Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85a6f179d12a2f34f4408b6f354c3cc0895c3456.cer
File:                     85a6f179d12a2f34f4408b6f354c3cc0895c3456.cer (raw, json)
Hash identifier:          NxsJ+ongExc6yluFzlZZ/+Y1jTa6QIldSL4AIJMfoA4=
Subject key identifier:   D1:B7:67:9F:9B:96:5E:09:87:A2:68:D4:6A:B8:C6:81:5C:F3:D6:8A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F41CDB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/196b1b9f-e236-4c79-bb15-d5423390a585/85a6f179d12a2f34f4408b6f354c3cc0895c3456.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/196b1b9f-e236-4c79-bb15-d5423390a585/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Fri 06 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 262249
                          AS: 264798
                          AS: 265730 -- 265732
                          IP: 45.65.202.0/24
                          IP: 45.65.252.0/24
                          IP: 170.238.66.0/24
                          IP: 192.140.126.0/24
                          IP: 200.108.144.0/20
                          IP: 2801:140::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15998171 (0xf41cdb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Sep  6 05:00:00 2024 GMT
        Subject: CN=85a6f179d12a2f34f4408b6f354c3cc0895c3456
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:9c:d3:28:7b:d5:7e:14:8a:93:79:3d:74:30:
                    7f:e0:15:7d:2c:4d:b4:c8:2e:5c:82:cf:ae:8f:ca:
                    86:5a:3b:ec:ec:ed:e5:e5:09:72:21:3a:c5:4d:d8:
                    c1:1a:98:50:de:6c:f6:8e:de:8d:26:9d:b5:68:ee:
                    f3:41:42:b1:eb:5b:d4:2a:7d:1c:28:70:95:b7:0d:
                    6f:54:97:96:ac:21:15:61:ab:d3:b0:af:c8:70:90:
                    45:27:3a:40:69:d1:a4:83:0b:fb:6b:b1:b6:f7:81:
                    18:71:81:f1:89:48:cb:b1:3d:df:62:fa:4d:36:98:
                    7e:2f:8a:79:15:16:55:6f:46:3f:28:7f:65:cc:40:
                    62:a4:f7:7b:f5:66:13:71:ed:7b:cc:8b:35:f8:b8:
                    0e:c3:b6:f5:3f:a3:f4:4a:e7:06:32:3d:e2:44:e6:
                    47:d8:80:14:45:39:de:be:2b:53:b9:4c:b1:01:ec:
                    55:7d:cc:73:79:3a:19:02:1a:93:11:41:f4:8f:95:
                    8e:eb:e0:8f:1f:1f:1b:ab:fc:65:44:1a:06:40:19:
                    a7:7b:58:a4:16:8e:3e:95:9c:a9:10:d1:63:01:12:
                    b0:5e:50:bb:d1:36:4c:17:0d:6a:1b:a3:23:bc:9b:
                    db:8a:75:01:13:70:da:df:fc:02:6c:f2:23:3f:2d:
                    5e:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:B7:67:9F:9B:96:5E:09:87:A2:68:D4:6A:B8:C6:81:5C:F3:D6:8A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/196b1b9f-e236-4c79-bb15-d5423390a585/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/196b1b9f-e236-4c79-bb15-d5423390a585/85a6f179d12a2f34f4408b6f354c3cc0895c3456.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.65.202.0/24
                  45.65.252.0/24
                  170.238.66.0/24
                  192.140.126.0/24
                  200.108.144.0/20
                IPv6:
                  2801:140::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262249
                  264798
                  265730-265732

    Signature Algorithm: sha256WithRSAEncryption
         a5:d1:8f:63:f9:a3:b7:96:a1:a2:e8:d8:35:f8:84:13:c5:4e:
         f8:ac:d3:e8:6a:d5:f8:cb:eb:39:5a:f2:c8:0e:74:ed:f5:8f:
         c2:9e:6b:4c:57:38:c5:ba:2c:15:0e:88:ac:d2:5b:f5:bd:d3:
         f1:99:fa:6d:52:a8:5b:c9:2d:6e:50:17:a0:1f:33:24:90:50:
         29:13:c2:fc:36:ad:c8:2c:31:69:d8:69:b1:74:45:52:96:fe:
         d9:4d:62:63:04:08:19:b7:be:b9:8f:7a:63:92:5e:99:d6:86:
         b5:4b:1c:f1:12:5d:fe:89:e1:13:02:b8:35:c5:69:08:95:9f:
         91:1e:b6:92:86:17:af:66:f5:12:2a:72:ac:17:39:fa:80:42:
         c0:ff:b3:bb:8b:bc:af:a7:81:f6:0c:df:e3:8a:d0:85:35:05:
         21:1a:5a:65:54:4b:33:6c:db:97:4c:d3:e4:9d:7f:3c:b7:02:
         8d:c5:db:53:91:12:73:5b:19:67:d6:4b:ec:e4:ee:93:ae:35:
         ff:a4:a2:bb:05:1c:f1:89:e0:6a:fb:90:73:9b:f7:83:c7:f4:
         c2:28:cf:7c:af:29:bb:02:b3:9f:9c:60:a2:f4:3a:89:7b:5d:
         71:dc:55:d8:61:60:16:16:94:49:43:56:e0:c3:22:ab:e7:c8:
         0b:cd:d3:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org