Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7895194d48fba4d503dff8803fff0c239ed6c454.cer
File:                     7895194d48fba4d503dff8803fff0c239ed6c454.cer (raw, json)
Hash identifier:          iDEKklen4ZQesZTtiZGuXZWgjUfX0eYcPWiF90ddm7o=
Subject key identifier:   42:77:F5:B9:C7:CC:8B:E0:E9:E8:6B:FC:6D:41:24:3F:8E:22:58:17
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD7962
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5051c35b-f299-44fe-b33d-349ffcc93a77/7895194d48fba4d503dff8803fff0c239ed6c454.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5051c35b-f299-44fe-b33d-349ffcc93a77/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jun 2020 22:44:50 +0000
Certificate not after:    Sat 02 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 13591
                          AS: 28530 -- 28537
                          AS: 28543 -- 28544
                          IP: 131.72.212.0/22
                          IP: 148.246.0.0/16
                          IP: 168.197.124.0/22
                          IP: 177.232.0.0/15
                          IP: 187.186.0.0/15
                          IP: 189.200.0.0/16
                          IP: 189.204.0.0/17
                          IP: 200.53.112.0/20
                          IP: 200.56.240.0/20
                          IP: 200.57.64.0/20
                          IP: 200.77.240.0/20
                          IP: 201.130.64.0/20
                          IP: 201.148.128.0/19
                          IP: 2001:1260::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14514530 (0xdd7962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  8 22:44:50 2020 GMT
            Not After : Mar  2 15:00:00 2024 GMT
        Subject: CN=7895194d48fba4d503dff8803fff0c239ed6c454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:3a:45:22:dc:1a:b7:ff:78:98:b0:56:7a:08:
                    13:17:f5:dd:34:48:a6:3b:8a:b0:cb:a7:af:4f:67:
                    f5:a6:19:08:93:a6:37:50:f3:01:ed:be:b9:95:9e:
                    07:8c:e8:f8:30:c9:bd:92:0f:54:cf:37:92:48:e9:
                    03:f3:84:05:07:33:f5:ea:4e:7d:28:b0:99:50:a0:
                    40:9a:e2:b4:76:90:03:2a:a9:61:f1:f9:40:d2:7c:
                    c1:e4:3b:ef:7e:30:28:0a:fb:c5:17:91:d0:2e:d5:
                    bb:7f:3e:ee:11:8d:80:3d:34:af:f8:4f:e4:22:1f:
                    6a:54:d8:ec:c8:1c:14:d3:00:91:6a:f6:b2:63:a2:
                    89:a9:9c:45:cb:b2:4d:77:04:c7:41:48:29:e9:80:
                    83:de:66:2a:9a:fa:be:43:31:0c:8e:cb:97:6e:e4:
                    18:85:9e:83:3b:50:0a:0d:d0:fe:30:2b:88:a3:e5:
                    35:69:08:08:80:f3:ed:e9:44:12:43:2b:a3:03:e1:
                    10:79:20:94:58:b6:6c:17:76:2f:df:97:89:d7:3b:
                    e9:54:7d:d3:a8:d4:cc:8f:43:52:25:36:b3:81:6d:
                    4e:ea:46:28:98:d9:36:03:32:7d:26:7a:76:dd:c0:
                    4d:af:61:d5:77:91:5c:9e:2c:53:ab:49:89:8b:3d:
                    9e:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:77:F5:B9:C7:CC:8B:E0:E9:E8:6B:FC:6D:41:24:3F:8E:22:58:17
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5051c35b-f299-44fe-b33d-349ffcc93a77/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5051c35b-f299-44fe-b33d-349ffcc93a77/7895194d48fba4d503dff8803fff0c239ed6c454.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.212.0/22
                  148.246.0.0/16
                  168.197.124.0/22
                  177.232.0.0/15
                  187.186.0.0/15
                  189.200.0.0/16
                  189.204.0.0/17
                  200.53.112.0/20
                  200.56.240.0/20
                  200.57.64.0/20
                  200.77.240.0/20
                  201.130.64.0/20
                  201.148.128.0/19
                IPv6:
                  2001:1260::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13591
                  28530-28537
                  28543-28544

    Signature Algorithm: sha256WithRSAEncryption
         7d:81:20:a8:ee:04:8b:97:a6:72:41:f7:59:f3:eb:1a:46:1f:
         d4:4c:a2:54:5c:4a:5e:fd:b1:ba:e5:11:5a:71:7e:61:14:5a:
         14:b2:94:07:0a:44:c1:f0:ea:ac:60:67:db:9e:0b:2b:6c:d5:
         9c:4f:03:52:80:f1:ba:5b:21:ac:85:b7:bb:cd:9c:15:70:1c:
         7a:78:d1:bc:a4:c9:02:5d:86:19:99:dd:03:b6:55:1d:8d:39:
         e4:fe:98:16:43:4b:63:65:ba:67:14:a7:94:08:c1:a8:05:14:
         cd:b3:3b:52:01:70:3b:23:11:88:f0:00:89:e1:73:0c:27:e2:
         61:d2:54:51:8a:fa:a4:05:0a:b4:7d:1a:0d:30:28:0c:c2:66:
         86:32:20:55:22:1d:a5:0e:e7:25:4f:45:68:88:91:18:20:6b:
         ed:e4:5e:46:03:4d:c2:b0:7a:d2:96:71:84:07:58:d7:51:f0:
         b7:e3:fd:1b:9e:da:6a:bf:e3:9c:d3:bc:dd:66:79:de:dc:6c:
         3f:cd:05:a2:21:b0:a2:6c:6b:b2:b7:ec:36:c2:ac:53:64:8c:
         21:b5:8b:7b:e6:76:a2:8d:b4:13:d3:01:be:42:15:8a:22:a1:
         79:03:e4:d0:f2:ad:63:30:57:0e:bc:f6:16:4b:8f:fb:7e:37:
         90:48:de:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org