Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/93c4a5da4e3f72c086016b7f4eb79b5783a76fa8.cer
File:                     93c4a5da4e3f72c086016b7f4eb79b5783a76fa8.cer (raw, json)
Hash identifier:          qp21yg4kkRB87E7o9VIv5M2Uix6N5lAAlo1Cxo1fUvQ=
Subject key identifier:   E3:83:E1:41:61:8F:F8:EB:E9:81:E4:8E:A6:5F:70:CB:0D:8D:7B:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE8781
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4967f59-b0d1-49e8-ad42-bcf29c55058d/93c4a5da4e3f72c086016b7f4eb79b5783a76fa8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4967f59-b0d1-49e8-ad42-bcf29c55058d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 13:14:14 +0000
Certificate not after:    Sat 12 Apr 2025 00:29:56 +0000
Subordinate resources:    AS: 14178
                          IP: 131.161.56.0/22
                          IP: 132.255.124.0/22
                          IP: 138.118.8.0/22
                          IP: 138.122.224.0/22
                          IP: 168.90.232.0/22
                          IP: 170.231.228.0/22
                          IP: 170.245.88.0/22
                          IP: 181.41.136.0/22
                          IP: 190.99.84.0/22
                          IP: 200.34.61.0/24
                          IP: 200.52.64.0/19
                          IP: 200.66.64.0/19
                          IP: 201.149.0.0 -- 201.149.95.255
                          IP: 2806:240::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15632257 (0xee8781)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 13:14:14 2023 GMT
            Not After : Apr 12 00:29:56 2025 GMT
        Subject: CN=93c4a5da4e3f72c086016b7f4eb79b5783a76fa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:93:a8:39:41:91:47:da:ae:b6:ac:8f:66:d4:
                    b7:76:9d:67:79:7a:7f:15:f3:b4:0f:1e:7a:41:54:
                    3a:6a:21:ba:9d:f3:5b:93:82:ea:d2:7b:d7:7f:61:
                    b3:c0:c3:13:12:bb:34:5a:00:4e:61:59:6f:c8:e9:
                    6f:a4:6e:29:43:6a:7d:8d:8a:88:fe:42:c7:88:e8:
                    1a:d0:d6:32:e2:c7:f3:f4:b1:ab:2c:8e:6c:4c:25:
                    ce:98:5a:2b:c7:91:b5:fe:38:93:e5:29:00:61:4c:
                    c0:54:52:07:10:62:d4:79:0d:34:7e:16:93:e3:5d:
                    ec:06:e3:98:96:01:5a:26:54:3d:aa:70:1b:b5:af:
                    b9:35:96:56:f8:09:e7:d7:dd:b9:ad:18:15:00:be:
                    21:ba:14:ac:12:7b:1b:7a:ca:8a:fb:ae:56:5d:28:
                    26:a2:d8:8c:b3:df:c6:43:8a:42:df:37:de:60:c3:
                    78:7f:b5:40:d1:56:12:6e:1d:c0:1f:43:6c:48:48:
                    65:fc:55:d8:3c:d7:11:25:eb:50:37:cb:e6:b0:9d:
                    1c:d9:7f:fd:9e:37:4b:47:b7:c8:39:36:50:af:b0:
                    28:88:89:30:70:35:c7:74:28:66:78:8c:b4:8f:10:
                    57:19:82:8b:03:09:66:69:53:a4:fb:fa:b6:f1:e1:
                    9d:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:83:E1:41:61:8F:F8:EB:E9:81:E4:8E:A6:5F:70:CB:0D:8D:7B:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4967f59-b0d1-49e8-ad42-bcf29c55058d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4967f59-b0d1-49e8-ad42-bcf29c55058d/93c4a5da4e3f72c086016b7f4eb79b5783a76fa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.56.0/22
