Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a4630925d507cf99a0d01a5d4409c8589203d281.cer
File:                     a4630925d507cf99a0d01a5d4409c8589203d281.cer (raw, json)
Hash identifier:          SjZhXSUxSN40ofA28rnauOIOEZGQ3iILYm3pog0B168=
Subject key identifier:   11:1C:0F:6F:18:5F:0A:03:F0:F6:4A:3D:BF:15:5A:A6:DE:EE:36:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E59F3A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2a771b1e-5270-44ce-8747-7b5c6d94701c/a4630925d507cf99a0d01a5d4409c8589203d281.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2a771b1e-5270-44ce-8747-7b5c6d94701c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 16:13:13 +0000
Certificate not after:    Mon 02 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 14117
                          IP: 131.0.172.0/22
                          IP: 179.56.0.0/15
                          IP: 181.226.0.0/16
                          IP: 190.13.128.0/18
                          IP: 190.95.0.0/17
                          IP: 190.121.0.0/17
                          IP: 190.211.0.0/18
                          IP: 190.217.128.0/17
                          IP: 200.85.192.0/19
                          IP: 200.126.64.0/18
                          IP: 201.186.0.0 -- 201.187.127.255
                          IP: 201.220.96.0/19
                          IP: 201.221.192.0/19
                          IP: 216.155.64.0/19
                          IP: 2803:6f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15048506 (0xe59f3a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 16:13:13 2023 GMT
            Not After : Sep  2 05:00:00 2024 GMT
        Subject: CN=a4630925d507cf99a0d01a5d4409c8589203d281
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:25:3c:a3:f7:d0:5f:3e:94:ca:3d:4e:9d:b0:
                    da:8a:9d:f4:3d:ee:d6:92:51:1c:00:a4:3a:71:e8:
                    8e:63:62:61:a2:0d:71:df:58:68:7a:24:01:96:31:
                    9c:f2:d3:bd:a5:fb:4d:72:ae:c1:97:84:9b:5a:30:
                    c2:01:fe:96:86:14:2b:82:9c:58:35:15:71:77:78:
                    6d:ce:5d:19:cf:cd:ad:33:69:27:72:f0:49:40:14:
                    9c:41:0f:82:84:e2:b1:38:c7:3a:4a:90:cb:a2:d2:
                    26:94:69:e3:55:a6:0c:f2:9c:a6:93:59:c5:42:fc:
                    96:08:f3:d5:6b:7f:0d:f9:a5:25:a5:43:97:00:dc:
                    c0:4f:67:d8:15:3d:6f:6d:e6:98:e8:0e:74:9f:8c:
                    be:da:8e:9d:9a:5e:b1:f9:5b:53:45:54:0a:96:da:
                    a5:70:a1:16:8c:90:bc:cd:03:7c:6c:c5:1b:b2:b7:
                    5d:58:53:2a:34:38:25:96:b7:3c:91:5f:a1:94:e8:
                    0b:34:77:29:be:43:c7:33:3b:e7:1f:70:c2:a9:8f:
                    c8:b1:01:ab:60:d3:3a:b3:2a:b9:d1:2f:11:95:18:
                    55:85:00:2d:b3:bf:7f:44:61:84:23:8a:a4:68:54:
                    98:2b:09:52:2d:41:b5:95:a7:59:43:4d:93:22:8b:
                    27:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:1C:0F:6F:18:5F:0A:03:F0:F6:4A:3D:BF:15:5A:A6:DE:EE:36:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a771b1e-5270-44ce-8747-7b5c6d94701c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a771b1e-5270-44ce-8747-7b5c6d94701c/a4630925d507cf99a0d01a5d4409c8589203d281.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.172.0/22
                  179.56.0.0/15
                  181.226.0.0/16
                  190.13.128.0/18
                  190.95.0.0/17
                  190.121.0.0/17
                  190.211.0.0/18
                  190.217.128.0/17
                  200.85.192.0/19
                  200.126.64.0/18
                  201.186.0.0-201.187.127.255
                  201.220.96.0/19
                  201.221.192.0/19
                  216.155.64.0/19
                IPv6:
                  2803:6f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14117

    Signature Algorithm: sha256WithRSAEncryption
         78:97:b2:ea:77:d4:e1:8b:40:99:a9:38:c6:0f:a2:00:01:b6:
         ed:cd:67:61:3d:61:84:eb:cb:85:f7:74:17:90:fb:1e:c2:48:
         ea:c8:70:82:0f:cf:28:19:37:95:4c:75:21:d9:a3:b5:d6:f2:
         7d:d9:44:1f:ac:46:b5:5c:be:e6:51:6a:11:31:b5:49:4a:c4:
         82:72:c9:4b:96:78:af:c6:19:c2:f4:64:1e:fc:4a:e3:1c:85:
         4a:13:5f:a5:97:61:b0:11:d4:c4:da:2c:3b:41:ba:2e:22:f7:
         13:a8:fc:26:f3:af:1f:7d:63:6e:dc:75:e6:77:db:d8:39:4e:
         69:e6:13:ea:82:86:a2:50:ae:e9:c7:9b:a6:c8:08:86:39:92:
         d1:a5:67:fb:0a:f0:21:5f:67:78:ad:ac:91:a3:3e:76:00:d1:
         68:f5:3a:35:f6:26:7a:2d:6f:f0:3c:83:f4:0b:f3:1d:5d:76:
         62:1b:77:c6:3a:72:d9:f7:1f:8c:a0:74:5f:29:f3:f2:ff:1f:
         6c:38:d7:85:89:cf:d0:8a:bf:de:08:b7:cb:1f:cb:7a:25:ef:
         06:20:42:d0:63:f9:d7:68:b8:b4:a6:14:01:98:75:6c:3f:fb:
         31:d6:52:77:1b:4e:d7:4a:d0:81:da:55:8c:3d:60:75:bc:87:
         46:e7:a9:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org