Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer
File:                     90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.cer (raw, json)
Hash identifier:          NmNiJt6lIQVwOuEA7tVgVtTYUf1A18ZivqptiU9Xrrw=
Subject key identifier:   55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E0AB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 18:41:00 +0000
Certificate not after:    Fri 01 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 6503
                          AS: 14000
                          IP: 148.240.0.0/16
                          IP: 148.243.0.0/16
                          IP: 148.245.0.0/16
                          IP: 187.162.0.0 -- 187.167.255.255
                          IP: 187.176.0.0 -- 187.179.127.255
                          IP: 189.205.0.0/16
                          IP: 189.207.0.0 -- 189.213.255.255
                          IP: 200.23.72.0/23
                          IP: 200.23.147.0/24
                          IP: 200.33.192.0/21
                          IP: 200.33.208.0 -- 200.33.231.255
                          IP: 200.34.64.0/19
                          IP: 200.34.141.0/24
                          IP: 200.36.96.0/19
                          IP: 200.38.64.0/19
                          IP: 200.38.224.0/19
                          IP: 200.39.224.0/19
                          IP: 200.52.0.0/20
                          IP: 200.52.32.0/19
                          IP: 200.56.0.0 -- 200.56.95.255
                          IP: 200.57.96.0/19
                          IP: 200.57.192.0/18
                          IP: 200.76.192.0/19
                          IP: 200.78.128.0/17
                          IP: 200.94.192.0/19
                          IP: 200.188.0.0/17
                          IP: 200.194.0.0/18
                          IP: 200.236.64.0/18
                          IP: 201.140.0.0/18
                          IP: 201.156.0.0/16
                          IP: 201.158.128.0/17
                          IP: 207.249.128.0/18
                          IP: 2806::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17697457 (0x10e0ab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 18:41:00 2023 GMT
            Not After : Aug  1 06:00:00 2025 GMT
        Subject: CN=90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:10:ed:c1:77:ff:07:66:bc:bd:12:82:0e:14:
                    ed:64:8d:a6:a8:71:c0:95:31:c0:55:06:70:a4:1b:
                    1a:79:c7:52:46:61:09:ac:42:39:e0:ce:5b:4e:8c:
                    ff:eb:37:c4:9b:bd:05:30:0b:fb:8c:bc:34:29:ba:
                    62:d2:17:a6:9e:3a:b7:d3:39:f7:50:e7:d5:f2:74:
                    49:5b:79:ff:a4:1b:33:48:8b:c3:a9:93:9c:16:5b:
                    71:e0:23:6f:86:1f:1a:46:4c:23:a9:6b:90:25:1c:
                    c3:95:a5:6c:d5:47:78:8d:8d:38:e8:4e:01:90:bb:
                    25:50:e4:4b:8c:53:da:23:7b:1d:dc:ee:0d:22:14:
                    05:42:97:f7:c3:9a:17:11:62:15:31:58:08:7d:ee:
                    34:14:6a:77:14:35:1e:4b:41:20:ec:e8:24:fe:9e:
                    ac:c8:cd:50:ad:8c:dd:43:46:f7:30:9a:1b:f0:9d:
                    d2:1a:43:49:ef:18:39:2c:98:32:cd:7a:ed:d7:3a:
                    e6:74:81:08:89:df:b2:e5:03:28:a7:d5:bd:72:7d:
                    96:1d:04:ea:4c:b1:34:19:64:92:05:5e:33:e6:d3:
                    2e:85:3c:57:4e:77:ff:08:d0:de:24:9f:cf:2c:c5:
                    75:2a:7e:87:5d:d1:9f:3e:6d:c2:df:72:80:bd:d4:
                    9d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:D5:F2:96:F9:29:E8:F8:30:C6:A2:7F:8C:95:7F:16:4C:96:FE:37
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/90ebc6aac1a5e405bf1e30a174ed4a22147b5ea2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.240.0.0/16
                  148.243.0.0/16
                  148.245.0.0/16
                  187.162.0.0-187.167.255.255
                  187.176.0.0-187.179.127.255
                  189.205.0.0/16
                  189.207.0.0-189.213.255.255
                  200.23.72.0/23
                  200.23.147.0/24
                  200.33.192.0/21
                  200.33.208.0-200.33.231.255
                  200.34.64.0/19
                  200.34.141.0/24
                  200.36.96.0/19
                  200.38.64.0/19
                  200.38.224.0/19
                  200.39.224.0/19
                  200.52.0.0/20
                  200.52.32.0/19
                  200.56.0.0-200.56.95.255
                  200.57.96.0/19
                  200.57.192.0/18
                  200.76.192.0/19
                  200.78.128.0/17
                  200.94.192.0/19
                  200.188.0.0/17
                  200.194.0.0/18
                  200.236.64.0/18
                  201.140.0.0/18
                  201.156.0.0/16
                  201.158.128.0/17
                  207.249.128.0/18
                IPv6:
                  2806::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6503
                  14000

    Signature Algorithm: sha256WithRSAEncryption
         8b:42:c6:dc:1b:bd:e1:2a:35:b2:ff:00:91:5c:4a:3b:aa:43:
         fd:9a:0f:42:7c:8e:4c:e8:58:03:0b:cf:b9:b9:84:97:60:ec:
         5e:b2:bd:2b:14:82:82:c0:32:53:7a:7a:d5:64:4b:93:34:fa:
         5b:60:a6:5c:54:66:41:5c:84:bb:77:ff:80:b0:84:fb:58:38:
         a0:2e:36:4a:f0:ad:6c:59:22:d4:c0:b1:cf:19:26:87:cd:a2:
         3c:4f:95:e2:09:78:a7:0d:33:8a:87:ba:1a:3d:2f:c2:16:cf:
         73:14:a2:b3:82:e9:7e:10:c6:a4:b9:f0:c7:ba:50:3b:4d:3a:
         30:3c:85:28:34:20:de:5d:af:d4:9e:7c:94:74:8b:b1:eb:cb:
         01:68:8c:66:03:d5:22:2d:b1:9e:b7:2e:43:32:0f:8d:7d:7e:
         71:50:e4:7e:08:8a:87:8e:d9:89:e9:15:44:a8:e9:67:be:29:
         44:3b:fd:9d:14:d6:84:97:08:86:8d:41:35:40:fa:03:24:43:
         c3:35:28:c1:b2:fb:54:1f:7b:cc:f3:47:cc:15:0f:e0:ff:79:
         ca:b6:b9:2d:ae:7b:77:ad:73:60:70:cd:48:25:e8:09:64:90:
         d2:4a:ff:8d:6e:35:6d:6d:50:04:12:72:ac:87:01:ac:bb:63:
         58:99:8e:4d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:28 2024 by rpki-client on console-ams.rpki-client.org