Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e6663fb5d62a6c45845d461b066de1127b3e069.cer
File:                     9e6663fb5d62a6c45845d461b066de1127b3e069.cer (raw, json)
Hash identifier:          MOpz9i8kiZzsC/jUQZ+Nc59T+/5ZVuW7OTfbQ0ILNuw=
Subject key identifier:   4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5F030
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 23 Jan 2019 21:13:04 +0000
Certificate not after:    Fri 20 Sep 2024 16:28:30 +0000
Subordinate resources:    AS: 52436
                          IP: 132.255.112.0/22
                          IP: 138.97.176.0/22
                          IP: 168.181.208.0/22
                          IP: 168.196.32.0/22
                          IP: 179.42.168.0/22
                          IP: 190.120.244.0/22
                          IP: 190.122.180.0/22
                          IP: 207.248.124.0/22
                          IP: 2803:b900::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16117808 (0xf5f030)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 23 21:13:04 2019 GMT
            Not After : Sep 20 16:28:30 2024 GMT
        Subject: CN=9e6663fb5d62a6c45845d461b066de1127b3e069
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:9f:9f:09:f6:24:38:74:c1:21:62:a9:f7:e8:
                    f0:34:b5:0f:04:d2:99:86:c8:b7:de:70:61:ed:db:
                    e8:9b:25:ab:ec:4b:3e:90:8b:0f:08:75:00:a5:14:
                    fb:6e:d3:b7:4a:e5:5a:ce:81:21:c3:69:b8:72:ac:
                    d2:1f:a9:aa:a9:b8:72:6b:95:30:f9:02:cf:92:20:
                    1d:0f:96:eb:64:8c:0a:9d:fc:e7:19:b2:c4:4e:c0:
                    06:89:ff:93:aa:97:0e:5e:2d:45:6f:d0:bf:89:71:
                    0b:8b:01:b8:d6:e1:f1:a9:4c:71:0a:9d:f7:1f:a2:
                    9a:bc:88:81:54:ae:5a:ee:c8:7d:f8:18:78:58:e0:
                    ff:d2:cf:57:bc:b6:e4:a4:1f:c7:ad:d6:73:0c:2e:
                    45:4d:ed:05:66:8a:a7:9c:f4:ff:ac:c1:18:dd:6b:
                    3e:f1:85:5d:d1:a0:3e:b2:39:34:13:b5:e6:71:b4:
                    bf:c6:b1:9b:7b:22:2f:b1:67:99:c5:64:cb:ae:9b:
                    e9:85:c0:51:30:c8:5d:12:67:46:e5:f4:9c:9f:b3:
                    54:a4:83:f1:d6:1b:68:0e:23:43:c3:06:82:a6:10:
                    12:ad:53:dd:36:5c:a9:44:e4:15:00:7c:a9:cb:6c:
                    09:09:55:cc:7f:47:5e:62:44:cc:94:32:a6:b5:12:
                    aa:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:FA:DB:FA:CC:09:64:7A:58:D7:3A:CA:34:48:93:52:53:CC:0B:52
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/385520e6-1f98-496b-8d9e-15df9e0772ce/9e6663fb5d62a6c45845d461b066de1127b3e069.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.112.0/22
                  138.97.176.0/22
                  168.181.208.0/22
                  168.196.32.0/22
                  179.42.168.0/22
                  190.120.244.0/22
                  190.122.180.0/22
                  207.248.124.0/22
                IPv6:
                  2803:b900::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52436

    Signature Algorithm: sha256WithRSAEncryption
         43:76:2a:b6:2f:26:7d:49:00:20:9f:dc:71:f8:a4:ac:7d:a6:
         a4:12:8f:97:f9:24:a2:ae:56:2d:0d:da:c6:93:9e:9b:3d:b9:
         bf:28:e1:57:d7:c5:78:73:fb:b0:b4:63:d0:f2:07:a3:d6:17:
         67:c0:73:03:c8:a0:45:40:1c:bb:63:92:31:0c:03:94:1a:26:
         6f:71:90:48:cf:02:49:86:a0:38:ae:46:78:f9:98:d1:ea:6c:
         96:d2:6b:e7:8e:2d:e0:b6:02:cc:a6:23:26:92:e4:01:50:56:
         29:db:44:f6:3a:4a:d7:4e:dc:af:8a:06:0d:89:7b:fa:6f:13:
         f3:5b:e3:c2:f0:80:96:01:47:cc:5a:2f:d2:1c:7f:85:a5:df:
         bc:cf:18:cd:07:fa:8b:b9:a1:8f:66:6f:63:a3:a1:cd:9d:2d:
         9b:d4:96:d5:12:6b:71:96:dd:b1:54:79:e5:3b:bb:47:0c:2a:
         db:20:78:5b:17:f8:0b:e7:30:5d:a4:10:27:89:8e:96:87:a1:
         06:ad:e6:46:f9:d4:a5:ad:f1:be:66:b1:b4:f5:98:65:81:fe:
         1e:c0:d5:4c:f2:b0:03:13:cd:61:19:77:e5:11:e4:25:6e:18:
         2a:c4:f5:90:b9:9b:63:0f:80:67:1b:da:50:70:7f:5c:fc:cc:
         ee:65:b1:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:28 2024 by rpki-client on console-ams.rpki-client.org