Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer
File:                     913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.cer (raw, json)
Hash identifier:          DwXaDdN56A5MacaaEAsiClEGMn/DPJEdFQdUA3fXNlw=
Subject key identifier:   8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01012CBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 May 2022 14:11:32 +0000
Certificate not after:    Thu 27 Mar 2025 15:00:00 +0000
Subordinate resources:    AS: 17072
                          AS: 22884
                          AS: 28414
                          IP: 138.186.28.0/22
                          IP: 148.230.128.0/17
                          IP: 186.96.0.0/18
                          IP: 186.96.128.0/18
                          IP: 187.188.0.0 -- 187.191.63.255
                          IP: 187.251.96.0 -- 187.251.159.255
                          IP: 187.251.192.0/18
                          IP: 189.201.0.0/17
                          IP: 189.203.0.0/16
                          IP: 200.34.221.0 -- 200.34.222.255
                          IP: 200.76.64.0/20
                          IP: 201.149.128.0/17
                          IP: 2806:2f0::/32
                          IP: 2806:380::/27

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16854205 (0x1012cbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 27 14:11:32 2022 GMT
            Not After : Mar 27 15:00:00 2025 GMT
        Subject: CN=913d5cdb160726dc92e04ed46a658ec6bfcbbdd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:9a:b8:9d:7d:f1:f8:04:4f:2d:b5:03:54:fb:
                    1f:55:46:c5:47:72:92:3e:0d:6b:99:f1:5a:19:cd:
                    eb:bb:f0:65:80:13:27:44:99:ba:c0:b8:3d:e7:fc:
                    cb:aa:e0:3e:da:d3:21:d0:6e:7c:b4:8e:8e:cb:81:
                    f4:de:40:19:a1:b3:a3:93:2a:68:eb:8e:bd:91:b7:
                    f7:60:55:0e:99:56:4a:fe:de:6b:02:9d:0e:6b:65:
                    63:0c:bd:1f:dc:9b:88:88:5f:a9:04:f7:c6:55:80:
                    3f:08:05:8e:0a:56:4d:5a:e5:ad:af:da:38:8f:63:
                    34:25:9a:11:40:99:c4:fc:1c:41:b6:d2:bf:cb:40:
                    cb:37:f4:02:23:a3:d4:eb:db:e3:3e:e7:bb:0a:9d:
                    61:c4:80:23:51:65:15:bd:85:9a:62:6a:a6:2d:23:
                    8c:a3:64:ab:f3:fe:f8:e7:4f:3d:14:51:c2:80:4a:
                    02:e7:5b:e6:e6:7e:c4:d4:ea:87:84:98:5e:3f:32:
                    5c:2e:26:42:b1:6c:37:ae:38:b3:3d:33:0f:e6:6a:
                    c1:18:8f:8b:e7:9e:01:bb:7d:4d:b7:c5:c9:9d:a2:
                    c4:ee:08:00:e6:27:b0:e7:9b:9e:50:0d:39:af:52:
                    6b:83:8f:44:92:d5:32:78:ec:96:6b:47:c7:0f:f4:
                    81:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:71:4F:02:F7:D5:BA:46:48:22:E9:D9:D4:7B:BB:60:D5:93:A1:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cd5ad6c0-499b-4380-984f-874c9f51d2ff/913d5cdb160726dc92e04ed46a658ec6bfcbbdd1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.186.28.0/22
                  148.230.128.0/17
                  186.96.0.0/18
                  186.96.128.0/18
                  187.188.0.0-187.191.63.255
                  187.251.96.0-187.251.159.255
                  187.251.192.0/18
                  189.201.0.0/17
                  189.203.0.0/16
                  200.34.221.0-200.34.222.255
                  200.76.64.0/20
                  201.149.128.0/17
                IPv6:
                  2806:2f0::/32
                  2806:380::/27

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17072
                  22884
                  28414

    Signature Algorithm: sha256WithRSAEncryption
         58:8f:14:1a:56:e7:73:a6:6d:5f:62:5b:67:1c:a0:b7:db:73:
         fa:d2:76:b7:4f:f9:ec:d8:ca:ae:06:11:ec:7b:c3:aa:7b:54:
         0d:b9:0f:80:27:84:93:f0:6a:be:15:82:2c:38:d7:91:24:c9:
         55:d8:75:7d:2c:0b:a6:0e:80:5c:ad:4b:09:79:49:a1:c4:a4:
         30:54:a1:f2:1e:b3:40:d3:99:52:09:28:77:78:2b:fe:59:a4:
         48:b1:69:7d:cc:4f:aa:9a:d4:a0:64:eb:3a:57:d8:0a:54:c2:
         9f:30:49:d5:9b:88:5b:62:f6:f4:80:7c:53:9e:f1:11:d0:37:
         11:be:77:d2:f9:e0:6e:27:16:f6:6b:14:95:41:5d:fd:45:f2:
         67:c2:3d:f3:eb:34:d3:6a:49:8f:5c:5c:7f:9e:fd:5c:d6:47:
         b4:c9:0c:0a:c9:12:f2:9f:13:7a:37:3c:11:8c:fe:61:24:58:
         83:7f:34:cb:b4:70:14:79:8d:03:00:6d:d6:03:13:c0:09:44:
         8e:db:68:f4:b5:dc:f6:da:4a:3e:ad:49:22:a1:cc:6d:25:71:
         97:7f:2c:b7:39:8f:f6:be:76:94:5b:5a:93:fa:2b:ca:df:f4:
         93:d8:ba:ef:10:5b:15:e5:d8:a8:58:8a:16:27:fe:7f:eb:a6:
         11:2a:1c:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org