Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a80ecb2cfc9821f2fc627411a4517256eb3fcca.cer
File:                     7a80ecb2cfc9821f2fc627411a4517256eb3fcca.cer (raw, json)
Hash identifier:          3RUX1m5bQU3MkKmOsRfsE2XR+mCeBP0hRE3CqC6/afk=
Subject key identifier:   A4:B6:52:AE:0A:BA:4D:18:A6:8E:98:35:92:6E:54:40:89:A9:00:7C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01034128
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/39ae292c-785b-4118-9378-112025f3b19f/7a80ecb2cfc9821f2fc627411a4517256eb3fcca.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/39ae292c-785b-4118-9378-112025f3b19f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:25 +0000
Certificate not after:    Thu 24 Apr 2025 15:00:00 +0000
Subordinate resources:    AS: 11888
                          AS: 28518
                          AS: 265594
                          IP: 138.97.168.0/22
                          IP: 168.90.68.0/22
                          IP: 170.238.220.0/22
                          IP: 187.160.0.0/15
                          IP: 187.179.128.0/19
                          IP: 189.218.0.0/15
                          IP: 200.188.128.0/19
                          IP: 200.225.0.0/19
                          IP: 200.239.0.0/18
                          IP: 201.158.64.0/19
                          IP: 201.162.0.0/18
                          IP: 201.166.192.0/18
                          IP: 201.172.0.0/15
                          IP: 201.175.64.0/18
                          IP: 207.248.32.0/19
                          IP: 2806:230::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16990504 (0x1034128)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:25 2017 GMT
            Not After : Apr 24 15:00:00 2025 GMT
        Subject: CN=7a80ecb2cfc9821f2fc627411a4517256eb3fcca
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:dc:33:b9:19:50:ed:c3:cd:a8:7f:ae:b3:04:
                    48:e9:af:3e:e0:e2:12:84:20:bf:d4:c8:cb:c3:79:
                    1f:13:74:0b:ad:da:4b:29:55:56:b4:d0:a6:89:98:
                    1b:a4:53:00:23:23:94:f8:1b:4a:82:35:08:de:e1:
                    90:78:35:30:c2:df:69:d8:66:84:e1:f5:4e:09:72:
                    16:bc:cb:34:c7:73:58:17:8a:cf:9b:f3:96:a7:58:
                    ef:f5:95:69:22:2a:8c:2c:0a:eb:f3:6d:6b:b6:8c:
                    b6:b1:54:a8:a1:6f:ba:46:83:29:45:d0:79:44:22:
                    87:7f:9d:86:df:7f:7d:f2:16:9f:d1:66:a0:d3:b4:
                    c4:39:ed:2a:ce:64:29:20:ef:06:07:dc:cb:e4:b4:
                    1c:73:b6:5b:78:61:d2:4b:5e:38:46:c0:a0:b9:45:
                    1e:e2:f9:21:77:cc:4f:0a:58:2e:f6:4b:5b:36:68:
                    7c:0c:0e:04:ab:38:d0:29:ba:c9:b5:12:5a:22:38:
                    9d:7a:28:88:79:22:ba:cd:83:42:76:60:7d:45:21:
                    aa:b7:35:e7:34:c3:fc:12:69:8d:ca:3c:8f:99:9e:
                    77:48:5d:3d:78:fd:24:f9:86:e6:47:cd:c0:b5:a8:
                    fc:77:7e:0d:b3:c1:cb:0e:1c:63:fe:74:f8:88:94:
                    fd:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:B6:52:AE:0A:BA:4D:18:A6:8E:98:35:92:6E:54:40:89:A9:00:7C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/39ae292c-785b-4118-9378-112025f3b19f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/39ae292c-785b-4118-9378-112025f3b19f/7a80ecb2cfc9821f2fc627411a4517256eb3fcca.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.168.0/22
