Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer
File:                     aa536e2112fb6fbd4fd90b644c6fd66acba797ea.cer (raw, json)
Hash identifier:          sHUDcgWw+cyQuNRfzFfmEYABqDqocmzWqLlkOFYyJoM=
Subject key identifier:   34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA09D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Sat 20 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 27714
                          IP: 200.85.128.0/21
                          IP: 200.85.140.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14289361 (0xda09d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : Jan 20 05:00:00 2024 GMT
        Subject: CN=aa536e2112fb6fbd4fd90b644c6fd66acba797ea
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3b:5b:b3:11:79:62:f1:e2:d9:a4:ca:63:50:
                    4d:a0:93:c6:76:c4:0e:4a:20:fe:b4:ee:ad:de:23:
                    5d:c0:b4:a0:50:29:6a:07:90:ff:a5:dc:57:3a:c0:
                    95:8f:3e:8e:69:32:9b:b4:f7:64:8f:28:74:17:78:
                    af:04:ee:de:4e:d6:ef:ea:06:61:2a:ce:90:2f:d9:
                    8d:c7:e7:a0:23:c8:28:1f:40:15:fe:10:9a:39:a5:
                    98:2d:ea:5d:26:b7:5a:07:76:59:af:2b:7b:94:81:
                    90:85:a4:7e:f5:1e:c6:b9:2e:35:e1:ab:28:01:3c:
                    e4:51:ac:c3:ae:b0:80:63:a4:65:8e:d4:8f:9b:a5:
                    9d:b8:39:ab:b3:e1:7b:ca:bb:3b:ac:82:b7:44:0a:
                    c5:2c:ff:1c:26:dd:91:2a:93:38:29:53:df:eb:42:
                    b7:19:67:5e:30:7a:95:3d:0d:89:f1:88:ce:cf:a1:
                    cc:ff:dc:b1:7b:28:6e:9b:2f:83:78:fd:93:60:72:
                    4d:44:fa:3a:59:e9:da:10:6c:11:73:ed:ad:fc:a8:
                    34:50:77:60:9d:45:3e:9e:49:5d:95:6a:53:4b:bf:
                    01:76:6a:7a:6b:b2:e1:42:ff:71:16:ed:87:54:32:
                    af:21:be:64:8c:8d:e5:87:65:61:9b:bb:e6:da:86:
                    ea:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:98:A2:3B:7F:57:B4:51:CF:75:1E:21:7C:78:5E:0F:BE:35:87:87
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f4bc5d7e-ea3a-4ab3-a8a5-5903eb4f1726/aa536e2112fb6fbd4fd90b644c6fd66acba797ea.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.85.128.0/21
                  200.85.140.0/22

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27714

    Signature Algorithm: sha256WithRSAEncryption
         a3:93:18:1b:3f:5f:20:7b:1f:06:8d:f0:a6:b7:a6:77:96:41:
         02:97:7b:a2:9e:46:78:0a:0e:72:f2:3c:7d:3a:09:7b:23:da:
         eb:bc:3a:29:3f:bc:42:9a:2a:0d:44:9c:04:5a:15:13:bc:66:
         df:29:ff:0f:0f:98:03:72:ae:21:96:d5:52:7f:29:c3:19:ff:
         57:22:c6:3f:63:49:72:d3:e8:d6:f3:db:3b:d5:86:00:4b:0a:
         cc:6a:dd:32:a3:ff:00:74:b9:68:f3:42:a8:70:cb:8f:1c:b3:
         22:45:6d:49:6b:48:98:25:29:0c:14:28:c8:6a:19:4f:0a:07:
         89:29:e0:c2:6f:27:96:ed:f8:88:f9:ab:43:1e:83:69:7b:3d:
         e7:ce:b4:b2:70:e9:4f:2b:19:81:a0:84:31:69:91:94:75:65:
         0f:36:53:4c:be:4c:3b:80:3c:f2:85:d3:8f:eb:f2:98:3b:bb:
         4a:50:fa:f8:05:e4:28:d4:18:4a:6a:a1:7b:bd:a8:7a:19:db:
         2c:d1:38:1b:9a:d4:20:1e:2d:e6:9c:e0:8b:4c:3d:e8:fa:73:
         08:14:83:24:88:a2:5e:35:cf:f1:a0:45:14:9a:c3:97:94:8c:
         4b:40:de:e6:c9:4c:92:dc:fd:c2:16:98:36:80:3a:a9:85:f9:
         cf:99:51:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org