Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a2adf172fdd3786446bf951084521ddb0f6ae915.cer
File:                     a2adf172fdd3786446bf951084521ddb0f6ae915.cer (raw, json)
Hash identifier:          MnGjBF2BQh+fNtPHtMhBP5cMsXsAz7PpJIIqfX6wP64=
Subject key identifier:   0C:0B:8E:46:E3:5E:58:29:49:BF:5D:34:AB:21:52:25:19:E4:75:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01008178
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/17f7e187-5ec6-4715-88ac-beecf4fcf918/a2adf172fdd3786446bf951084521ddb0f6ae915.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/17f7e187-5ec6-4715-88ac-beecf4fcf918/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:03:58 +0000
Certificate not after:    Mon 16 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 10906
                          AS: 11284
                          AS: 11431
                          AS: 11644
                          AS: 11752
                          AS: 12136
                          AS: 13874
                          AS: 14026
                          AS: 14650
                          AS: 20121
                          AS: 22548
                          AS: 26162
                          AS: 28345
                          AS: 53035
                          AS: 61580
                          AS: 263044
                          IP: 45.6.52.0/22
                          IP: 45.184.144.0/22
                          IP: 45.227.0.0/22
                          IP: 168.181.20.0/22
                          IP: 177.52.38.0/23
                          IP: 187.16.192.0/19
                          IP: 189.76.96.0/19
                          IP: 200.160.0.0/20
                          IP: 200.189.40.0/22
                          IP: 200.192.104.0/24
                          IP: 200.192.108.0/22
                          IP: 200.192.232.0/22
                          IP: 200.194.128.0/19
                          IP: 200.219.130.0/23
                          IP: 200.219.138.0 -- 200.219.141.255
                          IP: 200.219.143.0 -- 200.219.148.255
                          IP: 200.219.154.0 -- 200.219.159.255
                          IP: 200.229.248.0/23
                          IP: 2001:12f8::/48
                          IP: 2001:12f8:2:: -- 2001:12f8:d:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:12fe::/31
                          IP: 2801:80:1700::/40
                          IP: 2801:80:1e00::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16810360 (0x1008178)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:03:58 2023 GMT
            Not After : Sep 16 15:00:00 2024 GMT
        Subject: CN=a2adf172fdd3786446bf951084521ddb0f6ae915
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:f7:b2:9d:34:14:26:87:3b:73:6d:12:cb:3f:
                    3b:f7:99:66:1a:18:c0:06:95:3c:69:af:8b:e3:0d:
                    1b:e1:3f:4c:f3:6f:57:2e:f4:c0:2e:6a:95:39:45:
                    f3:4c:0e:e6:2d:69:84:2e:ec:5b:13:d5:aa:5f:5f:
                    b6:9c:85:e9:61:ba:0b:cc:c4:1e:47:ec:33:62:36:
                    85:a9:5d:eb:ff:67:5b:ab:2a:50:7f:57:7d:4a:bc:
                    36:a7:f7:1a:c7:c4:84:4d:a0:88:97:e9:8d:fb:3a:
                    51:f9:da:20:33:12:58:97:d0:98:a3:ca:b0:f2:c3:
                    e0:c3:13:f0:f9:3c:c9:ab:ed:b2:ec:73:39:b0:0c:
                    3e:6f:b0:92:cd:01:b7:2b:88:a1:fa:d7:a7:52:bb:
                    65:83:ec:a0:03:6a:0b:18:c7:3d:6d:be:4b:42:dc:
                    65:4a:a5:54:51:d4:3c:35:9a:41:d1:19:ba:1d:01:
                    da:c8:16:71:28:aa:f7:2b:c5:3c:5d:29:9e:dd:1f:
                    7d:20:82:b5:1b:62:99:54:6c:86:81:84:97:39:24:
                    40:d6:4d:79:61:81:40:a9:93:37:35:d0:56:58:0c:
                    8d:7e:2a:91:df:f4:b6:2c:33:4f:9b:a4:dc:96:a0:
                    0c:82:78:27:6d:70:1c:6e:ee:45:0a:2d:c1:7b:f5:
                    cb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0C:0B:8E:46:E3:5E:58:29:49:BF:5D:34:AB:21:52:25:19:E4:75:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/17f7e187-5ec6-4715-88ac-beecf4fcf918/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/17f7e187-5ec6-4715-88ac-beecf4fcf918/a2adf172fdd3786446bf951084521ddb0f6ae915.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.52.0/22
                  45.184.144.0/22
                  45.227.0.0/22
                  168.181.20.0/22
                  177.52.38.0/23
                  187.16.192.0/19
                  189.76.96.0/19
                  200.160.0.0/20
                  200.189.40.0/22
                  200.192.104.0/24
                  200.192.108.0/22
                  200.192.232.0/22
                  200.194.128.0/19
                  200.219.130.0/23
                  200.219.138.0-200.219.141.255
                  200.219.143.0-200.219.148.255
                  200.219.154.0-200.219.159.255
                  200.229.248.0/23
                IPv6:
                  2001:12f8::/48
                  2001:12f8:2::-2001:12f8:d:ffff:ffff:ffff:ffff:ffff
                  2001:12fe::/31
                  2801:80:1700::/40
                  2801:80:1e00::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10906
                  11284
                  11431
                  11644
                  11752
                  12136
                  13874
                  14026
                  14650
                  20121
                  22548
                  26162
                  28345
                  53035
                  61580
                  263044

    Signature Algorithm: sha256WithRSAEncryption
         49:21:a1:f8:fc:df:46:59:b6:af:a9:92:26:9c:14:68:f2:90:
         e5:c4:59:49:a1:7f:11:23:a3:45:33:f8:66:1a:58:c4:5d:91:
         13:b6:de:7f:44:95:5c:9c:2a:73:b1:48:4a:e8:13:25:5c:d3:
         72:17:25:4b:e2:d1:0e:e2:e9:bd:59:a2:40:ae:3c:78:0a:01:
         63:11:9c:9e:2e:c8:ae:f9:b7:71:ae:b6:d1:19:5a:5c:f3:5b:
         67:49:56:fc:7a:e1:18:90:88:3e:74:cb:0b:40:da:2c:4f:c1:
         fa:aa:bd:84:51:70:05:9e:c8:44:49:d3:25:70:1a:4b:dc:e3:
         fa:3f:b8:df:e5:7e:9e:4b:83:d3:53:f8:22:bf:ad:27:d3:c0:
         94:4c:93:29:2c:55:52:a0:a6:ca:ad:15:be:d6:55:4e:ea:7e:
         44:af:2d:62:79:86:ce:cd:7a:09:4c:a7:d9:88:72:97:08:93:
         8e:13:23:f9:9e:6d:99:ee:bf:f1:65:09:2d:66:a2:3c:db:fe:
         3c:46:a1:74:5f:95:79:1a:f0:b2:13:db:dc:33:40:d4:bb:ab:
         4a:fd:c3:47:e8:92:dc:dd:60:b1:e3:8a:d0:33:85:09:20:77:
         67:19:51:10:a1:24:bf:f8:cb:bd:d7:49:1a:c8:dd:56:9e:32:
         39:2d:f2:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:28 2024 by rpki-client on console-ams.rpki-client.org