                  168.90.68.0/22
                  170.238.220.0/22
                  187.160.0.0/15
                  187.179.128.0/19
                  189.218.0.0/15
                  200.188.128.0/19
                  200.225.0.0/19
                  200.239.0.0/18
                  201.158.64.0/19
                  201.162.0.0/18
                  201.166.192.0/18
                  201.172.0.0/15
                  201.175.64.0/18
                  207.248.32.0/19
                IPv6:
                  2806:230::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11888
                  28518
                  265594

    Signature Algorithm: sha256WithRSAEncryption
         36:31:5a:9f:4c:7a:fd:e1:24:01:8f:c8:48:a3:ac:cc:5a:a0:
         11:70:89:79:e9:86:af:d5:6c:62:ba:95:86:7c:c1:1d:f0:90:
         c1:3c:ae:e0:c1:9d:e7:46:67:44:e9:95:5f:5e:0b:99:f8:5f:
         01:1d:fd:d2:79:da:c3:b1:4d:02:b4:e7:25:37:1c:c0:95:eb:
         6d:41:3d:49:23:5a:62:ec:d9:e2:79:44:6b:66:fe:78:f9:d1:
         65:79:15:b0:c2:a1:23:fa:b8:26:b6:02:f0:80:a9:31:99:42:
         d8:15:65:3b:a7:42:89:ca:8c:68:d7:a6:f6:32:db:b9:fe:38:
         49:94:95:e8:1a:4d:d3:d9:47:f8:4d:72:ef:e1:9a:c3:e2:c3:
         c5:91:3e:67:58:5b:9d:3d:37:34:17:87:ff:12:f8:3b:e5:8e:
         14:42:64:d1:30:4c:3d:61:a8:58:a0:b5:83:04:1f:42:83:30:
         cd:2c:70:1f:3d:52:fe:8a:28:e0:39:42:4d:2d:e5:1d:f1:e5:
         99:83:f1:04:f4:f2:6e:92:6f:85:dd:df:9a:46:f1:7c:a7:90:
         49:76:94:77:de:12:a4:ef:ec:e7:5b:4f:98:e3:ba:8e:e8:09:
         c2:01:0c:53:ef:f5:38:00:cb:3c:d6:5d:84:8d:53:b3:bc:d6:
         91:b8:a3:0a
-----BEGIN CERTIFICATE-----
MIIGMzCCBRugAwIBAgIEAQNBKDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcyNVoXDTI1MDQyNDE1MDAw
MFowMzExMC8GA1UEAxMoN2E4MGVjYjJjZmM5ODIxZjJmYzYyNzQxMWE0NTE3MjU2
ZWIzZmNjYTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANXcM7kZUO3D
zah/rrMESOmvPuDiEoQgv9TIy8N5HxN0C63aSylVVrTQpomYG6RTACMjlPgbSoI1
CN7hkHg1MMLfadhmhOH1TglyFrzLNMdzWBeKz5vzlqdY7/WVaSIqjCwK6/Nta7aM
trFUqKFvukaDKUXQeUQih3+dht9/ffIWn9FmoNO0xDntKs5kKSDvBgfcy+S0HHO2
W3hh0kteOEbAoLlFHuL5IXfMTwpYLvZLWzZofAwOBKs40Cm6ybUSWiI4nXooiHki
us2DQnZgfUUhqrc15zTD/BJpjco8j5med0hdPXj9JPmG5kfNwLWo/Hd+DbPByw4c
Y/50+IiU/SMCAwEAAaOCA2IwggNeMB0GA1UdDgQWBBSktlKuCrpNGKaOmDWSblRA
iakAfDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zOWFlMjkyYy03ODVi
LTQxMTgtOTM3OC0xMTIwMjVmM2IxOWYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzlhZTI5MmMtNzg1Yi00
MTE4LTkzNzgtMTEyMDI1ZjNiMTlmLzdhODBlY2IyY2ZjOTgyMWYyZmM2Mjc0MTFh
NDUxNzI1NmViM2ZjY2EubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB/
BggrBgEFBQcBBwEB/wRwMG4wXQQCAAEwVwMEAophqAMEAqhaRAMEAqru3AMDAbug
AwQFu7OAAwMBvdoDBAXIvIADBAXI4QADBAbI7wADBAXJnkADBAbJogADBAbJpsAD
AwHJrAMEBsmvQAMEBc/4IDANBAIAAjAHAwUAKAYCMDAiBggrBgEFBQcBCAEB/wQT
MBGgDzANAgIucAICb2YCAwQNejANBgkqhkiG9w0BAQsFAAOCAQEANjFan0x6/eEk
AY/ISKOszFqgEXCJeemGr9VsYrqVhnzBHfCQwTyu4MGd50ZnROmVX14LmfhfAR39
0nnaw7FNArTnJTccwJXrbUE9SSNaYuzZ4nlEa2b+ePnRZXkVsMKhI/q4JrYC8ICp
MZlC2BVlO6dCicqMaNem9jLbuf44SZSV6BpN09lH+E1y7+Gaw+LDxZE+Z1hbnT03
NBeH/xL4O+WOFEJk0TBMPWGoWKC1gwQfQoMwzSxwHz1S/ooo4DlCTS3lHfHlmYPx
BPTybpJvhd3fmkbxfKeQSXaUd94SpO/s51tPmOO6jugJwgEMU+/1OADLPNZdhI1T
s7zWkbijCg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org