Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6b1c0090cce66f25ac4a392ddc522404d70e99c.cer
File:                     a6b1c0090cce66f25ac4a392ddc522404d70e99c.cer (raw, json)
Hash identifier:          KPJ/IM2KVnUt+T3u8kiYcMjPC1R8XlwbYqS936qAltQ=
Subject key identifier:   C9:15:A7:EB:8B:01:C4:95:5D:FA:77:3A:0F:A4:CB:4C:6F:ED:96:4F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F517E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/a6b1c0090cce66f25ac4a392ddc522404d70e99c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Nov 2022 21:06:39 +0000
Certificate not after:    Tue 11 Feb 2025 18:41:49 +0000
Subordinate resources:    AS: 28417
                          IP: 148.222.8.0 -- 148.222.39.255
                          IP: 148.222.44.0 -- 148.222.63.255
                          IP: 148.222.96.0/19
                          IP: 148.222.136.0 -- 148.222.223.255
                          IP: 148.222.252.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16062436 (0xf517e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  1 21:06:39 2022 GMT
            Not After : Feb 11 18:41:49 2025 GMT
        Subject: CN=a6b1c0090cce66f25ac4a392ddc522404d70e99c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:26:a7:82:b6:3f:67:a2:6f:2e:7b:af:b2:50:
                    b4:5d:55:df:28:86:04:ff:5b:8b:44:d8:da:3a:b6:
                    ad:72:cd:46:42:6e:89:0a:18:24:fd:8e:00:a7:d8:
                    28:25:50:dd:aa:0e:39:b9:48:af:37:b7:27:2b:ef:
                    e4:8a:bf:b1:fd:e3:92:94:d2:af:81:0e:b1:b6:c8:
                    ef:7d:03:33:33:b1:05:7b:05:e0:21:c3:20:83:78:
                    d9:69:a7:2b:45:e8:2c:75:09:8f:a7:e8:05:47:98:
                    1e:17:cd:20:bb:be:06:6e:08:e0:12:e8:37:7b:8c:
                    4f:72:43:72:bd:3a:29:ae:d9:89:20:f0:a1:b7:79:
                    8a:02:2b:18:cc:4f:6f:41:1c:f7:9f:7a:71:64:dd:
                    c3:cf:e7:93:85:e7:9f:08:f5:39:b9:54:59:2f:01:
                    e8:21:80:d8:f7:6a:a4:67:1d:a1:e6:7f:a6:b1:55:
                    2f:65:b7:90:0d:1b:06:f9:70:7d:b6:a0:e9:8a:9e:
                    11:cc:19:b2:f5:ce:73:22:c9:96:70:be:fb:ec:f5:
                    4f:c8:dc:3e:7d:20:2c:5f:72:ec:5d:d6:13:87:6f:
                    db:14:b3:ad:2a:4b:cc:91:70:fe:60:09:1a:0a:79:
                    22:8a:6e:aa:dc:6e:6a:41:5f:e7:6a:ef:d7:c0:51:
                    64:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:15:A7:EB:8B:01:C4:95:5D:FA:77:3A:0F:A4:CB:4C:6F:ED:96:4F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7f4e747b-c42c-400b-8043-09160cc76cf0/a6b1c0090cce66f25ac4a392ddc522404d70e99c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.222.8.0-148.222.39.255
                  148.222.44.0-148.222.63.255
                  148.222.96.0/19
                  148.222.136.0-148.222.223.255
                  148.222.252.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28417

    Signature Algorithm: sha256WithRSAEncryption
         71:13:bc:b3:85:97:2b:2e:e8:c9:10:c0:ba:01:1d:d4:86:71:
         75:78:a5:79:90:7c:84:5f:ab:34:72:91:2d:40:92:3d:03:ad:
         3b:2d:d4:dd:33:2b:02:54:4c:00:05:40:8d:64:fd:bf:5d:46:
         53:e3:ff:e0:e1:70:3e:21:dd:f9:c2:c2:56:23:12:98:b9:4d:
         67:ad:98:4e:6b:d0:96:87:1b:3d:4d:d6:d4:76:06:2c:52:41:
         32:d4:a6:7b:d5:fc:c8:c1:4b:2e:d7:71:ae:bc:10:e2:fd:35:
         8d:0e:8e:64:e3:ff:24:d1:a4:e3:3d:05:f4:69:42:1f:37:2d:
         85:3d:71:21:8b:f4:90:a5:a8:13:70:f3:9f:74:1d:b9:63:ca:
         69:08:53:54:5c:68:b1:97:65:94:c6:6b:42:d2:9a:3d:90:6e:
         15:52:45:01:b4:49:e2:32:66:3d:70:27:60:b4:33:a7:94:bc:
         0d:c1:36:6f:ff:63:7c:97:85:2d:ee:7d:7d:28:7d:f7:bf:96:
         d1:44:4b:60:0e:a8:08:fd:68:ed:06:d4:3c:1f:85:b2:02:e5:
         83:ad:38:02:34:bb:91:27:de:0f:5d:0e:2b:10:86:bd:b0:68:
         dd:41:8b:90:8f:66:26:49:f9:60:55:84:8c:a3:00:a4:95:0f:
         4c:a5:e5:29
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org