Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8708239faca33772aefe6d705585c0a5b96127c9.cer
File:                     8708239faca33772aefe6d705585c0a5b96127c9.cer (raw, json)
Hash identifier:          vjyJpHA8XV5O3j5GJJTet3un3b8J4TQpE/Nsl5oL0d8=
Subject key identifier:   9E:84:4B:02:1F:5E:BE:86:EC:C8:AF:62:88:63:6A:68:B1:83:82:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEA089
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/351fa49e-6452-41ea-90e2-bd5018e7570b/8708239faca33772aefe6d705585c0a5b96127c9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/351fa49e-6452-41ea-90e2-bd5018e7570b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:04:21 +0000
Certificate not after:    Fri 27 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 10429
                          AS: 10531
                          AS: 11419
                          AS: 11706
                          AS: 16885
                          AS: 16911
                          AS: 18881
                          AS: 19182
                          AS: 22092
                          AS: 26599
                          AS: 27699
                          AS: 272264
                          IP: 152.234.64.0/18
                          IP: 152.240.0.0/12
                          IP: 168.227.192.0/22
                          IP: 177.9.0.0/16
                          IP: 177.16.0.0/14
                          IP: 177.24.0.0/14
                          IP: 177.40.0.0/14
                          IP: 177.45.0.0/16
                          IP: 177.60.0.0/14
                          IP: 177.68.0.0/16
                          IP: 177.76.0.0/14
                          IP: 177.94.0.0 -- 177.99.255.255
                          IP: 177.102.0.0/15
                          IP: 177.112.0.0/13
                          IP: 177.132.0.0/14
                          IP: 177.138.0.0/15
                          IP: 177.144.0.0/14
                          IP: 177.156.0.0 -- 177.163.255.255
                          IP: 177.168.0.0/13
                          IP: 177.188.0.0/15
                          IP: 177.196.0.0/14
                          IP: 177.204.0.0/14
                          IP: 177.212.0.0/14
                          IP: 179.69.0.0/18
                          IP: 179.80.0.0/12
                          IP: 179.97.128.0/18
                          IP: 179.98.0.0 -- 179.103.255.255
                          IP: 179.110.0.0 -- 179.119.255.255
                          IP: 179.128.0.0/13
                          IP: 179.144.0.0/13
                          IP: 179.160.0.0 -- 179.187.255.255
                          IP: 179.193.0.0/17
                          IP: 179.224.0.0/13
                          IP: 179.237.128.0/17
                          IP: 179.244.0.0/14
                          IP: 186.200.0.0/15
                          IP: 186.212.0.0/14
                          IP: 186.238.0.0/15
                          IP: 186.246.128.0/17
                          IP: 187.1.192.0/18
                          IP: 187.8.0.0/14
                          IP: 187.34.0.0/15
                          IP: 187.50.0.0/15
                          IP: 187.56.0.0/14
                          IP: 187.74.0.0/15
                          IP: 187.88.0.0 -- 187.93.255.255
                          IP: 187.100.0.0/15
                          IP: 187.112.0.0/13
                          IP: 187.121.0.0/17
                          IP: 189.0.0.0/16
                          IP: 189.8.64.0/20
                          IP: 189.18.0.0 -- 189.20.255.255
                          IP: 189.26.0.0/15
                          IP: 189.38.128.0/17
                          IP: 189.44.0.0/16
                          IP: 189.46.0.0/15
                          IP: 189.56.0.0/14
                          IP: 189.68.0.0/15
                          IP: 189.78.0.0/15
                          IP: 189.96.0.0/14
                          IP: 189.108.0.0/14
                          IP: 189.114.0.0/15
                          IP: 191.8.0.0 -- 191.35.255.255
                          IP: 191.192.0.0 -- 191.211.255.255
                          IP: 191.248.0.0/14
                          IP: 191.254.0.0/15
                          IP: 200.100.0.0/16
                          IP: 200.139.64.0/18
                          IP: 200.142.128.0/20
                          IP: 200.146.0.0/17
                          IP: 200.148.0.0/16
                          IP: 200.150.176.0/20
                          IP: 200.153.0.0 -- 200.154.255.255
