Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8db1e5a68421fcfee030fb6cc2cdbd422689feff.cer
File:                     8db1e5a68421fcfee030fb6cc2cdbd422689feff.cer (raw, json)
Hash identifier:          b32idL5H0XXlfqGZVSXBvWi/2JJpCOCQCQUgFVQxQoY=
Subject key identifier:   DF:B0:B0:59:4E:B0:84:78:84:D0:02:A4:A1:68:BC:05:A5:48:B5:8B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F426A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02fd9b55-55a8-409e-b2a5-50dc6fde6afa/8db1e5a68421fcfee030fb6cc2cdbd422689feff.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02fd9b55-55a8-409e-b2a5-50dc6fde6afa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:29 +0000
Certificate not after:    Fri 06 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 22699
                          IP: 200.4.68.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16000678 (0xf426a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:29 2017 GMT
            Not After : Sep  6 15:00:00 2024 GMT
        Subject: CN=8db1e5a68421fcfee030fb6cc2cdbd422689feff
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:f2:89:c6:b6:18:6d:34:7f:2f:3e:ae:39:5f:
                    f3:f0:8e:9a:e4:a0:c4:c2:44:1f:b6:d1:5d:ca:26:
                    e9:c9:76:f1:2e:7e:88:39:83:c4:ac:28:ed:35:69:
                    5a:e2:30:6b:ba:a9:c7:d0:b1:30:92:96:98:0b:aa:
                    39:e6:47:3f:14:82:04:8b:7f:9a:85:3a:11:bb:f5:
                    40:fa:b8:45:23:38:1f:d7:c0:e5:32:45:fb:14:d7:
                    4d:49:f7:17:8d:73:a0:ff:6b:3a:00:a3:da:b1:3d:
                    dd:ad:a4:7a:6d:0c:69:0a:73:89:f1:6c:55:76:32:
                    db:db:76:6e:54:14:5c:f6:01:24:1c:ae:8d:5d:c2:
                    4d:de:e5:06:76:51:31:54:3c:27:3a:f3:15:5b:63:
                    2c:5e:c9:89:d5:c3:df:37:26:de:7d:b6:9c:00:c1:
                    00:dc:3b:dd:6d:71:83:64:6b:2f:75:e9:73:eb:b8:
                    0f:dd:a5:b1:a9:da:54:a2:df:31:b4:e4:de:63:ca:
                    e2:c2:30:e0:a8:9e:d0:ce:77:83:43:98:3e:5d:d0:
                    ed:2b:97:f9:a2:fe:b1:f5:77:c6:ee:c5:c5:02:d3:
                    fe:e1:c3:4b:9a:75:97:92:94:0f:99:51:a1:1e:d6:
                    75:ec:1c:26:46:25:98:92:11:85:7e:af:ce:33:50:
                    4c:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DF:B0:B0:59:4E:B0:84:78:84:D0:02:A4:A1:68:BC:05:A5:48:B5:8B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02fd9b55-55a8-409e-b2a5-50dc6fde6afa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02fd9b55-55a8-409e-b2a5-50dc6fde6afa/8db1e5a68421fcfee030fb6cc2cdbd422689feff.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.4.68.0/23

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22699

    Signature Algorithm: sha256WithRSAEncryption
         18:60:b7:de:db:e3:dc:2a:13:3d:b2:93:05:4b:2c:62:d7:0a:
         78:b0:ae:28:a1:df:76:24:43:67:ee:b9:ba:4f:65:45:af:15:
         10:1d:36:22:cf:13:a3:36:66:61:23:db:ac:f4:8d:84:45:58:
         43:27:67:da:ba:79:f0:83:ad:37:b1:b1:ed:af:1f:e3:35:c2:
         94:94:fa:1c:33:32:d3:45:86:98:fe:9a:08:b7:bc:44:39:68:
         87:d2:35:bd:47:28:8d:94:55:3f:cf:40:a4:b1:f4:11:cc:f4:
         29:a2:e0:02:ec:de:db:64:a1:0d:dc:ec:cb:11:08:30:45:0d:
         2e:d3:79:41:5a:a4:ef:8e:23:08:07:39:7b:72:85:5f:31:05:
         e6:1c:c6:13:0d:8f:ce:cf:66:f9:df:28:ce:c6:5f:b8:ed:e0:
         5e:06:43:27:6a:6b:c3:6b:3f:67:c3:57:64:45:26:de:7c:93:
         32:c2:ec:ba:5e:20:22:07:66:ca:6b:b1:3b:67:8e:65:9d:9d:
         8c:fa:60:54:19:75:4b:82:3c:f7:f1:ce:c4:2a:f4:ec:8b:56:
         9a:91:18:7a:b1:7e:5e:90:09:b7:62:4e:a2:fa:e7:44:42:8e:
         59:a0:c2:c9:eb:bf:c0:43:7d:ec:7a:74:2b:b2:34:b7:87:20:
         eb:7f:4a:ac
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAPQmpjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzYyOVoXDTI0MDkwNjE1MDAw
MFowMzExMC8GA1UEAxMoOGRiMWU1YTY4NDIxZmNmZWUwMzBmYjZjYzJjZGJkNDIy
Njg5ZmVmZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIHyica2GG00
fy8+rjlf8/COmuSgxMJEH7bRXcom6cl28S5+iDmDxKwo7TVpWuIwa7qpx9CxMJKW
mAuqOeZHPxSCBIt/moU6Ebv1QPq4RSM4H9fA5TJF+xTXTUn3F41zoP9rOgCj2rE9
3a2kem0MaQpzifFsVXYy29t2blQUXPYBJByujV3CTd7lBnZRMVQ8JzrzFVtjLF7J
idXD3zcm3n22nADBANw73W1xg2RrL3Xpc+u4D92lsanaVKLfMbTk3mPK4sIw4Kie
0M53g0OYPl3Q7SuX+aL+sfV3xu7FxQLT/uHDS5p1l5KUD5lRoR7WdewcJkYlmJIR
hX6vzjNQTDkCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBTfsLBZTrCEeITQAqShaLwF
pUi1izAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMmZkOWI1NS01NWE4
LTQwOWUtYjJhNS01MGRjNmZkZTZhZmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDJmZDliNTUtNTVhOC00
MDllLWIyYTUtNTBkYzZmZGU2YWZhLzhkYjFlNWE2ODQyMWZjZmVlMDMwZmI2Y2My
Y2RiZDQyMjY4OWZlZmYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgERDAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJYqzANBgkqhkiG9w0BAQsFAAOCAQEAGGC33tvj3CoTPbKTBUssYtcK
eLCuKKHfdiRDZ+65uk9lRa8VEB02Is8TozZmYSPbrPSNhEVYQydn2rp58IOtN7Gx
7a8f4zXClJT6HDMy00WGmP6aCLe8RDloh9I1vUcojZRVP89ApLH0Ecz0KaLgAuze
22ShDdzsyxEIMEUNLtN5QVqk744jCAc5e3KFXzEF5hzGEw2Pzs9m+d8ozsZfuO3g
XgZDJ2prw2s/Z8NXZEUm3nyTMsLsul4gIgdmymuxO2eOZZ2djPpgVBl1S4I89/HO
xCr07ItWmpEYerF+XpAJt2JOovrnREKOWaDCyeu/wEN97Hp0K7I0t4cg639KrA==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-ams.rpki-client.org