Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/75b0f55017351e783d903725f8bd2aaebabaa499.cer
File:                     75b0f55017351e783d903725f8bd2aaebabaa499.cer (raw, json)
Hash identifier:          B+8kuMQ4L5rxVLR7vaxfHcLkW7BJbqTk8osnaZmWtjM=
Subject key identifier:   33:7B:E0:0C:77:F6:2B:59:11:79:FF:75:DF:81:AD:0D:29:10:5D:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01109C8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8268c079-a0d3-45e3-9a26-1c46d86136b9/75b0f55017351e783d903725f8bd2aaebabaa499.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8268c079-a0d3-45e3-9a26-1c46d86136b9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:04:36 +0000
Certificate not after:    Sun 14 Dec 2025 15:25:57 +0000
Subordinate resources:    AS: 28664
                          AS: 52674
                          AS: 53135
                          AS: 262527
                          AS: 262605
                          AS: 262907
                          AS: 265303
                          IP: 45.178.40.0/22
                          IP: 45.184.148.0/22
                          IP: 45.226.16.0/22
                          IP: 45.237.80.0/22
                          IP: 131.161.0.0/22
                          IP: 131.161.40.0/22
                          IP: 131.221.52.0/22
                          IP: 131.221.92.0/22
                          IP: 132.255.252.0/22
                          IP: 138.99.84.0/22
                          IP: 138.219.152.0/22
                          IP: 143.202.108.0/22
                          IP: 143.208.76.0/22
                          IP: 168.0.88.0/22
                          IP: 168.0.160.0/22
                          IP: 168.0.172.0/22
                          IP: 168.121.92.0/22
                          IP: 168.197.252.0/22
                          IP: 168.227.168.0/22
                          IP: 168.227.232.0/21
                          IP: 170.79.184.0/22
                          IP: 170.80.104.0/22
                          IP: 170.83.72.0/22
                          IP: 170.254.188.0/22
                          IP: 177.11.192.0/20
                          IP: 177.36.32.0/20
                          IP: 177.39.240.0/20
                          IP: 177.44.192.0/20
                          IP: 177.66.176.0/22
                          IP: 177.67.88.0/22
                          IP: 177.67.208.0/21
                          IP: 177.72.96.0/21
                          IP: 177.84.232.0/22
                          IP: 177.87.184.0/21
                          IP: 177.87.216.0/21
                          IP: 177.92.168.0/21
                          IP: 177.104.96.0/20
                          IP: 177.126.1.0/24
                          IP: 177.126.6.0/24
                          IP: 177.126.8.0/24
                          IP: 177.126.10.0/23
                          IP: 177.126.13.0/24
                          IP: 177.126.15.0/24
                          IP: 177.128.44.0/22
                          IP: 177.130.32.0/20
                          IP: 177.155.102.0 -- 177.155.107.255
                          IP: 177.184.248.0/21
                          IP: 177.185.124.0/22
                          IP: 186.192.176.0/20
                          IP: 186.193.48.0/20
                          IP: 186.195.16.0/20
                          IP: 186.209.80.0/21
                          IP: 186.250.8.0/21
                          IP: 186.251.168.0/22
                          IP: 187.16.224.0/20
                          IP: 187.49.156.0/22
                          IP: 187.60.96.0/20
                          IP: 187.60.176.0/20
                          IP: 187.84.48.0/20
                          IP: 187.120.12.0/24
                          IP: 189.1.80.0/20
                          IP: 189.39.216.0/22
                          IP: 191.6.160.0/22
                          IP: 191.243.112.0/20
                          IP: 191.253.192.0/20
                          IP: 200.18.112.0/20
                          IP: 200.150.164.0/23
                          IP: 200.150.167.0/24
                          IP: 200.150.169.0 -- 200.150.170.255
                          IP: 200.150.172.0/24
                          IP: 200.150.174.0/23
                          IP: 201.87.128.0/24
                          IP: 201.87.131.0/24
                          IP: 201.87.133.0 -- 201.87.137.255
                          IP: 201.87.139.0 -- 201.87.142.255
                          IP: 201.87.144.0/24
                          IP: 201.87.146.0 -- 201.87.150.255
                          IP: 201.87.152.0/23
                          IP: 201.87.157.0/24
                          IP: 201.87.192.0/20
                          IP: 2804:24c::/32
                          IP: 2804:59c::/32
                          IP: 2804:da8::/32
                          IP: 2804:1054::/32
                          IP: 2804:1d40::/32
                          IP: 2804:297c::/32
                          IP: 2804:2dc8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17865867 (0x1109c8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:04:36 2023 GMT
            Not After : Dec 14 15:25:57 2025 GMT
        Subject: CN=75b0f55017351e783d903725f8bd2aaebabaa499
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:e9:13:f3:9e:3b:42:07:1f:f8:a2:86:28:99:
                    68:50:fe:3e:3a:82:d9:58:69:68:26:3f:41:41:df:
                    28:c9:3b:5e:48:27:ed:5e:47:18:0b:d2:84:a4:fe:
                    18:ca:30:cf:ed:95:b2:c0:92:ca:ef:f1:9e:27:97:
                    52:f9:f4:d7:dd:c0:0d:86:0c:b0:ea:67:02:e4:9f:
                    3c:65:0e:7d:e7:91:dd:7f:7f:61:1c:14:7c:e4:8f:
                    9b:f4:7f:dc:86:f5:6f:8d:ff:03:f1:71:14:b4:42:
                    3c:a9:4e:cd:ad:c2:22:81:47:5a:cf:68:51:ac:33:
                    84:4f:b8:b3:c4:bf:80:b4:f7:4f:e3:05:89:46:b2:
                    91:3f:f2:3b:d3:44:6d:b9:c3:e6:cd:96:82:91:17:
                    d5:9e:4d:92:54:1b:34:28:2a:5c:74:86:94:98:59:
                    ed:d6:07:89:8f:ca:66:fc:a8:8e:1f:b5:ed:17:01:
                    75:3c:36:4c:1e:55:0f:9c:b1:86:9b:51:fa:27:5a:
                    71:c3:f3:5c:63:32:d0:e0:a5:df:1d:c7:3b:24:9f:
                    56:91:40:8d:f2:3d:43:14:51:ac:5b:27:d6:40:a5:
                    51:99:0a:51:a4:96:db:e1:70:9a:c3:46:5a:46:7a:
                    02:e1:49:e8:e9:90:6e:c6:4d:1c:71:2f:8a:8e:7c:
                    05:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:7B:E0:0C:77:F6:2B:59:11:79:FF:75:DF:81:AD:0D:29:10:5D:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8268c079-a0d3-45e3-9a26-1c46d86136b9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8268c079-a0d3-45e3-9a26-1c46d86136b9/75b0f55017351e783d903725f8bd2aaebabaa499.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.178.40.0/22
                  45.184.148.0/22
                  45.226.16.0/22
                  45.237.80.0/22
                  131.161.0.0/22
                  131.161.40.0/22
                  131.221.52.0/22
                  131.221.92.0/22
                  132.255.252.0/22
                  138.99.84.0/22
                  138.219.152.0/22
                  143.202.108.0/22
                  143.208.76.0/22
                  168.0.88.0/22
                  168.0.160.0/22
                  168.0.172.0/22
                  168.121.92.0/22
                  168.197.252.0/22
                  168.227.168.0/22
                  168.227.232.0/21
                  170.79.184.0/22
                  170.80.104.0/22
                  170.83.72.0/22
                  170.254.188.0/22
                  177.11.192.0/20
                  177.36.32.0/20
                  177.39.240.0/20
                  177.44.192.0/20
                  177.66.176.0/22
                  177.67.88.0/22
                  177.67.208.0/21
                  177.72.96.0/21
                  177.84.232.0/22
                  177.87.184.0/21
                  177.87.216.0/21
                  177.92.168.0/21
                  177.104.96.0/20
                  177.126.1.0/24
                  177.126.6.0/24
                  177.126.8.0/24
                  177.126.10.0/23
                  177.126.13.0/24
                  177.126.15.0/24
                  177.128.44.0/22
                  177.130.32.0/20
                  177.155.102.0-177.155.107.255
                  177.184.248.0/21
                  177.185.124.0/22
                  186.192.176.0/20
                  186.193.48.0/20
                  186.195.16.0/20
                  186.209.80.0/21
                  186.250.8.0/21
                  186.251.168.0/22
                  187.16.224.0/20
                  187.49.156.0/22
                  187.60.96.0/20
                  187.60.176.0/20
                  187.84.48.0/20
                  187.120.12.0/24
                  189.1.80.0/20
                  189.39.216.0/22
                  191.6.160.0/22
                  191.243.112.0/20
                  191.253.192.0/20
                  200.18.112.0/20
                  200.150.164.0/23
                  200.150.167.0/24
                  200.150.169.0-200.150.170.255
                  200.150.172.0/24
                  200.150.174.0/23
                  201.87.128.0/24
                  201.87.131.0/24
                  201.87.133.0-201.87.137.255
                  201.87.139.0-201.87.142.255
                  201.87.144.0/24
                  201.87.146.0-201.87.150.255
                  201.87.152.0/23
                  201.87.157.0/24
                  201.87.192.0/20
                IPv6:
                  2804:24c::/32
                  2804:59c::/32
                  2804:da8::/32
                  2804:1054::/32
                  2804:1d40::/32
                  2804:297c::/32
                  2804:2dc8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28664
                  52674
                  53135
                  262527
                  262605
                  262907
                  265303

    Signature Algorithm: sha256WithRSAEncryption
         7c:0d:75:9e:8d:73:f4:99:25:fc:3c:dd:84:5c:50:c8:df:c3:
         d0:00:e7:c7:4b:8e:89:a9:79:3f:dd:8f:5c:94:41:9d:a5:ca:
         26:22:f0:b8:8f:9b:98:78:23:1e:10:5b:ff:17:f8:96:87:01:
         3c:6e:1a:7e:8e:8a:4c:4e:a9:7d:c0:db:9c:82:6c:92:6c:7c:
         ac:c5:28:44:e8:97:61:11:ee:05:f7:cf:bd:31:bf:3f:8e:04:
         e2:5f:25:d5:15:ef:d1:e7:83:67:79:e5:99:3a:5a:c3:fc:7b:
         bc:94:48:90:21:98:f6:95:fa:93:0a:b7:6d:1e:b5:1c:a5:4a:
         93:1d:30:55:27:f7:c8:6a:91:9e:70:ef:47:6a:99:b0:9a:e1:
         77:13:38:e1:8c:8e:fd:52:6d:8f:04:b7:b6:92:b7:9e:c5:a3:
         0e:34:cc:9d:f2:8c:ac:6c:2d:1b:a7:ee:dc:60:dd:f9:f7:93:
         a0:1e:22:ee:a2:aa:27:3d:d9:df:11:22:1c:ab:f4:05:44:3b:
         ad:9e:3f:67:57:47:6b:31:96:77:37:38:10:e5:85:fe:fd:3c:
         b5:93:9e:59:4b:a4:6a:37:86:c7:e3:d1:28:c4:7a:29:62:aa:
         e4:33:32:58:79:5c:bb:72:5e:76:63:31:34:1f:29:c6:83:3d:
         1f:45:62:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org