Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer
File:                     9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.cer (raw, json)
Hash identifier:          hcf2NXdXhSHoP12oY8/xJHS+w2ixygK35MPwq7pw4p8=
Subject key identifier:   7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD6935
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Tue 05 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 28000 -- 28002
                          AS: 28119
                          AS: 52224
                          AS: 264845 -- 264846
                          IP: 45.6.248.0/21
                          IP: 168.121.184.0/22
                          IP: 170.247.168.0/22
                          IP: 179.0.156.0/22
                          IP: 190.112.52.0/22
                          IP: 200.0.86.0 -- 200.0.88.255
                          IP: 200.3.12.0/22
                          IP: 200.7.84.0/22
                          IP: 200.10.60.0/22
                          IP: 2001:13c7:7001:: -- 2001:13c7:7003:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:13c7:7010::/46
                          IP: 2001:13c7:7020::/44
                          IP: 2801::/48
                          IP: 2801:1b8::/43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16607541 (0xfd6935)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Aug  5 06:00:00 2025 GMT
        Subject: CN=9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:66:0e:5b:6d:65:3f:21:90:89:52:c4:34:60:
                    33:63:5c:8a:11:b3:69:42:bb:ec:3a:a0:2f:ea:3c:
                    ad:8c:70:86:be:5d:99:de:7f:e4:89:45:91:f3:97:
                    28:e0:72:2c:b2:99:a8:9a:db:c1:49:4f:d8:fe:05:
                    d8:68:7b:81:04:70:a2:96:e1:19:46:e5:f1:8f:23:
                    5a:7f:47:c3:57:2d:a1:60:53:6f:89:d6:27:89:4a:
                    e1:24:76:87:0a:1e:86:b7:5a:bc:90:38:03:97:5b:
                    f2:6c:85:80:7d:7b:ac:92:09:43:4f:41:1a:51:b7:
                    ce:ec:56:15:79:59:f1:93:20:90:09:9d:7e:e5:19:
                    f5:94:3f:29:75:81:f1:b6:ba:26:24:64:22:8e:65:
                    63:16:66:c8:93:bd:a7:95:9e:21:00:7d:86:e4:73:
                    59:8e:70:7b:67:89:c4:9f:e9:76:f4:fa:3c:a1:3a:
                    f4:b1:5e:cb:b6:34:4e:4d:f6:0e:7b:36:d7:e6:f7:
                    33:5d:ae:d3:2e:c2:b6:21:66:af:45:08:a6:1e:96:
                    4b:62:43:e4:92:93:b4:b5:bc:d0:39:42:a5:0f:7e:
                    2f:91:99:c0:8f:dc:a6:14:1a:b8:89:13:26:23:c3:
                    f7:54:99:ee:cb:c2:66:81:b0:ed:c0:7d:2d:43:3c:
                    c0:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:89:7F:CC:EC:11:0B:53:79:5D:8C:9B:91:55:6A:66:7A:E9:5C:D5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/622c0c28-cc7d-421d-b45b-9ac2b7ced209/9bd3b63252fafbcd6bae6e1f4cebb02fcc2af8d2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.248.0/21
                  168.121.184.0/22
                  170.247.168.0/22
                  179.0.156.0/22
                  190.112.52.0/22
                  200.0.86.0-200.0.88.255
                  200.3.12.0/22
                  200.7.84.0/22
