Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer
File:                     89a0699fe9f460e1f4fcd4dbeee82910785b065b.cer (raw, json)
Hash identifier:          81uK3rImR2ThFSw6KTE+DECoeYnPQVrx0vAir06DJJk=
Subject key identifier:   B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8611C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:42 +0000
Certificate not after:    Tue 04 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 27839
                          AS: 52340
                          IP: 132.251.224.0/19
                          IP: 181.114.64.0/19
                          IP: 181.177.128.0/18
                          IP: 190.11.64.0/19
                          IP: 190.106.240.0/20
                          IP: 190.107.32.0/19
                          IP: 200.58.64.0/19
                          IP: 201.150.160.0/19
                          IP: 2803:9400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15229212 (0xe8611c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:42 2017 GMT
            Not After : Jun  4 15:00:00 2024 GMT
        Subject: CN=89a0699fe9f460e1f4fcd4dbeee82910785b065b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:f1:ba:23:ec:f4:aa:f9:25:1c:b4:77:37:58:
                    d4:9c:d5:f3:44:51:92:ec:1c:be:28:d5:43:d7:eb:
                    21:07:56:01:0f:f7:09:b8:fa:c7:9f:de:0e:40:b8:
                    ca:b2:f8:ca:7a:a3:c9:92:9d:fe:dc:e3:7f:6d:8d:
                    8b:96:6d:38:04:de:2f:c6:30:e2:4d:de:ff:bf:ef:
                    c6:c2:bb:ed:f8:6e:78:27:eb:b4:f3:2f:9d:41:d0:
                    e8:54:59:0b:e0:fc:73:dc:f5:81:99:96:b2:cc:de:
                    d5:16:07:d0:4e:e9:7a:3c:2d:72:e6:ee:21:75:82:
                    2b:7f:5c:dc:d4:77:13:00:09:db:18:02:e6:df:59:
                    08:da:83:0a:60:51:6d:73:a9:34:99:89:8a:5e:c9:
                    fa:55:d0:5d:a3:33:6b:cb:c1:6c:c2:fd:0c:61:93:
                    c0:3a:19:09:b7:56:eb:a3:e0:5e:74:57:6a:f4:a4:
                    be:05:61:56:47:b0:ed:6c:10:c6:d9:7f:93:2b:ee:
                    bd:da:39:48:18:4b:f9:f3:e0:db:50:c0:b2:21:e4:
                    05:30:f5:e2:1a:b1:18:28:cc:1a:08:b8:9a:dd:28:
                    00:2c:70:62:9e:66:69:ba:61:3a:8e:26:95:f8:33:
                    90:87:03:f6:b3:fa:36:f9:89:36:ab:7f:50:25:ee:
                    b7:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:0F:AA:6D:6D:DE:6E:AB:B4:53:BF:22:11:01:FF:90:BB:49:9B:F1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e4c6deec-2657-4cb4-a5ca-7791ab3468ea/89a0699fe9f460e1f4fcd4dbeee82910785b065b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.251.224.0/19
                  181.114.64.0/19
                  181.177.128.0/18
                  190.11.64.0/19
                  190.106.240.0/20
                  190.107.32.0/19
                  200.58.64.0/19
                  201.150.160.0/19
                IPv6:
                  2803:9400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27839
                  52340

    Signature Algorithm: sha256WithRSAEncryption
         01:2c:fe:8c:c1:a5:64:a3:02:db:7a:ca:8d:ce:1e:e5:e4:02:
         b8:de:4f:be:92:5b:67:2b:ad:cf:0b:de:7b:a1:e0:76:b2:71:
         fa:b3:8e:24:86:52:2e:75:b8:90:8e:78:33:a7:d5:4c:a0:76:
         d9:74:14:94:89:0b:57:f1:a8:03:86:80:55:b7:b3:24:84:c1:
         07:74:d5:e4:5c:a1:02:b8:f0:ce:91:ad:95:c6:8d:61:c2:75:
         c8:1f:70:85:d6:1a:99:3d:89:7f:21:41:85:09:33:bc:7c:f8:
         03:2c:48:07:f3:e0:bd:35:61:29:2d:0a:61:85:50:3c:af:e6:
         ec:44:42:dd:70:8c:b9:c1:c2:9d:59:bf:15:05:ff:e1:df:ae:
         d1:2f:a7:9c:34:19:b5:46:56:cf:10:13:10:e3:54:6d:b3:f8:
         55:a3:92:3c:bb:9b:28:d1:c4:b0:09:24:e4:f3:67:52:ff:e0:
         c0:d0:f8:f0:dd:ff:1a:47:26:b3:7f:6d:d0:32:bb:1d:c0:9c:
         33:17:5f:81:11:19:2a:ed:d2:ef:ef:69:9a:1d:d7:b9:5f:86:
         9f:14:a3:80:2a:1b:cc:76:eb:a2:2c:78:13:42:63:04:93:f5:
         44:e5:ca:70:c0:d8:90:94:e6:e6:20:10:e6:2a:4a:02:8e:ce:
         e0:e6:3a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-ams.rpki-client.org