Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e64b54f72f13360bff0d4276afc5b325bc8ed5d.cer
File:                     9e64b54f72f13360bff0d4276afc5b325bc8ed5d.cer (raw, json)
Hash identifier:          rp/hzW9jCggRTi5thrirQzPUdblXcMtt7O7Pi23escA=
Subject key identifier:   1F:83:D4:41:51:0D:C9:88:C3:75:F7:14:49:AE:05:85:9D:EF:E2:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEC5D4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bd2602c9-ad2e-4b03-8974-071fcc1836bf/9e64b54f72f13360bff0d4276afc5b325bc8ed5d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bd2602c9-ad2e-4b03-8974-071fcc1836bf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:28:16 +0000
Certificate not after:    Mon 30 Jun 2025 13:48:58 +0000
Subordinate resources:    AS: 262773
                          IP: 45.228.144.0/22
                          IP: 131.255.220.0/22
                          IP: 138.36.176.0/22
                          IP: 138.94.156.0/22
                          IP: 138.122.76.0/22
                          IP: 138.185.164.0/22
                          IP: 143.202.124.0/22
                          IP: 167.249.48.0/22
                          IP: 168.194.120.0/22
                          IP: 168.197.72.0/22
                          IP: 168.232.112.0/22
                          IP: 170.79.48.0/22
                          IP: 170.231.8.0/22
                          IP: 170.231.220.0/22
                          IP: 177.22.248.0/22
                          IP: 177.38.64.0/22
                          IP: 177.38.128.0/21
                          IP: 177.70.176.0/20
                          IP: 177.73.200.0/21
                          IP: 177.85.88.0/22
                          IP: 177.86.88.0/21
                          IP: 177.86.192.0/21
                          IP: 177.128.220.0/22
                          IP: 177.137.88.0/21
                          IP: 177.152.64.0/20
                          IP: 186.208.96.0/20
                          IP: 186.226.0.0/20
                          IP: 186.232.192.0/21
                          IP: 187.86.80.0/20
                          IP: 187.95.224.0/19
                          IP: 191.253.16.0/22
                          IP: 201.158.24.0/21
                          IP: 2804:9f8::/32
                          IP: 2804:ad0::/32
                          IP: 2804:21f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16696788 (0xfec5d4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:28:16 2023 GMT
            Not After : Jun 30 13:48:58 2025 GMT
        Subject: CN=9e64b54f72f13360bff0d4276afc5b325bc8ed5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:06:8d:95:15:97:09:38:a6:b8:ad:15:43:8a:
                    1c:1f:e5:59:22:f8:29:cc:11:d6:0e:e4:9c:3c:7e:
                    09:7c:43:3d:52:2e:c7:0f:1c:e0:75:05:ce:59:b5:
                    d5:b3:ee:d0:15:9a:02:67:22:bc:54:08:25:67:a6:
                    e0:bd:b2:80:30:ab:07:64:e2:6b:68:eb:ef:86:81:
                    2c:ec:6d:4c:02:7a:07:34:23:8d:75:18:a8:f4:09:
                    e3:ca:e9:42:5c:3c:08:c4:42:22:83:7c:46:79:38:
                    32:ad:5c:7e:86:f8:1d:f8:5d:14:51:33:8c:22:93:
                    48:70:18:69:00:73:ae:ce:36:e2:8f:66:8b:7c:c0:
                    c0:61:e9:a3:6b:a9:56:79:10:5e:0c:3b:35:7a:bd:
                    03:98:42:88:20:ef:5b:b0:15:c7:18:00:ed:a1:58:
                    f5:a7:0b:08:b5:5b:a6:78:aa:17:e1:2c:42:f5:4c:
                    85:30:c7:4c:1e:13:5f:7c:db:04:45:75:8f:f8:29:
                    8c:6c:37:f6:2c:95:63:28:47:18:95:9b:14:21:38:
                    67:da:29:9a:32:42:05:09:54:4a:50:f2:90:d4:c8:
                    85:93:17:82:c3:19:e5:c1:07:6b:33:8a:32:6e:9a:
                    0e:f9:c3:ad:84:d6:8d:35:51:7f:7e:15:1b:78:d1:
                    9d:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:83:D4:41:51:0D:C9:88:C3:75:F7:14:49:AE:05:85:9D:EF:E2:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bd2602c9-ad2e-4b03-8974-071fcc1836bf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bd2602c9-ad2e-4b03-8974-071fcc1836bf/9e64b54f72f13360bff0d4276afc5b325bc8ed5d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.144.0/22
                  131.255.220.0/22
                  138.36.176.0/22
                  138.94.156.0/22
                  138.122.76.0/22
                  138.185.164.0/22
                  143.202.124.0/22
                  167.249.48.0/22
                  168.194.120.0/22
                  168.197.72.0/22
                  168.232.112.0/22
                  170.79.48.0/22
                  170.231.8.0/22
                  170.231.220.0/22
                  177.22.248.0/22
                  177.38.64.0/22
                  177.38.128.0/21
                  177.70.176.0/20
                  177.73.200.0/21
                  177.85.88.0/22
                  177.86.88.0/21
                  177.86.192.0/21
                  177.128.220.0/22
                  177.137.88.0/21
                  177.152.64.0/20
                  186.208.96.0/20
                  186.226.0.0/20
                  186.232.192.0/21
                  187.86.80.0/20
                  187.95.224.0/19
                  191.253.16.0/22
                  201.158.24.0/21
                IPv6:
                  2804:9f8::/32
                  2804:ad0::/32
                  2804:21f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262773

    Signature Algorithm: sha256WithRSAEncryption
         92:37:b3:5a:f8:09:a8:c4:28:1d:d3:23:66:27:8d:a3:0f:3e:
         cc:d7:fe:40:8a:7c:5d:2c:16:00:19:d3:86:32:5d:82:ad:ee:
         9c:9c:f1:57:67:44:40:29:76:6c:cc:eb:49:8d:9a:2d:dc:e2:
         64:8c:1f:bc:26:ec:42:60:25:93:26:ae:8d:52:ae:6b:e7:30:
         53:b3:78:26:01:e8:63:2e:e4:34:f0:09:fe:ad:9d:24:3c:c9:
         89:59:76:76:27:8b:47:c9:c3:e8:8e:c5:a5:70:ac:75:bf:39:
         19:b9:af:55:0b:3e:ad:49:8e:1b:c7:5b:33:ed:a0:cb:44:b9:
         2e:cf:ab:04:85:48:30:a5:16:cf:7b:05:6b:50:77:b5:86:7c:
         1d:c1:5f:0d:6f:37:7a:a5:d9:2e:c6:b2:52:50:38:d2:fc:06:
         e1:3c:0d:ce:7c:9f:2f:e8:cd:ab:27:a3:a0:4d:3a:89:eb:87:
         3c:2c:db:a9:b2:b0:7d:7c:9d:d4:39:ac:a7:10:1f:99:97:07:
         93:9e:7d:95:30:5d:b7:82:29:23:d1:7f:8f:08:b8:c7:3b:b6:
         00:8d:11:f8:f8:16:54:79:a2:e7:6c:43:c7:51:d9:e5:1a:ef:
         7b:e2:10:bd:00:b5:e3:da:7c:7c:c0:a3:79:41:3c:fc:79:17:
         73:8b:5b:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:35 2024 by rpki-client on console-fra.rpki-client.org