Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9783ac9bad2b7b922f648c90e881bf44978069ad.cer
File:                     9783ac9bad2b7b922f648c90e881bf44978069ad.cer (raw, json)
Hash identifier:          V5FCqhkY9rwtTsiVH7gbFTzB2Y/6u4HEbMj6tnizc/w=
Subject key identifier:   CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F0C144
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Feb 2020 15:44:25 +0000
Certificate not after:    Mon 05 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 13440
                          AS: 18734
                          AS: 265541
                          IP: 138.122.144.0/22
                          IP: 168.197.120.0/22
                          IP: 189.202.128.0/17
                          IP: 189.204.128.0/17
                          IP: 200.33.74.0/24
                          IP: 200.33.84.0/24
                          IP: 200.57.0.0/19
                          IP: 201.140.80.0 -- 201.140.127.255
                          IP: 201.148.0.0 -- 201.148.95.255
                          IP: 2001:1278::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15778116 (0xf0c144)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 24 15:44:25 2020 GMT
            Not After : Aug  5 15:00:00 2024 GMT
        Subject: CN=9783ac9bad2b7b922f648c90e881bf44978069ad
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:69:61:b7:e7:d9:7a:72:62:3e:b7:c2:d3:ad:
                    90:bb:11:9b:32:25:80:7e:26:72:53:a0:41:da:fd:
                    0e:d2:e1:27:ae:79:89:c7:88:d6:c7:42:14:17:77:
                    d8:7b:10:82:ba:43:54:8d:ff:8e:bc:17:ec:2b:b2:
                    57:4b:1e:52:5a:ef:06:11:5c:1a:7d:8a:47:cc:a2:
                    b4:6a:b1:07:36:a4:37:c5:a0:23:bc:3c:2a:d1:8f:
                    e6:bc:48:76:92:73:c6:8c:23:d8:9a:65:1a:11:02:
                    ef:ae:79:2e:8d:49:ca:00:c3:2a:aa:9e:92:64:ec:
                    31:3b:ea:b1:b4:4d:4d:89:00:fd:c7:10:54:10:80:
                    33:ef:86:79:7e:69:30:c1:c2:81:1f:e1:ba:2a:2e:
                    eb:91:71:ce:89:c1:9b:71:a7:ab:4d:33:45:bd:f1:
                    8c:82:16:9e:57:13:62:1b:10:7c:82:9e:5a:08:75:
                    42:af:6d:e2:0b:53:4c:23:c4:d0:35:2a:94:ef:6f:
                    da:ce:6a:36:78:0a:0a:63:51:1c:94:63:6c:32:4f:
                    d6:fd:d5:79:c4:96:26:c4:e1:24:db:30:3c:05:e6:
                    17:b3:24:7d:5d:7f:39:d0:b4:6f:c3:ce:ee:69:ac:
                    96:35:aa:82:5a:53:87:dd:5b:bb:1c:4b:3f:a6:3a:
                    1b:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:8B:E9:06:BA:96:B2:C5:84:9F:86:46:40:0D:2D:0C:60:0D:97:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0c4b4a0-6417-4a7c-8758-9e6f4b0e9679/9783ac9bad2b7b922f648c90e881bf44978069ad.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.122.144.0/22
                  168.197.120.0/22
                  189.202.128.0/17
                  189.204.128.0/17