                          IP: 200.158.0.0 -- 200.159.127.255
                          IP: 200.160.64.0/19
                          IP: 200.161.0.0/16
                          IP: 200.162.192.0/18
                          IP: 200.168.0.0/16
                          IP: 200.170.96.0/19
                          IP: 200.171.0.0/16
                          IP: 200.175.0.0 -- 200.177.255.255
                          IP: 200.185.224.0/19
                          IP: 200.192.176.0 -- 200.192.207.255
                          IP: 200.192.224.0/21
                          IP: 200.196.224.0/19
                          IP: 200.204.0.0/14
                          IP: 200.215.192.0/20
                          IP: 200.220.224.0/19
                          IP: 200.229.96.0/20
                          IP: 200.229.192.0/20
                          IP: 200.232.0.0/16
                          IP: 200.233.48.0/20
                          IP: 201.0.0.0/15
                          IP: 201.13.0.0/16
                          IP: 201.20.192.0/18
                          IP: 201.22.0.0/16
                          IP: 201.26.0.0 -- 201.28.255.255
                          IP: 201.42.0.0/15
                          IP: 201.47.0.0/16
                          IP: 201.60.0.0/15
                          IP: 201.63.0.0/16
                          IP: 201.68.0.0/15
                          IP: 201.86.0.0 -- 201.87.127.255
                          IP: 201.91.0.0 -- 201.93.255.255
                          IP: 201.95.0.0/16
                          IP: 201.159.148.0/22
                          IP: 2001:12c0::/32
                          IP: 2001:12e0::/32
                          IP: 2804:18::/32
                          IP: 2804:cc::/32
                          IP: 2804:1b0::/29
                          IP: 2804:3ac::/32
                          IP: 2804:430::/31
                          IP: 2804:7f0::/29
                          IP: 2804:e00::/32
                          IP: 2804:19f0::/32
                          IP: 2804:8480::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16687241 (0xfea089)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:04:21 2023 GMT
            Not After : Sep 27 15:00:00 2024 GMT
        Subject: CN=8708239faca33772aefe6d705585c0a5b96127c9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:82:c2:ab:e0:4d:92:2f:44:93:c3:f5:b5:a9:
                    9e:bb:e1:66:71:69:50:cc:ab:13:fb:11:ef:26:35:
                    d5:15:ad:9c:0d:fa:bb:da:72:25:45:76:0f:b5:f6:
                    f5:da:15:7e:4a:15:67:3e:2f:ea:8c:38:12:b0:cf:
                    02:ed:9c:5d:10:ab:2a:66:28:b2:8f:6e:49:15:b4:
                    fd:e7:07:a2:1b:64:9b:cb:b4:59:43:a5:0f:a6:0d:
                    e9:63:17:c8:f8:67:12:9c:f9:93:0d:10:51:17:65:
                    49:be:0d:6e:9c:67:39:c7:3f:76:4b:23:15:16:f1:
                    be:58:ee:d6:61:f9:5c:df:85:66:9c:40:ec:21:0f:
                    d0:71:a5:1c:81:90:7c:dd:fd:1e:8b:84:7b:c7:3a:
                    cd:7a:d8:8e:c8:1f:25:73:b0:ed:30:66:10:5b:4a:
                    21:5d:a7:fa:62:8f:7a:ad:78:3f:ae:0b:c2:82:1f:
                    f2:48:9b:0b:f8:f2:33:79:4d:87:5e:a1:be:be:ca:
                    d5:36:fb:6f:23:61:2e:52:e1:2d:3b:13:d9:4f:d7:
                    8d:80:21:35:14:7c:94:8b:e0:b9:b7:1b:aa:91:03:
                    d3:f2:0a:f6:61:ca:8d:02:a6:91:61:42:52:ae:25:
                    9f:78:45:52:32:eb:1d:cb:41:40:91:29:a1:3a:2f:
                    8f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:84:4B:02:1F:5E:BE:86:EC:C8:AF:62:88:63:6A:68:B1:83:82:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/351fa49e-6452-41ea-90e2-bd5018e7570b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/351fa49e-6452-41ea-90e2-bd5018e7570b/8708239faca33772aefe6d705585c0a5b96127c9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.234.64.0/18
                  152.240.0.0/12
                  168.227.192.0/22
                  177.9.0.0/16
                  177.16.0.0/14
                  177.24.0.0/14
                  177.40.0.0/14
                  177.45.0.0/16
                  177.60.0.0/14
                  177.68.0.0/16
                  177.76.0.0/14
                  177.94.0.0-177.99.255.255
                  177.102.0.0/15
                  177.112.0.0/13
                  177.132.0.0/14
                  177.138.0.0/15
                  177.144.0.0/14
                  177.156.0.0-177.163.255.255
                  177.168.0.0/13
                  177.188.0.0/15
                  177.196.0.0/14
                  177.204.0.0/14
                  177.212.0.0/14
                  179.69.0.0/18
