Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7855197f590ff298b52ab358da08a0fdbfe6a883.cer
File:                     7855197f590ff298b52ab358da08a0fdbfe6a883.cer (raw, json)
Hash identifier:          i7qnB6OjprxdRPdRBUsSBJYGQDrqSYAle47AfbBbgHk=
Subject key identifier:   3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDFD2E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:54 +0000
Certificate not after:    Thu 18 Jul 2024 15:00:00 +0000
Subordinate resources:    AS: 19429
                          IP: 186.28.0.0/14
                          IP: 186.154.0.0/15
                          IP: 190.24.0.0/14
                          IP: 190.93.128.0/19
                          IP: 200.11.40.0/21
                          IP: 200.69.96.0/19
                          IP: 200.75.32.0/19
                          IP: 200.93.128.0/18
                          IP: 200.119.0.0/17
                          IP: 201.244.0.0/15
                          IP: 2800:260::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15596846 (0xedfd2e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:54 2017 GMT
            Not After : Jul 18 15:00:00 2024 GMT
        Subject: CN=7855197f590ff298b52ab358da08a0fdbfe6a883
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:3d:4a:2f:cf:ec:94:7f:ce:7e:fc:a8:d7:a8:
                    10:b2:96:f3:c3:0f:d8:76:97:fe:69:e3:f4:e7:4e:
                    e5:5a:11:be:72:94:48:5c:fa:b4:30:a6:09:7f:24:
                    60:48:58:9d:16:bf:9b:c6:d4:32:03:0d:3e:ce:be:
                    e3:1e:b5:1b:be:09:aa:37:21:60:07:33:b5:5f:41:
                    4a:bb:66:cd:69:2d:d1:ba:98:0c:2d:5e:f6:9a:7e:
                    eb:68:d6:c0:c0:82:e5:a0:58:e6:54:aa:d8:47:6a:
                    6e:5d:b9:0a:d9:34:88:4f:6d:1a:a3:60:04:48:5a:
                    06:f6:82:b2:c9:0b:09:7b:14:f7:d0:ca:94:54:59:
                    0e:30:c6:6e:2c:7b:f8:95:83:3c:15:de:48:21:14:
                    21:59:fe:f2:74:d1:b3:d0:15:74:ce:90:b4:ce:3a:
                    39:86:c6:43:42:ff:8a:cf:fe:7c:75:89:d4:7d:f3:
                    6c:8a:fc:5c:d5:96:16:f7:bc:7a:5a:3a:b2:91:82:
                    08:8f:90:36:98:ce:76:3b:44:63:a6:22:2a:b6:b8:
                    91:f3:f5:3f:ea:2b:d5:0d:78:1e:07:41:21:fb:da:
                    1b:a9:1c:59:b6:39:1f:39:93:c3:a0:d7:b2:40:a6:
                    0e:40:18:61:22:af:44:8f:34:b6:a4:8f:ca:62:f7:
                    7c:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:DC:D1:E5:5B:5D:9A:16:FD:75:FF:23:10:FC:F3:D3:86:8A:5A:CA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a32c4240-ceea-470e-964c-74d9bc1e380a/7855197f590ff298b52ab358da08a0fdbfe6a883.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.28.0.0/14
                  186.154.0.0/15
                  190.24.0.0/14
                  190.93.128.0/19
                  200.11.40.0/21
