Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78379cd71229f217b9f834bbc4e3fa24f7014f89.cer
File:                     78379cd71229f217b9f834bbc4e3fa24f7014f89.cer (raw, json)
Hash identifier:          nP4x8QWjH38a3zRGwbY6IQNLiSSvbVR2CUqEB0grnAw=
Subject key identifier:   8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E55700
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Jan 2022 12:49:42 +0000
Certificate not after:    Tue 14 May 2024 06:00:00 +0000
Subordinate resources:    AS: 11315
                          AS: 262175
                          IP: 131.0.104.0/22
                          IP: 186.100.0.0/16
                          IP: 186.140.0.0/14
                          IP: 190.197.128.0/17
                          IP: 200.49.192.0/19
                          IP: 200.68.192.0/18
                          IP: 200.81.32.0/20
                          IP: 200.106.240.0/22
                          IP: 2800:a00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15030016 (0xe55700)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 27 12:49:42 2022 GMT
            Not After : May 14 06:00:00 2024 GMT
        Subject: CN=78379cd71229f217b9f834bbc4e3fa24f7014f89
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:de:88:74:37:59:33:49:e2:bd:ec:21:9e:c8:
                    32:d2:a0:f7:11:8b:ad:3c:43:9d:2b:c5:be:0c:5d:
                    22:10:8f:89:5c:d0:7a:ab:b7:72:fa:30:92:3d:0f:
                    d3:c5:f8:a2:a6:f6:20:a4:e2:00:53:e4:18:91:2f:
                    b1:f8:34:b2:17:69:67:2a:38:97:c0:5c:b9:25:0d:
                    b8:0b:e8:3f:0e:b6:50:55:9d:6e:19:3e:62:bd:60:
                    c1:a6:af:48:56:8e:5e:bd:55:9b:ca:e8:73:82:50:
                    fe:92:0b:3e:2b:0a:02:54:ad:b7:64:d7:11:cb:d3:
                    3b:33:ec:dc:15:87:b7:e8:81:c8:ca:0a:48:1f:a0:
                    fd:be:44:ca:52:7d:cd:94:7c:7a:1f:01:04:cd:83:
                    dd:4a:2f:03:14:b3:be:ae:c0:d3:d1:0f:be:6b:2b:
                    eb:d4:7a:fe:d6:d1:e1:0d:1e:ed:41:eb:71:99:b1:
                    74:03:93:2d:fb:2d:15:88:8e:b5:aa:4a:74:1b:d3:
                    81:b0:41:63:10:df:af:de:e1:e7:f4:ee:84:c6:4f:
                    f6:96:95:2a:fd:0d:3d:75:bb:6e:1e:a1:a0:86:f8:
                    3f:a3:ac:3c:bb:86:8e:92:eb:99:5c:75:27:93:21:
                    eb:c0:32:39:14:db:92:d7:75:f4:b0:42:17:d2:f9:
                    a1:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:16:EF:2F:72:40:32:28:10:E8:F7:DF:61:65:96:BD:F4:1C:B8:1D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/911e6063-70d8-47ed-8d3f-ef06df4c3722/78379cd71229f217b9f834bbc4e3fa24f7014f89.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.104.0/22
                  186.100.0.0/16
                  186.140.0.0/14
                  190.197.128.0/17
                  200.49.192.0/19
                  200.68.192.0/18
                  200.81.32.0/20
                  200.106.240.0/22
                IPv6:
                  2800:a00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11315
                  262175

    Signature Algorithm: sha256WithRSAEncryption
         07:32:c1:cd:9c:68:2a:83:26:ec:21:8f:31:d6:22:15:53:36:
         bd:ab:bb:81:78:9c:48:90:cd:36:08:dd:64:45:12:d7:75:33:
         1d:af:e1:f3:fe:03:72:02:06:dc:aa:02:da:36:43:64:d0:51:
         fc:a6:29:c4:52:22:4a:21:4e:f8:97:91:6c:24:17:1f:9f:cc:
         75:ae:4f:2f:3e:fe:8c:65:00:a0:fe:18:e1:53:39:79:c3:e1:
         73:81:2c:94:d9:a8:39:90:46:e2:87:eb:7d:25:4b:31:91:f5:
         46:69:ba:a0:58:26:a1:88:fe:40:b7:72:ef:1a:1d:a8:37:17:
         97:f0:49:c8:67:f5:f8:db:62:6f:2c:a1:b4:de:7c:ed:00:4a:
         ff:d4:df:b7:87:aa:34:e5:c5:4b:77:4b:3f:27:44:84:aa:ad:
         e4:40:d5:8a:57:c4:f6:ca:1e:d5:d5:38:71:28:de:51:61:55:
         8d:4a:d7:4d:12:3f:e4:52:43:2f:91:c7:ad:9c:e3:bc:f2:f6:
         65:b9:0f:55:29:4c:40:33:10:f1:66:37:cc:6b:2f:5e:e5:aa:
         9d:9d:d7:77:40:ef:39:0f:91:f3:62:25:31:96:be:cd:00:b1:
         6d:3c:90:8c:40:fe:20:9e:21:c8:75:4c:89:2e:ae:46:41:56:
         98:a2:5f:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org