                  179.80.0.0/12
                  179.97.128.0/18
                  179.98.0.0-179.103.255.255
                  179.110.0.0-179.119.255.255
                  179.128.0.0/13
                  179.144.0.0/13
                  179.160.0.0-179.187.255.255
                  179.193.0.0/17
                  179.224.0.0/13
                  179.237.128.0/17
                  179.244.0.0/14
                  186.200.0.0/15
                  186.212.0.0/14
                  186.238.0.0/15
                  186.246.128.0/17
                  187.1.192.0/18
                  187.8.0.0/14
                  187.34.0.0/15
                  187.50.0.0/15
                  187.56.0.0/14
                  187.74.0.0/15
                  187.88.0.0-187.93.255.255
                  187.100.0.0/15
                  187.112.0.0/13
                  187.121.0.0/17
                  189.0.0.0/16
                  189.8.64.0/20
                  189.18.0.0-189.20.255.255
                  189.26.0.0/15
                  189.38.128.0/17
                  189.44.0.0/16
                  189.46.0.0/15
                  189.56.0.0/14
                  189.68.0.0/15
                  189.78.0.0/15
                  189.96.0.0/14
                  189.108.0.0/14
                  189.114.0.0/15
                  191.8.0.0-191.35.255.255
                  191.192.0.0-191.211.255.255
                  191.248.0.0/14
                  191.254.0.0/15
                  200.100.0.0/16
                  200.139.64.0/18
                  200.142.128.0/20
                  200.146.0.0/17
                  200.148.0.0/16
                  200.150.176.0/20
                  200.153.0.0-200.154.255.255
                  200.158.0.0-200.159.127.255
                  200.160.64.0/19
                  200.161.0.0/16
                  200.162.192.0/18
                  200.168.0.0/16
                  200.170.96.0/19
                  200.171.0.0/16
                  200.175.0.0-200.177.255.255
                  200.185.224.0/19
                  200.192.176.0-200.192.207.255
                  200.192.224.0/21
                  200.196.224.0/19
                  200.204.0.0/14
                  200.215.192.0/20
                  200.220.224.0/19
                  200.229.96.0/20
                  200.229.192.0/20
                  200.232.0.0/16
                  200.233.48.0/20
                  201.0.0.0/15
                  201.13.0.0/16
                  201.20.192.0/18
                  201.22.0.0/16
                  201.26.0.0-201.28.255.255
                  201.42.0.0/15
                  201.47.0.0/16
                  201.60.0.0/15
                  201.63.0.0/16
                  201.68.0.0/15
                  201.86.0.0-201.87.127.255
                  201.91.0.0-201.93.255.255
                  201.95.0.0/16
                  201.159.148.0/22
                IPv6:
                  2001:12c0::/32
                  2001:12e0::/32
                  2804:18::/32
                  2804:cc::/32
                  2804:1b0::/29
                  2804:3ac::/32
                  2804:430::/31
                  2804:7f0::/29
                  2804:e00::/32
                  2804:19f0::/32
                  2804:8480::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10429
                  10531
                  11419
                  11706
                  16885
                  16911
                  18881
                  19182
                  22092
                  26599
                  27699
                  272264

    Signature Algorithm: sha256WithRSAEncryption
         2f:21:c9:a9:ca:60:73:02:93:0e:fa:59:95:21:fd:83:27:32:
         6e:f4:2f:0c:43:42:3e:63:5e:4e:0f:63:73:27:19:20:46:60:
         78:50:bd:f2:c4:b8:0c:29:81:19:14:96:cd:8c:41:b9:51:80:
         b4:94:f6:17:56:e1:94:04:c5:6e:1f:dc:92:1d:82:2d:38:e9:
         f7:0d:6c:fb:2b:7e:2d:5b:af:8b:0e:77:c9:9a:1e:5d:fd:d0:
         0d:b5:1c:39:0a:ea:72:1e:8f:70:71:69:66:3a:fc:e4:ae:dd:
         bc:69:ad:c9:92:7d:4b:e5:41:63:31:39:99:8a:fd:40:77:0e:
         e1:7d:be:c5:f8:81:37:6e:d8:0f:cc:f0:ff:12:84:54:91:8b:
         05:27:9b:8e:ee:2a:5e:84:e4:2a:77:81:81:da:fb:9a:f2:7e:
         49:2d:c9:d4:d7:34:7b:ab:3f:a4:32:e6:34:b6:30:95:4f:56:
         84:d2:b8:b5:fd:2f:d4:b4:1c:70:2c:65:d4:22:ec:59:85:0a:
         0f:1c:4d:49:e5:27:7d:73:1f:20:2e:fb:9f:51:8c:1c:2e:5c:
         f3:5e:18:8a:06:78:62:fa:ba:7a:4b:4b:c0:4b:06:d1:19:cd:
         17:45:10:b7:ed:45:a5:48:89:8c:51:00:81:ed:f7:e2:74:22:
         c4:4e:76:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-ams.rpki-client.org