                  200.69.96.0/19
                  200.75.32.0/19
                  200.93.128.0/18
                  200.119.0.0/17
                  201.244.0.0/15
                IPv6:
                  2800:260::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19429

    Signature Algorithm: sha256WithRSAEncryption
         70:2c:2e:4c:95:01:17:72:22:42:41:74:8f:3d:ce:1c:50:8a:
         49:26:4c:c0:22:f7:0b:0c:91:39:49:b1:59:92:4a:b8:74:00:
         50:2b:08:d3:49:cf:30:b3:1c:b8:a5:e7:22:f6:2b:8d:d1:a0:
         03:f2:34:83:cc:1d:08:a7:d6:a8:06:ae:83:38:37:68:92:2b:
         80:a4:a6:22:9e:73:b0:45:3a:b5:06:8e:d9:a0:6d:19:ff:f7:
         e3:d5:52:16:cc:3d:30:05:8c:80:4b:a1:76:b8:26:8a:4a:e4:
         00:31:1b:c5:e2:51:fe:24:2f:3f:73:95:f9:57:1e:77:fc:29:
         b2:97:31:0c:9f:1a:c7:47:cd:78:93:e9:9e:27:f5:e5:05:9b:
         67:af:6e:60:4c:74:60:13:64:e0:1e:da:ec:b3:e7:46:50:57:
         72:bd:12:a7:3b:6c:ef:d8:eb:c1:e2:34:aa:9f:ca:14:98:dc:
         1f:b3:4d:6b:58:e7:ee:9f:90:49:34:6a:35:21:d2:76:7c:58:
         ad:20:4d:f1:d0:d9:be:c5:99:7f:61:9c:f1:ad:3b:a5:4b:9e:
         bb:06:a9:d8:a9:71:27:f2:39:b5:c1:cc:dd:e7:35:99:2f:6d:
         6c:bf:14:5e:9e:88:70:93:0e:9a:c4:6d:dd:ee:94:76:d9:3c:
         ca:74:54:06
-----BEGIN CERTIFICATE-----
MIIGCzCCBPOgAwIBAgIEAO39LjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1NFoXDTI0MDcxODE1MDAw
MFowMzExMC8GA1UEAxMoNzg1NTE5N2Y1OTBmZjI5OGI1MmFiMzU4ZGEwOGEwZmRi
ZmU2YTg4MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAOw9Si/P7JR/
zn78qNeoELKW88MP2HaX/mnj9OdO5VoRvnKUSFz6tDCmCX8kYEhYnRa/m8bUMgMN
Ps6+4x61G74JqjchYAcztV9BSrtmzWkt0bqYDC1e9pp+62jWwMCC5aBY5lSq2Edq
bl25Ctk0iE9tGqNgBEhaBvaCsskLCXsU99DKlFRZDjDGbix7+JWDPBXeSCEUIVn+
8nTRs9AVdM6QtM46OYbGQ0L/is/+fHWJ1H3zbIr8XNWWFve8elo6spGCCI+QNpjO
djtEY6YiKra4kfP1P+or1Q14HgdBIfvaG6kcWbY5HzmTw6DXskCmDkAYYSKvRI80
tqSPymL3fDECAwEAAaOCAzowggM2MB0GA1UdDgQWBBQ83NHlW12aFv11/yMQ/PPT
hopayjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMzJjNDI0MC1jZWVh
LTQ3MGUtOTY0Yy03NGQ5YmMxZTM4MGEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTMyYzQyNDAtY2VlYS00
NzBlLTk2NGMtNzRkOWJjMWUzODBhLzc4NTUxOTdmNTkwZmYyOThiNTJhYjM1OGRh
MDhhMGZkYmZlNmE4ODMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBg
BggrBgEFBQcBBwEB/wRRME8wPgQCAAEwOAMDArocAwMBupoDAwK+GAMEBb5dgAME
A8gLKAMEBchFYAMEBchLIAMEBshdgAMEB8h3AAMDAcn0MA0EAgACMAcDBQQoAAJg
MBkGCCsGAQUFBwEIAQH/BAowCKAGMAQCAkvlMA0GCSqGSIb3DQEBCwUAA4IBAQBw
LC5MlQEXciJCQXSPPc4cUIpJJkzAIvcLDJE5SbFZkkq4dABQKwjTSc8wsxy4peci
9iuN0aAD8jSDzB0Ip9aoBq6DODdokiuApKYinnOwRTq1Bo7ZoG0Z//fj1VIWzD0w
BYyAS6F2uCaKSuQAMRvF4lH+JC8/c5X5Vx53/CmylzEMnxrHR814k+meJ/XlBZtn
r25gTHRgE2TgHtrss+dGUFdyvRKnO2zv2OvB4jSqn8oUmNwfs01rWOfun5BJNGo1
IdJ2fFitIE3x0Nm+xZl/YZzxrTulS567BqnYqXEn8jm1wczd5zWZL21svxRenohw
kw6axG3d7pR22TzKdFQG
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:34 2024 by rpki-client on console-fra.rpki-client.org