Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75414d9f68146acc4abcd9997952be1300ec5196.cer
File:                     75414d9f68146acc4abcd9997952be1300ec5196.cer (raw, json)
Hash identifier:          g3GwLOakgEI870Sf5OaEZYwkhzMn+3RkNN1eL3qe2vA=
Subject key identifier:   31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F91775
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/75414d9f68146acc4abcd9997952be1300ec5196.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 Feb 2022 16:49:22 +0000
Certificate not after:    Sat 12 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 22011
                          AS: 22908
                          IP: 143.137.108.0/22
                          IP: 168.181.76.0/22
                          IP: 170.150.160.0/22
                          IP: 170.244.120.0/22
                          IP: 170.245.184.0/22
                          IP: 186.194.140.0/22
                          IP: 200.53.128.0/18
                          IP: 200.57.80.0/20
                          IP: 200.77.224.0/20
                          IP: 201.159.128.0/20
                          IP: 201.175.0.0 -- 201.175.47.255
                          IP: 2001:1270::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16324469 (0xf91775)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 23 16:49:22 2022 GMT
            Not After : Oct 12 05:00:00 2024 GMT
        Subject: CN=75414d9f68146acc4abcd9997952be1300ec5196
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:c2:6e:24:1a:29:34:01:5c:7d:8a:7c:0e:cf:
                    36:53:e8:fa:83:d1:94:8b:6d:ac:81:6c:81:71:04:
                    47:33:70:47:d4:7c:7d:9a:0d:5f:92:05:30:e3:37:
                    12:e4:7a:c1:1f:e4:20:d6:bd:10:eb:56:23:79:df:
                    f5:95:68:d3:59:38:38:cf:72:fe:d8:23:83:3d:5e:
                    b6:90:00:44:da:c8:a6:69:a8:6f:02:d7:ff:6e:0c:
                    56:f0:1e:2e:f1:91:8c:70:e5:e4:72:8a:3c:5d:70:
                    2f:13:8a:4a:d0:11:ce:4d:28:64:95:2f:08:a4:2c:
                    2a:f5:be:b4:70:e1:22:ec:41:4d:5e:dd:40:12:ed:
                    e8:93:3a:67:38:26:67:6c:78:fe:4e:a6:b9:ec:c2:
                    aa:a5:77:49:57:25:a0:9e:53:a1:68:e3:6c:eb:15:
                    1b:5f:be:41:f7:3b:fd:68:5a:d7:11:cc:37:fb:59:
                    ea:df:a1:0c:6b:37:d2:ed:6e:92:1a:d4:13:4d:69:
                    6e:6d:97:fc:cf:5b:b1:ce:96:44:a9:1e:fd:0d:d2:
                    08:45:d5:b6:2f:92:36:da:74:a7:bc:82:3b:b5:b4:
                    8a:e6:b0:74:a1:f6:6c:ae:b2:af:0c:06:8c:43:22:
                    27:98:d0:ab:6b:4a:39:a3:ab:3c:b2:60:cb:c8:be:
                    01:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:DA:E8:BF:21:04:29:09:AE:C7:3D:A0:E3:2F:E4:AB:49:59:1A:90
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4760713-3922-4d26-a5b0-41c1c0508aa3/75414d9f68146acc4abcd9997952be1300ec5196.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.137.108.0/22
                  168.181.76.0/22
                  170.150.160.0/22
                  170.244.120.0/22
                  170.245.184.0/22
                  186.194.140.0/22
                  200.53.128.0/18
                  200.57.80.0/20
                  200.77.224.0/20
                  201.159.128.0/20
                  201.175.0.0-201.175.47.255
                IPv6:
                  2001:1270::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22011
                  22908

    Signature Algorithm: sha256WithRSAEncryption
         3a:00:92:1e:9e:37:81:3e:b5:43:95:a8:8e:b4:42:1d:a4:5f:
         2c:c9:0c:1f:0c:4a:68:35:60:bc:8f:db:d0:12:b7:79:64:a7:
         77:c9:c8:0d:1f:bf:ff:2c:4d:ea:82:2a:b9:84:d4:2a:d0:73:
         13:cf:e7:f3:bd:69:5e:be:26:b1:77:26:8f:f2:ee:58:56:c3:
         1c:c4:c3:94:bf:65:51:43:00:1f:f2:39:43:38:dd:6e:68:14:
         5d:06:89:46:c3:1d:f2:c5:5c:78:7a:3c:19:7a:ac:9a:07:c4:
         b1:b2:4b:86:21:45:d0:e6:5f:10:a4:bd:0d:81:90:f4:da:54:
         38:fd:46:f2:01:b6:f3:c4:5b:3a:27:60:f1:8a:a3:24:5e:44:
         6a:bf:48:ac:41:f1:13:1d:50:09:fa:79:26:eb:f8:ad:b5:1b:
         4a:c2:bd:75:3d:bc:51:6e:7f:bd:a1:0d:ae:2e:c2:8c:bf:d7:
         21:fe:5a:e7:27:34:ff:81:7c:eb:47:b4:a8:19:47:09:de:b7:
         08:af:63:ae:40:5c:c5:c8:c5:61:57:c1:03:3d:2a:eb:3e:2d:
         cd:c0:60:2e:02:e9:5c:74:cb:ee:b8:86:f5:90:9a:88:3e:07:
         74:f6:ca:81:56:d2:91:ce:78:f7:12:66:ab:9f:5c:12:d6:2b:
         21:f7:2b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:34 2024 by rpki-client on console-fra.rpki-client.org