Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer
File:                     a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.cer (raw, json)
Hash identifier:          hYsqKkfgQeMx9TyuUi0ZizV5LghV6y8wS4/j6bY/+nA=
Subject key identifier:   5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F6465B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 06 May 2019 16:43:28 +0000
Certificate not after:    Mon 23 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 26611
                          IP: 181.144.0.0/12
                          IP: 181.240.0.0/12
                          IP: 190.125.0.0 -- 190.127.255.255
                          IP: 190.130.64.0/18
                          IP: 190.243.0.0/16
                          IP: 191.64.0.0/12
                          IP: 191.144.0.0/12
                          IP: 2800:800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16139867 (0xf6465b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  6 16:43:28 2019 GMT
            Not After : Sep 23 05:00:00 2024 GMT
        Subject: CN=a68aca945e5b4e0fa575bbe03b1af65146ef0b6f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:05:e7:21:2e:95:08:df:67:6e:70:44:c8:33:
                    17:5c:b0:4c:83:88:34:89:8c:b7:a0:cc:fb:d2:09:
                    1a:e3:7b:09:38:ec:af:71:29:7a:cf:54:44:9d:bf:
                    f5:9c:41:29:30:85:b3:27:07:6f:87:7e:fa:f8:74:
                    55:57:fa:2f:53:b9:a1:7d:14:59:4c:d7:71:8d:62:
                    f7:05:13:2e:39:27:3d:f6:5d:bf:1b:e5:50:32:86:
                    82:9b:f5:0a:3c:8a:c0:98:cf:dc:4a:1b:b4:db:b6:
                    67:60:7a:7e:e2:63:6c:21:d7:b3:ac:cc:6e:6f:69:
                    c8:82:e5:1e:13:bf:46:c1:a7:28:64:8a:24:f0:8c:
                    e8:9e:23:f9:e3:2a:b1:58:85:8c:c2:9d:7a:20:30:
                    f8:83:ec:ff:66:66:f2:6d:b8:16:6c:e6:9b:b2:06:
                    db:c5:5c:4b:05:78:96:a6:5e:b7:47:d5:32:a8:66:
                    a2:c6:17:66:a8:bc:9e:ef:48:a9:29:6c:57:42:e5:
                    30:a4:b0:ed:ec:b2:af:83:88:0e:64:e1:b4:a7:e4:
                    17:b6:dd:82:f3:62:0b:63:62:fd:b7:f0:e6:4c:bd:
                    96:9c:a8:32:e2:fc:bf:3a:bb:ce:2f:6a:e7:ea:43:
                    be:df:62:32:45:a4:22:f7:dc:61:55:6b:88:20:29:
                    66:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:50:E5:03:69:FD:9F:99:A6:92:F6:88:B9:62:BC:77:AC:8A:A9:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1821806c-0e82-4204-8b3c-dde7c0fc8d62/a68aca945e5b4e0fa575bbe03b1af65146ef0b6f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.144.0.0/12
                  181.240.0.0/12
                  190.125.0.0-190.127.255.255
                  190.130.64.0/18
                  190.243.0.0/16
                  191.64.0.0/12
                  191.144.0.0/12
                IPv6:
                  2800:800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  26611

    Signature Algorithm: sha256WithRSAEncryption
         6e:58:c8:c5:c3:2e:35:a6:2d:12:3b:eb:d9:1f:f6:52:14:b6:
         cb:56:13:9b:d9:4c:90:39:db:f0:96:8a:36:89:eb:79:f9:6e:
         40:e1:df:0b:5f:8d:24:fe:9c:92:ce:e8:83:d5:d8:d1:e7:f4:
         b9:18:73:7d:1b:1c:ec:d2:c6:94:be:89:a4:13:42:48:7d:e2:
         8a:28:26:75:d8:dd:aa:d3:87:62:da:85:2e:1a:8d:a8:2f:1a:
         fe:3b:83:2f:a0:9e:76:d1:98:06:54:98:fe:6a:40:41:b0:b7:
         f5:33:c0:3a:35:70:ee:a5:93:79:10:f6:52:19:36:d5:45:68:
         14:39:00:38:aa:cb:cb:df:92:fe:cc:62:56:61:5d:8a:04:16:
         8d:fc:bb:01:9b:1c:c2:72:bc:ad:08:17:eb:1d:c2:ad:82:05:
         3b:4f:dc:b4:17:2e:00:65:52:5c:4e:8f:17:df:64:fe:a4:68:
         32:95:98:67:53:c4:0b:c4:ca:02:cd:74:68:cd:85:f7:f0:bb:
         f3:f9:22:0f:89:4d:a9:b6:a9:2b:3e:35:85:be:b0:07:e6:46:
         dc:24:3e:36:ee:22:7e:03:01:e8:0d:40:56:76:d6:55:fa:e5:
         4a:36:5a:6b:21:3b:ba:8f:10:c7:c8:09:31:50:7c:77:07:02:
         50:87:b1:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org