Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7a5fab05d84621ad4b78ccf141868a98875d29.cer
File:                     9e7a5fab05d84621ad4b78ccf141868a98875d29.cer (raw, json)
Hash identifier:          yR1KoNtSf3CXb/hgol8P9t1bmSpMsQNeB0FL9dWp0/s=
Subject key identifier:   6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6A36B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/9e7a5fab05d84621ad4b78ccf141868a98875d29.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:25 +0000
Certificate not after:    Wed 25 Sep 2024 21:01:52 +0000
Subordinate resources:    AS: 265524
                          IP: 45.231.40.0/22
                          IP: 131.196.248.0/22
                          IP: 160.20.172.0/22
                          IP: 170.80.28.0/22
                          IP: 170.254.88.0/22
                          IP: 177.152.48.0/22
                          IP: 179.0.196.0/22
                          IP: 181.191.244.0 -- 181.191.255.255
                          IP: 192.141.124.0/22
                          IP: 201.182.20.0/22
                          IP: 2806:286::/32
                          IP: 2806:2eb::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16163691 (0xf6a36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:25 2017 GMT
            Not After : Sep 25 21:01:52 2024 GMT
        Subject: CN=9e7a5fab05d84621ad4b78ccf141868a98875d29
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:fb:dd:de:3a:b6:93:1b:9b:da:f1:f1:61:b4:
                    0c:21:2c:da:09:fa:b0:24:23:4b:ad:be:13:b8:0c:
                    c8:b2:fd:0b:7b:b5:19:0c:d4:38:37:e5:1e:dd:9f:
                    33:c3:de:3d:b0:96:c0:ab:25:6b:10:db:ed:d9:3e:
                    70:f6:92:28:62:38:bf:85:72:2d:4d:3b:26:e9:c9:
                    c9:5d:90:2c:0e:d3:17:a2:72:23:a5:80:eb:cd:da:
                    fd:17:07:ec:16:e1:b8:e3:aa:27:11:d3:5f:4d:a8:
                    00:94:14:38:b6:cc:75:7c:e5:e0:fd:53:ca:0a:13:
                    b1:4e:25:6d:fb:8a:2a:84:a1:0b:9e:0c:5c:c5:bd:
                    b6:a3:31:9c:eb:9d:3c:1e:04:31:10:59:a3:e3:72:
                    a8:ae:1b:f3:54:44:ec:d8:9d:a7:e1:16:c9:33:75:
                    4b:83:75:44:f7:b6:c2:eb:5f:4b:97:07:18:04:1f:
                    fa:7d:d1:2a:15:b9:12:60:6f:c0:75:b7:7f:8a:cf:
                    d4:92:84:22:1d:8f:ee:56:9a:71:57:6c:26:44:2c:
                    fe:00:6e:00:da:ad:32:41:1d:e2:79:c7:52:6f:e5:
                    ce:1a:d5:e2:40:0f:e8:c5:3b:2d:23:43:ba:2e:6d:
                    17:28:bf:44:01:d2:ec:08:9a:34:55:aa:63:9e:09:
                    33:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:4A:37:C8:01:68:41:93:FF:F7:E0:63:E3:9D:2C:C9:C5:B5:79:11
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0299cbc8-a693-4889-aba2-8f4f9c51b5d3/9e7a5fab05d84621ad4b78ccf141868a98875d29.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.40.0/22
                  131.196.248.0/22
                  160.20.172.0/22
                  170.80.28.0/22
                  170.254.88.0/22
                  177.152.48.0/22
                  179.0.196.0/22
                  181.191.244.0-181.191.255.255
                  192.141.124.0/22
                  201.182.20.0/22
                IPv6:
                  2806:286::/32
                  2806:2eb::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265524

    Signature Algorithm: sha256WithRSAEncryption
         2c:99:4c:1c:52:e2:2d:24:7f:8c:66:46:13:79:43:35:cd:f7:
         16:4e:58:81:be:ed:2f:45:1b:9b:cf:16:ee:25:36:d0:d8:39:
         bc:ea:05:98:94:47:b0:3a:e2:91:af:ca:cc:1a:01:e5:c3:dc:
         d9:9f:64:d2:10:55:4b:3f:d1:fb:06:f4:e0:d5:de:9b:88:02:
         d6:f2:c8:6b:39:e4:87:a5:16:b0:5c:96:a4:a6:77:8b:84:a5:
         28:80:14:c5:98:0e:85:6b:cf:b5:92:10:ed:5d:ed:90:3b:15:
         65:ce:f4:be:6b:05:eb:3e:85:82:39:db:05:d4:ff:3b:f3:87:
         16:b7:d4:f6:94:46:92:8d:01:e3:92:7c:ee:98:5a:ac:5b:92:
         42:e9:51:71:da:fc:82:d5:0d:7d:1e:74:c1:dd:1e:04:52:96:
         90:45:2f:ba:20:71:c6:b7:9c:77:e1:fb:9f:a1:e7:46:92:5e:
         cf:be:77:a3:89:13:25:c7:72:1e:31:95:13:32:b0:3e:f7:c5:
         85:3c:17:57:88:8d:8c:24:7e:18:1a:6e:8e:d5:19:f1:4a:c0:
         32:ba:a9:f2:17:c2:df:63:92:4c:5b:a2:b9:15:2d:ef:ed:f4:
         bb:52:03:11:ff:cc:6d:64:51:14:b7:04:aa:5c:fc:73:6f:98:
         e4:a4:20:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:28 2024 by rpki-client on console-ams.rpki-client.org