Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/954ca0092fe1270a75f055c704b40b0b1f6c6601.cer
File:                     954ca0092fe1270a75f055c704b40b0b1f6c6601.cer (raw, json)
Hash identifier:          /PDmhgrrY0UGNbWbag+UY8Nm0jbYFzmUYO+h00M20cY=
Subject key identifier:   11:AD:4B:DE:7D:DD:68:AC:34:0D:5A:3F:DC:F5:4F:F7:D7:8C:1B:05
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8CCFE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/954ca0092fe1270a75f055c704b40b0b1f6c6601.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:34 +0000
Certificate not after:    Wed 09 Oct 2024 15:00:00 +0000
Subordinate resources:    IP: 131.100.140.0/22
                          IP: 138.99.0.0/22
                          IP: 138.219.156.0/22
                          IP: 168.232.36.0/22
                          IP: 190.120.0.0/19
                          IP: 2803:9d80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16305406 (0xf8ccfe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:34 2017 GMT
            Not After : Oct  9 15:00:00 2024 GMT
        Subject: CN=954ca0092fe1270a75f055c704b40b0b1f6c6601
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:ac:9a:0a:62:14:f9:a3:77:18:30:37:20:66:
                    46:a9:59:b7:98:04:7d:24:1b:60:23:f9:de:ee:c1:
                    5c:db:2e:e4:c9:7d:63:35:c3:30:e9:3a:f6:96:5a:
                    63:9e:ac:f1:26:52:90:95:6c:88:85:0f:26:e6:4d:
                    fc:44:2c:32:75:c2:e9:6a:c1:06:d1:58:f0:f6:8f:
                    2a:d1:66:e0:59:c0:6a:fe:b6:54:9b:0f:e6:62:82:
                    ca:d2:84:24:4e:46:03:8d:63:c3:ef:f9:bc:7c:39:
                    0e:00:da:47:43:d6:cf:c8:d1:ac:9d:1b:2c:b4:38:
                    39:ba:b5:76:19:54:a4:ea:7e:e4:2c:a9:5d:f5:fd:
                    65:33:1d:cb:c2:b0:2d:24:54:46:40:1c:c4:c5:b4:
                    44:a3:0a:67:ea:72:e7:bb:eb:bb:cc:e9:24:5b:24:
                    8c:03:fd:b0:dd:8e:d2:7d:7d:04:37:52:bb:7e:06:
                    b6:bf:cf:0d:ac:13:33:41:e3:fc:00:3c:4d:6c:6a:
                    74:cf:a5:1a:53:9f:44:e6:08:39:b3:ad:a3:e4:32:
                    9a:7a:ec:11:c5:78:00:cf:06:c4:b4:14:66:f3:05:
                    d1:d7:10:c1:8f:59:d6:9c:17:10:4c:ee:4b:b6:85:
                    60:e7:54:a0:d7:3e:b2:b0:a5:da:10:64:6d:b2:0a:
                    13:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AD:4B:DE:7D:DD:68:AC:34:0D:5A:3F:DC:F5:4F:F7:D7:8C:1B:05
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b6d63527-7a9f-47ed-87f4-d69d34f5995a/954ca0092fe1270a75f055c704b40b0b1f6c6601.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.140.0/22
                  138.99.0.0/22
