c2:a8:c2:92:29:ae:91:9d:28:a8:a3:a7:10:08:df:
         b5:75:22:af:e6:4b:91:8e:13:e9:28:ad:72:de:de:61:85:64:
         f5:e9:aa:33:83:94:5b:85:96:71:07:17:63:3e:96:e1:5c:73:
         c9:aa:b1:08:50:26:0f:e2:79:51:dd:6b:49:4d:e8:9f:40:1f:
         bc:1f:2d:1d:3a:86:a8:76:ca:a3:d9:da:4b:1e:6c:71:14:cd:
         a0:47:11:7e:ed:1d:8c:a0:08:b3:e3:12:4d:dd:26:36:d0:e9:
         5a:7d:76:e8:49:88:7a:6e:87:85:76:c2:fc:9b:06:10:63:68:
         b3:78:c9:94:41:56:4e:23:e9:52:d6:1c:7f:e7:49:53:93:1b:
         43:1b:7a:29:b9:0b:4e:92:df:9d:f8:d4:4f:65:83:10:1c:ba:
         9c:6a:1f:86:a1:8e:46:98:6e:24:15:6a:0d:a7:2a:f2:69:e0:
         24:fc:a7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org