Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e02bc3ca022a8018c29af8772e06cbe046b81de.cer
File:                     7e02bc3ca022a8018c29af8772e06cbe046b81de.cer (raw, json)
Hash identifier:          3zV9XCVB38q/2toCWNHIXQoZg8grmtJm0O117gLn/lU=
Subject key identifier:   3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F93962
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/7e02bc3ca022a8018c29af8772e06cbe046b81de.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:50 +0000
Certificate not after:    Sun 13 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 19632
                          AS: 22047
                          IP: 138.121.176.0/22
                          IP: 186.156.0.0/16
                          IP: 190.44.0.0/14
                          IP: 190.100.0.0/15
                          IP: 190.160.0.0 -- 190.164.255.255
                          IP: 200.30.192.0/18
                          IP: 200.73.224.0 -- 200.74.127.255
                          IP: 200.83.0.0/16
                          IP: 200.86.0.0/16
                          IP: 200.104.0.0/16
                          IP: 200.120.0.0/16
                          IP: 201.214.0.0/15
                          IP: 201.239.0.0/16
                          IP: 201.241.0.0/16
                          IP: 2800:150::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16333154 (0xf93962)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:50 2017 GMT
            Not After : Oct 13 05:00:00 2024 GMT
        Subject: CN=7e02bc3ca022a8018c29af8772e06cbe046b81de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:bf:dd:c7:97:9b:72:6b:78:61:9f:77:f3:e3:
                    46:dc:4b:f0:36:77:27:83:5a:fe:b9:33:de:aa:05:
                    6f:32:3b:69:a1:82:9e:27:fc:c8:17:6c:ae:2e:24:
                    ea:88:9d:97:75:d8:ee:7e:73:85:08:d3:6d:6b:20:
                    2d:5e:b7:fa:bf:cf:37:b7:68:82:54:1b:5a:96:a4:
                    77:f3:85:e4:14:97:29:16:12:83:33:80:26:4a:a1:
                    f4:e1:87:09:06:d0:8a:bf:44:5d:7d:7c:4e:76:46:
                    c3:c9:2b:21:1d:a5:1c:ce:7b:44:bc:3c:a0:7b:44:
                    2f:ed:41:6e:9e:cc:8a:17:6b:57:26:cf:3d:d2:87:
                    af:7b:93:67:cc:26:ff:09:13:41:d7:24:28:ef:b1:
                    f8:75:8c:31:07:99:0f:c8:bf:3e:25:b3:ba:63:e5:
                    28:47:d6:a9:e4:f0:41:a1:f0:28:48:9e:26:b2:9d:
                    95:c3:fa:cd:a4:5b:46:2d:2e:9f:5e:84:54:1f:28:
                    e0:39:b6:64:a6:2c:ba:0c:b5:84:24:f5:ec:f9:20:
                    b5:3c:40:7e:44:35:c4:0c:33:07:46:92:46:0f:6f:
                    83:d7:77:9f:07:f1:dd:28:b7:8b:73:a9:db:41:cb:
                    70:80:59:90:02:4f:ab:2e:51:11:cf:5a:bd:ee:20:
                    9e:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:C2:AA:A6:50:CD:02:92:37:43:C7:A0:27:A5:87:8C:61:BB:CF:3B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9921c959-d03a-4a53-bd7a-f46e914dddf6/7e02bc3ca022a8018c29af8772e06cbe046b81de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.176.0/22
                  186.156.0.0/16
                  190.44.0.0/14
                  190.100.0.0/15
                  190.160.0.0-190.164.255.255
                  200.30.192.0/18
                  200.73.224.0-200.74.127.255
                  200.83.0.0/16
                  200.86.0.0/16
                  200.104.0.0/16
                  200.120.0.0/16
                  201.214.0.0/15
                  201.239.0.0/16
                  201.241.0.0/16
                IPv6:
                  2800:150::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  19632
                  22047

    Signature Algorithm: sha256WithRSAEncryption
         1a:3f:b1:20:f9:b6:75:95:90:b5:b8:eb:e3:18:d3:ef:d2:ed:
         32:ed:25:81:f2:90:82:d1:f0:99:9b:ff:f6:2c:62:8c:7e:05:
         1c:6f:e5:bd:6e:54:9a:83:56:e0:78:01:7a:de:a3:54:de:e4:
         b0:c6:9f:d5:d4:2d:f8:81:b0:eb:78:6b:f1:37:f7:9a:12:c1:
         88:3b:c7:45:d6:1c:46:26:0e:e6:77:02:51:07:55:e7:13:99:
         04:0e:72:15:3d:65:5d:9e:08:59:de:fc:28:87:b1:87:c0:90:
         16:fb:65:65:b4:b4:c2:a4:bc:01:1b:42:e2:9f:3e:e1:e5:3f:
         a5:a0:72:e5:b5:e6:33:1c:03:7a:00:87:6a:90:7c:c4:19:65:
         86:95:88:08:d2:44:51:e1:d3:c5:ac:ed:cc:60:9a:42:d6:37:
         f4:fe:c6:a5:31:75:29:a4:5f:8c:78:ff:85:77:bd:da:c5:56:
         00:e2:1e:f6:2e:e5:65:fc:0e:2c:9a:07:22:bb:25:83:70:8e:
         13:c6:b5:72:0f:64:34:d2:97:12:ef:8e:69:7d:2c:82:cf:4b:
         3a:ad:46:aa:c5:f7:8b:a5:5f:81:37:b0:04:19:1a:8b:c5:fb:
         87:3f:c0:c8:55:0f:7b:a0:af:7c:4b:2b:5b:86:3b:ea:df:09:
         41:7e:15:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:35 2024 by rpki-client on console-fra.rpki-client.org