                  132.255.124.0/22
                  138.118.8.0/22
                  138.122.224.0/22
                  168.90.232.0/22
                  170.231.228.0/22
                  170.245.88.0/22
                  181.41.136.0/22
                  190.99.84.0/22
                  200.34.61.0/24
                  200.52.64.0/19
                  200.66.64.0/19
                  201.149.0.0-201.149.95.255
                IPv6:
                  2806:240::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14178

    Signature Algorithm: sha256WithRSAEncryption
         3f:2f:21:d0:f5:aa:c7:c8:34:eb:b9:88:cb:65:4c:ce:c5:26:
         30:dc:71:51:16:5c:d6:40:83:74:82:59:29:74:1b:7f:47:ea:
         c0:61:ec:1d:e9:3c:13:54:3a:34:ea:ea:5e:e5:2a:8e:51:8c:
         e0:fe:a8:32:2e:9c:e1:fa:1f:b1:0f:ac:91:16:5a:a3:7f:48:
         34:ce:d1:d7:05:ce:52:8e:c3:35:b9:75:7f:43:a1:b9:e7:fc:
         46:7b:7b:cc:91:80:f0:f3:c1:1b:31:8a:50:d9:13:e0:8c:ab:
         71:2b:bc:87:7f:14:f2:05:b0:79:b5:56:35:72:ce:43:79:06:
         3a:62:61:0e:a5:03:aa:4f:7d:ac:99:40:e5:6c:6f:95:83:ea:
         2d:ab:6e:bc:a3:ad:b0:55:2f:bb:df:95:88:ed:1a:6d:0b:0f:
         e8:cc:cf:e4:c1:08:94:6d:bc:74:f5:ec:89:91:4c:54:3e:7e:
         b3:80:0e:7b:be:82:ba:6b:5e:af:cd:33:1a:de:64:4c:3d:9b:
         52:3c:f9:ef:2b:2b:f5:68:ee:31:aa:f6:35:0e:a2:8d:39:8d:
         98:b2:d6:39:35:b4:8a:89:21:00:b4:fc:c1:f4:f1:76:da:36:
         64:4a:78:23:06:2f:05:56:02:df:cc:73:64:bc:24:4a:1e:6d:
         fc:00:43:93
-----BEGIN CERTIFICATE-----
MIIGKDCCBRCgAwIBAgIEAO6HgTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUwMjEzMTQxNFoXDTI1MDQxMjAwMjk1
NlowMzExMC8GA1UEAxMoOTNjNGE1ZGE0ZTNmNzJjMDg2MDE2YjdmNGViNzliNTc4
M2E3NmZhODCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALeTqDlBkUfa
rrasj2bUt3adZ3l6fxXztA8eekFUOmohup3zW5OC6tJ7139hs8DDExK7NFoATmFZ
b8jpb6RuKUNqfY2KiP5Cx4joGtDWMuLH8/SxqyyObEwlzphaK8eRtf44k+UpAGFM
wFRSBxBi1HkNNH4Wk+Nd7AbjmJYBWiZUPapwG7WvuTWWVvgJ59fdua0YFQC+IboU
rBJ7G3rKivuuVl0oJqLYjLPfxkOKQt833mDDeH+1QNFWEm4dwB9DbEhIZfxV2DzX
ESXrUDfL5rCdHNl//Z43S0e3yDk2UK+wKIiJMHA1x3QoZniMtI8QVxmCiwMJZmlT
pPv6tvHhna0CAwEAAaOCA1cwggNTMB0GA1UdDgQWBBTjg+FBYY/46+mB5I6mX3DL
DY17AjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9mNDk2N2Y1OS1iMGQx
LTQ5ZTgtYWQ0Mi1iY2YyOWM1NTA1OGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZjQ5NjdmNTktYjBkMS00
OWU4LWFkNDItYmNmMjljNTUwNThkLzkzYzRhNWRhNGUzZjcyYzA4NjAxNmI3ZjRl
Yjc5YjU3ODNhNzZmYTgubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB9
BggrBgEFBQcBBwEB/wRuMGwwWwQCAAEwVQMEAoOhOAMEAoT/fAMEAop2CAMEAop6
4AMEAqha6AMEAqrn5AMEAqr1WAMEArUpiAMEAr5jVAMEAMgiPQMEBcg0QAMEBchC
QDALAwMAyZUDBAXJlUAwDQQCAAIwBwMFACgGAkAwGQYIKwYBBQUHAQgBAf8ECjAI
oAYwBAICN2IwDQYJKoZIhvcNAQELBQADggEBAD8vIdD1qsfINOu5iMtlTM7FJjDc
cVEWXNZAg3SCWSl0G39H6sBh7B3pPBNUOjTq6l7lKo5RjOD+qDIunOH6H7EPrJEW
WqN/SDTO0dcFzlKOwzW5dX9Dobnn/EZ7e8yRgPDzwRsxilDZE+CMq3ErvId/FPIF
sHm1VjVyzkN5BjpiYQ6lA6pPfayZQOVsb5WD6i2rbryjrbBVL7vflYjtGm0LD+jM
z+TBCJRtvHT17ImRTFQ+frOADnu+grprXq/NMxreZEw9m1I8+e8rK/Vo7jGq9jUO
oo05jZiy1jk1tIqJIQC0/MH08XbaNmRKeCMGLwVWAt/Mc2S8JEoebfwAQ5M=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org