                  200.10.60.0/22
                IPv6:
                  2001:13c7:7001::-2001:13c7:7003:ffff:ffff:ffff:ffff:ffff
                  2001:13c7:7010::/46
                  2001:13c7:7020::/44
                  2801::/48
                  2801:1b8::/43

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28000-28002
                  28119
                  52224
                  264845-264846

    Signature Algorithm: sha256WithRSAEncryption
         45:e3:a3:71:39:57:27:68:a2:70:04:50:4b:2a:9c:f3:68:98:
         0a:af:c6:f0:3e:3f:5b:f7:f1:5a:44:b1:d8:d3:29:20:83:5f:
         71:7b:ba:ef:83:7a:fe:ce:c5:4f:eb:54:d1:8a:eb:23:6f:e5:
         db:14:4f:c7:c9:c8:1f:5b:00:52:1b:10:73:5c:45:34:82:3a:
         79:24:4c:d5:6d:ac:df:19:fb:37:bb:00:84:83:c1:99:04:e9:
         33:51:52:3b:07:36:35:35:fa:f4:9b:49:3a:83:a2:96:f0:41:
         f5:bb:a8:fd:1e:81:59:89:0c:1c:a4:f4:84:ef:ed:74:f1:8b:
         a1:ab:e4:e1:1f:c3:2d:c3:ea:6b:a0:25:da:fc:4f:be:97:e7:
         76:ad:74:59:dc:cb:cb:21:52:93:a6:38:00:1c:0f:e3:9f:55:
         28:fb:aa:16:a0:be:e1:aa:1e:d2:73:2c:b4:40:ba:04:10:21:
         47:42:b9:ca:6e:89:63:85:6b:dd:69:89:25:b7:bc:e4:26:c9:
         3d:e8:e0:67:01:bc:69:b5:80:69:2d:41:c8:a5:a9:c4:30:4e:
         1d:17:b8:8c:eb:16:63:5b:7b:c6:e1:a8:7d:68:68:ca:50:4f:
         7c:28:12:56:52:0e:d0:aa:03:b4:fa:25:1c:50:6c:12:8f:1c:
         fd:4a:35:c1
-----BEGIN CERTIFICATE-----
MIIGYDCCBUigAwIBAgIEAP1pNTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczNVoXDTI1MDgwNTA2MDAw
MFowMzExMC8GA1UEAxMoOWJkM2I2MzI1MmZhZmJjZDZiYWU2ZTFmNGNlYmIwMmZj
YzJhZjhkMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKRmDlttZT8h
kIlSxDRgM2NcihGzaUK77DqgL+o8rYxwhr5dmd5/5IlFkfOXKOByLLKZqJrbwUlP
2P4F2Gh7gQRwopbhGUbl8Y8jWn9Hw1ctoWBTb4nWJ4lK4SR2hwoehrdavJA4A5db
8myFgH17rJIJQ09BGlG3zuxWFXlZ8ZMgkAmdfuUZ9ZQ/KXWB8ba6JiRkIo5lYxZm
yJO9p5WeIQB9huRzWY5we2eJxJ/pdvT6PKE69LFey7Y0Tk32Dns21+b3M12u0y7C
tiFmr0UIph6WS2JD5JKTtLW80DlCpQ9+L5GZwI/cphQauIkTJiPD91SZ7svCZoGw
7cB9LUM8wFECAwEAAaOCA48wggOLMB0GA1UdDgQWBBR/iX/M7BELU3ldjJuRVWpm
eulc1TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82MjJjMGMyOC1jYzdk
LTQyMWQtYjQ1Yi05YWMyYjdjZWQyMDkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjIyYzBjMjgtY2M3ZC00
MjFkLWI0NWItOWFjMmI3Y2VkMjA5LzliZDNiNjMyNTJmYWZiY2Q2YmFlNmUxZjRj
ZWJiMDJmY2MyYWY4ZDIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
mQYIKwYBBQUHAQcBAf8EgYkwgYYwRAQCAAEwPgMEAy0G+AMEAqh5uAMEAqr3qAME
ArMAnAMEAr5wNDAMAwQByABWAwQAyABYAwQCyAMMAwQCyAdUAwQCyAo8MD4EAgAC
MDgwEgMHACABE8dwAQMHAiABE8dwAAMHAiABE8dwEAMHBCABE8dwIAMHACgBAAAA
AAMHBSgBAbgAADA0BggrBgEFBQcBCAEB/wQlMCOgITAfMAgCAm1gAgJtYgICbdcC
AwDMADAKAgMECo0CAwQKjjANBgkqhkiG9w0BAQsFAAOCAQEAReOjcTlXJ2iicARQ
Syqc82iYCq/G8D4/W/fxWkSx2NMpIINfcXu674N6/s7FT+tU0YrrI2/l2xRPx8nI
H1sAUhsQc1xFNII6eSRM1W2s3xn7N7sAhIPBmQTpM1FSOwc2NTX69JtJOoOilvBB
9buo/R6BWYkMHKT0hO/tdPGLoavk4R/DLcPqa6Al2vxPvpfndq10WdzLyyFSk6Y4
ABwP459VKPuqFqC+4aoe0nMstEC6BBAhR0K5ym6JY4Vr3WmJJbe85CbJPejgZwG8
abWAaS1ByKWpxDBOHRe4jOsWY1t7xuGofWhoylBPfCgSVlIO0KoDtPolHFBsEo8c
/Uo1wQ==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:35 2024 by rpki-client on console-fra.rpki-client.org