                  138.219.156.0/22
                  168.232.36.0/22
                  190.120.0.0/19
                IPv6:
                  2803:9d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:ce:94:a4:92:43:06:1c:69:69:33:c2:5e:54:59:1c:d1:81:
         7d:93:71:2c:6c:d2:fb:c3:8b:eb:10:48:6d:02:e9:7e:75:f0:
         13:c2:3f:2a:8c:61:b9:b5:af:c9:2f:3a:80:7e:a8:d1:36:af:
         fb:92:56:0c:57:21:22:5c:59:f8:64:de:dd:f1:a2:51:80:52:
         4e:80:39:35:67:c3:b9:88:51:ab:9f:ae:da:4d:4d:12:23:2d:
         dc:4f:7b:f1:8d:d5:b1:3c:1c:cd:dc:d9:9e:d0:5a:e0:c5:05:
         6e:b1:27:88:5a:49:2c:d7:e6:f4:12:47:6b:27:b9:a0:f0:e2:
         5e:6a:ac:e9:2f:30:9d:d6:df:63:be:d2:66:11:0e:ff:05:9a:
         74:35:12:c7:af:c5:48:95:30:ed:fe:7f:aa:63:d8:20:2a:47:
         66:4d:ec:4a:03:54:30:70:4a:3e:fa:71:c2:e5:0c:e2:40:80:
         e1:84:42:55:be:ec:48:3c:99:9d:0d:20:a8:30:19:4d:d3:f1:
         76:7d:ec:d6:82:80:b6:d4:fd:27:37:22:2d:c7:3c:f0:6d:22:
         ee:6f:60:74:50:a8:8d:9f:d3:71:f5:3b:77:a6:81:59:b3:63:
         ef:24:26:8d:1d:fd:78:e0:31:dc:c8:33:a1:a6:06:61:1d:43:
         52:d0:ab:d2
-----BEGIN CERTIFICATE-----
MIIF1jCCBL6gAwIBAgIEAPjM/jANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczNFoXDTI0MTAwOTE1MDAw
MFowMzExMC8GA1UEAxMoOTU0Y2EwMDkyZmUxMjcwYTc1ZjA1NWM3MDRiNDBiMGIx
ZjZjNjYwMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAICsmgpiFPmj
dxgwNyBmRqlZt5gEfSQbYCP53u7BXNsu5Ml9YzXDMOk69pZaY56s8SZSkJVsiIUP
JuZN/EQsMnXC6WrBBtFY8PaPKtFm4FnAav62VJsP5mKCytKEJE5GA41jw+/5vHw5
DgDaR0PWz8jRrJ0bLLQ4Obq1dhlUpOp+5CypXfX9ZTMdy8KwLSRURkAcxMW0RKMK
Z+py57vru8zpJFskjAP9sN2O0n19BDdSu34Gtr/PDawTM0Hj/AA8TWxqdM+lGlOf
ROYIObOto+QymnrsEcV4AM8GxLQUZvMF0dcQwY9Z1pwXEEzuS7aFYOdUoNc+srCl
2hBkbbIKEy8CAwEAAaOCAwUwggMBMB0GA1UdDgQWBBQRrUvefd1orDQNWj/c9U/3
14wbBTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iNmQ2MzUyNy03YTlm
LTQ3ZWQtODdmNC1kNjlkMzRmNTk5NWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjZkNjM1MjctN2E5Zi00
N2VkLTg3ZjQtZDY5ZDM0ZjU5OTVhLzk1NGNhMDA5MmZlMTI3MGE3NWYwNTVjNzA0
YjQwYjBiMWY2YzY2MDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBG
BggrBgEFBQcBBwEB/wQ3MDUwJAQCAAEwHgMEAoNkjAMEAopjAAMEAorbnAMEAqjo
JAMEBb54ADANBAIAAjAHAwUAKAOdgDANBgkqhkiG9w0BAQsFAAOCAQEAc86UpJJD
BhxpaTPCXlRZHNGBfZNxLGzS+8OL6xBIbQLpfnXwE8I/KoxhubWvyS86gH6o0Tav
+5JWDFchIlxZ+GTe3fGiUYBSToA5NWfDuYhRq5+u2k1NEiMt3E978Y3VsTwczdzZ
ntBa4MUFbrEniFpJLNfm9BJHaye5oPDiXmqs6S8wndbfY77SZhEO/wWadDUSx6/F
SJUw7f5/qmPYICpHZk3sSgNUMHBKPvpxwuUM4kCA4YRCVb7sSDyZnQ0gqDAZTdPx
dn3s1oKAttT9JzciLcc88G0i7m9gdFCojZ/TcfU7d6aBWbNj7yQmjR39eOAx3Mgz
oaYGYR1DUtCr0g==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org