                  200.33.74.0/24
                  200.33.84.0/24
                  200.57.0.0/19
                  201.140.80.0-201.140.127.255
                  201.148.0.0-201.148.95.255
                IPv6:
                  2001:1278::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13440
                  18734
                  265541

    Signature Algorithm: sha256WithRSAEncryption
         35:15:95:0d:9f:3b:06:cc:78:20:ca:4c:d2:3f:fa:ea:a2:7e:
         3d:0f:7e:22:01:3b:f7:05:f8:5e:e1:7a:6b:44:b4:de:b3:07:
         be:f0:b3:b0:f5:ee:41:04:fa:83:cc:bf:39:99:d6:16:1d:fc:
         73:4f:a4:f6:20:d5:b4:19:90:9a:18:55:83:a2:37:57:fb:d9:
         27:f4:e9:1d:b2:c3:3f:9d:21:81:d0:6d:99:d5:08:18:53:c8:
         54:73:a1:66:4c:45:09:f9:78:a2:d8:c4:96:bc:02:7f:66:6d:
         8b:7a:3d:3b:60:0a:cd:fd:ea:e8:e0:30:09:2e:79:d9:77:5e:
         d8:b0:92:0c:7b:f7:4d:26:f8:00:c2:14:55:cb:1a:3d:88:8d:
         af:5a:04:a1:64:0f:8c:25:56:53:6f:26:10:b2:ad:ee:6e:50:
         8d:61:f9:e4:c0:5f:d1:6a:d3:d3:ff:c5:d0:28:07:10:72:be:
         e1:3d:4f:c3:63:08:40:6e:45:3f:3c:e5:33:74:9e:72:5b:80:
         a3:2a:57:fd:16:1b:6f:44:3d:99:0f:88:cf:8d:93:7b:0d:28:
         b6:ff:f0:d7:35:85:38:12:d9:90:7c:bb:d9:a0:c5:54:05:e0:
         a1:06:7d:ab:54:31:a0:1d:b9:4d:df:ec:a5:f2:3a:e6:08:0b:
         26:14:3d:3b
-----BEGIN CERTIFICATE-----
MIIGITCCBQmgAwIBAgIEAPDBRDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMDIyNDE1NDQyNVoXDTI0MDgwNTE1MDAw
MFowMzExMC8GA1UEAxMoOTc4M2FjOWJhZDJiN2I5MjJmNjQ4YzkwZTg4MWJmNDQ5
NzgwNjlhZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJxpYbfn2Xpy
Yj63wtOtkLsRmzIlgH4mclOgQdr9DtLhJ655iceI1sdCFBd32HsQgrpDVI3/jrwX
7CuyV0seUlrvBhFcGn2KR8yitGqxBzakN8WgI7w8KtGP5rxIdpJzxowj2JplGhEC
7655Lo1JygDDKqqekmTsMTvqsbRNTYkA/ccQVBCAM++GeX5pMMHCgR/huiou65Fx
zonBm3Gnq00zRb3xjIIWnlcTYhsQfIKeWgh1Qq9t4gtTTCPE0DUqlO9v2s5qNngK
CmNRHJRjbDJP1v3VecSWJsThJNswPAXmF7MkfV1/OdC0b8PO7mmsljWqglpTh91b
uxxLP6Y6GwMCAwEAAaOCA1AwggNMMB0GA1UdDgQWBBTKi+kGupayxYSfhkZADS0M
YA2XYDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hMGM0YjRhMC02NDE3
LTRhN2MtODc1OC05ZTZmNGIwZTk2NzkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTBjNGI0YTAtNjQxNy00
YTdjLTg3NTgtOWU2ZjRiMGU5Njc5Lzk3ODNhYzliYWQyYjdiOTIyZjY0OGM5MGU4
ODFiZjQ0OTc4MDY5YWQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBt
BggrBgEFBQcBBwEB/wReMFwwSwQCAAEwRQMEAop6kAMEAqjFeAMEB73KgAMEB73M
gAMEAMghSgMEAMghVAMEBcg5ADAMAwQEyYxQAwQHyYwAMAsDAwLJlAMEBcmUQDAN
BAIAAjAHAwUAIAESeDAiBggrBgEFBQcBCAEB/wQTMBGgDzANAgI0gAICSS4CAwQN
RTANBgkqhkiG9w0BAQsFAAOCAQEANRWVDZ87Bsx4IMpM0j/66qJ+PQ9+IgE79wX4
XuF6a0S03rMHvvCzsPXuQQT6g8y/OZnWFh38c0+k9iDVtBmQmhhVg6I3V/vZJ/Tp
HbLDP50hgdBtmdUIGFPIVHOhZkxFCfl4otjElrwCf2Zti3o9O2AKzf3q6OAwCS55
2Xde2LCSDHv3TSb4AMIUVcsaPYiNr1oEoWQPjCVWU28mELKt7m5QjWH55MBf0WrT
0//F0CgHEHK+4T1Pw2MIQG5FPzzlM3SecluAoypX/RYbb0Q9mQ+Iz42Tew0otv/w
1zWFOBLZkHy72aDFVAXgoQZ9q1QxoB25Td/spfI65ggLJhQ9Ow==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org