Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/85d428ed766701b593558a22e1fc08c17acc6e27.cer
File:                     85d428ed766701b593558a22e1fc08c17acc6e27.cer (raw, json)
Hash identifier:          LYZv3y2NDf3vYoYnAQL6/C5HX+Y11gyoIj4eaRSdFTQ=
Subject key identifier:   95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3BAE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 05:57:13 +0000
Certificate not after:    Mon 08 Apr 2024 15:00:00 +0000
Subordinate resources:    AS: 15311
                          IP: 181.212.0.0/16
                          IP: 186.103.128.0/17
                          IP: 190.82.0.0/16
                          IP: 200.42.160.0/19
                          IP: 200.50.96.0/19
                          IP: 200.90.160.0 -- 200.90.207.255
                          IP: 200.113.0.0 -- 200.113.191.255
                          IP: 201.236.0.0 -- 201.236.191.255
                          IP: 2800:590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14924519 (0xe3bae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 05:57:13 2023 GMT
            Not After : Apr  8 15:00:00 2024 GMT
        Subject: CN=85d428ed766701b593558a22e1fc08c17acc6e27
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:1c:54:4c:02:e8:d2:04:9f:f4:e8:79:ee:73:
                    cc:4b:1a:b8:73:fd:a8:22:f6:6e:06:0f:69:46:d6:
                    07:3e:6a:28:63:1e:97:26:eb:1f:04:05:15:30:7d:
                    bb:12:85:79:95:50:c2:58:5c:75:4e:cc:9e:d0:44:
                    d2:da:ae:c4:c7:14:2d:ac:8c:ea:0b:98:82:2d:db:
                    bf:72:28:8a:6a:85:ad:ed:df:45:72:84:fb:cb:58:
                    c4:ad:b6:d8:b9:81:07:d6:79:8e:5e:5e:34:20:37:
                    04:17:54:7c:df:f7:59:02:8a:19:c6:03:7e:e2:ea:
                    b4:a5:95:cc:72:44:e5:b8:9c:29:fa:98:4b:88:86:
                    2f:4d:f4:69:58:ad:5f:96:f0:f7:ed:f4:34:7f:91:
                    36:6c:84:15:cd:3c:78:e7:7b:66:f0:c3:72:f6:b1:
                    62:cb:60:69:27:53:ca:cf:06:73:31:8c:54:5f:32:
                    6c:8d:d6:9e:08:b8:a9:53:37:10:37:dc:d5:c0:e8:
                    e3:88:a6:52:57:92:49:ed:21:a2:1a:11:21:7d:51:
                    2c:b3:4f:52:0e:12:aa:71:ee:12:44:53:4a:82:d5:
                    4b:bd:8f:90:08:32:0c:bf:46:4f:d0:0b:83:6c:de:
                    68:0e:61:cd:15:8d:56:9f:61:e6:d7:02:5a:a5:aa:
                    a1:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:95:8D:0A:54:4B:87:6D:5D:74:C9:FA:66:99:C6:AB:96:71:4E:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d9f4d316-901c-4c6b-bbd6-4cbb703b0cfd/85d428ed766701b593558a22e1fc08c17acc6e27.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.212.0.0/16
                  186.103.128.0/17
                  190.82.0.0/16
                  200.42.160.0/19
                  200.50.96.0/19
                  200.90.160.0-200.90.207.255
                  200.113.0.0-200.113.191.255
                  201.236.0.0-201.236.191.255
                IPv6:
                  2800:590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  15311

    Signature Algorithm: sha256WithRSAEncryption
         09:fd:3d:a2:52:6e:4f:3a:14:92:70:a7:97:c6:16:e5:27:d0:
         89:c0:e1:7c:7b:db:be:19:04:87:61:d4:71:a1:1b:78:21:4c:
         61:02:fe:46:da:86:98:cc:b6:2d:8d:5c:2a:99:fc:1c:ec:5f:
         f5:b7:5f:ca:3c:c6:05:76:55:ab:4e:61:99:62:29:bc:06:dc:
         90:cc:40:0b:d9:74:98:f4:f9:b8:44:a1:25:d4:0c:37:4e:fc:
         e9:b5:fa:c4:a3:b5:6b:04:93:b0:ab:68:8b:26:dd:16:3a:b3:
         93:f4:69:2b:f2:19:5d:b0:03:cb:eb:df:09:3e:d3:d0:ab:6d:
         8c:85:5f:29:e7:bd:f6:f4:33:4c:1a:e3:a5:d0:82:e4:87:b5:
         f0:e0:0a:72:25:3f:1a:e3:1d:90:37:0a:18:14:4f:d8:c9:ed:
         8c:58:ba:6f:37:83:e9:11:75:b1:f8:ab:66:2e:69:fe:29:14:
         5a:6b:da:71:36:40:82:67:61:36:59:09:61:08:73:06:8d:1c:
         81:43:e4:4f:6f:18:07:81:80:92:92:37:e6:3c:99:45:1f:72:
         b8:4a:5f:54:3e:52:f3:05:ee:dc:38:0b:65:7c:e8:37:50:bc:
         ba:a7:56:59:8e:f9:a8:3b:17:22:08:9d:c8:7f:19:f2:e2:2a:
         b3:ab:24:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-ams.rpki-client.org