Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a12940490bd588d04ca6f10e67f9895c773999a9.cer
File:                     a12940490bd588d04ca6f10e67f9895c773999a9.cer (raw, json)
Hash identifier:          AF3dO3DdaiWjvVrHNZkah5us2k1zwUxKUeWQnbul8G8=
Subject key identifier:   11:C9:5F:39:0F:5A:14:33:8F:15:FA:7E:F1:D9:12:5E:4D:A7:C6:D6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB8F82
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/a12940490bd588d04ca6f10e67f9895c773999a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Mar 2021 20:36:38 +0000
Certificate not after:    Thu 08 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 52233
                          IP: 131.221.144.0/22
                          IP: 138.219.140.0/22
                          IP: 161.0.96.0/20
                          IP: 170.245.0.0/22
                          IP: 186.2.176.0/20
                          IP: 190.112.224.0/19
                          IP: 2800:530::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14389122 (0xdb8f82)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  9 20:36:38 2021 GMT
            Not After : Feb  8 05:00:00 2024 GMT
        Subject: CN=a12940490bd588d04ca6f10e67f9895c773999a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:e5:84:82:fa:bc:3c:92:5d:21:8f:f1:9a:bb:
                    2a:85:ba:ea:dd:ed:d1:4d:41:ff:b9:9c:87:c7:62:
                    3d:1f:9e:54:40:85:6d:d5:89:f1:d2:36:e4:b5:63:
                    de:ec:e9:c3:c1:64:b5:53:63:e5:b0:eb:d6:a8:b8:
                    ab:19:fe:d0:d8:bf:9d:22:18:3a:fd:fe:d2:c7:f7:
                    10:01:ec:63:f3:c6:70:29:f8:76:38:be:91:d8:ea:
                    cb:57:b0:db:09:74:61:76:f8:c7:83:d5:9f:b0:62:
                    89:f2:f7:76:63:8e:ac:e8:fb:05:b3:e4:48:4f:16:
                    8a:8d:35:22:8f:37:e1:85:32:b2:d1:dc:45:3a:8e:
                    e4:a8:dc:38:d7:cf:74:2c:53:e6:75:d1:ca:50:dd:
                    50:e9:a1:28:30:34:50:12:44:d3:46:c8:0f:fd:fd:
                    43:61:0e:5e:26:5b:4a:e4:5b:50:fa:1b:f5:4f:37:
                    3b:47:15:08:0d:b5:60:ab:2d:1f:e7:48:73:47:19:
                    23:43:66:ee:75:2c:88:8a:6f:e2:a5:e2:63:f8:d9:
                    c3:08:bb:1e:ed:7c:3e:46:20:f4:e9:21:94:56:9a:
                    d5:f7:e5:10:52:af:f4:e6:b5:6a:88:52:46:80:5c:
                    98:36:19:2f:54:0a:c2:72:ca:bf:cc:91:a9:fb:6d:
                    98:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:C9:5F:39:0F:5A:14:33:8F:15:FA:7E:F1:D9:12:5E:4D:A7:C6:D6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/052f4016-d206-42ed-adb9-88280d25848d/a12940490bd588d04ca6f10e67f9895c773999a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.221.144.0/22
                  138.219.140.0/22
                  161.0.96.0/20
                  170.245.0.0/22
                  186.2.176.0/20
                  190.112.224.0/19
                IPv6:
                  2800:530::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52233

    Signature Algorithm: sha256WithRSAEncryption
         3c:38:4c:07:99:bc:aa:0c:94:b8:bd:39:b2:6f:eb:17:ef:7c:
         36:36:ea:fc:0d:84:ed:58:c4:e9:11:09:10:4c:66:4a:5e:5a:
         ac:73:35:37:1d:c3:56:e7:b9:8b:5a:14:e3:29:ce:cb:c8:9c:
         b0:3a:f4:a1:bb:af:f5:6e:67:79:88:eb:de:d6:ed:52:94:29:
         8e:4b:7d:5e:f0:7b:f1:3c:18:57:87:04:ac:3c:a4:cf:d6:82:
         db:77:34:c9:a2:ab:85:45:8f:69:6f:28:13:e8:4f:d8:17:33:
         4a:0b:3f:0b:ec:ee:8b:94:71:07:6a:24:29:4e:3c:f7:76:57:
         34:a5:d9:cd:78:4d:73:dc:4b:31:6d:d9:02:14:73:39:6e:14:
         69:33:24:bc:c8:64:1c:a3:0d:53:f3:bc:fe:fa:19:e8:7d:6c:
         5a:92:2d:b5:7a:bf:52:1a:32:9a:1b:f2:f5:a7:f5:a6:d7:4d:
         e2:54:3e:9c:ca:e2:89:ab:1a:91:5c:3c:3f:18:74:c3:c4:72:
         34:51:87:19:f8:d0:b7:a9:3b:2b:a7:45:bf:b6:be:7e:ba:98:
         b1:5c:a5:1f:15:6f:47:9b:9d:9d:61:e8:06:60:25:93:7c:26:
         d0:e6:7a:d1:00:15:e3:81:98:2a:8a:ae:36:7d:33:9f:94:2e:
         20:5f:ee:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:28 2024 by rpki-client on console-ams.rpki-client.org