Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer
File:                     b1eadf44e23f1448be60c0468eb9f4738d5692ba.cer (raw, json)
Hash identifier:          Hzk+fy9LZh9ao9Ve+n+acoUHBLOrMpkNTBHDFCl5130=
Subject key identifier:   E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F15A30
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/b1eadf44e23f1448be60c0468eb9f4738d5692ba.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 04 Nov 2020 23:07:18 +0000
Certificate not after:    Sun 11 Aug 2024 15:00:00 +0000
Subordinate resources:    AS: 22894
                          AS: 27661
                          AS: 28377
                          AS: 28468
                          AS: 28495 -- 28500
                          AS: 28504
                          AS: 28510 -- 28511
                          AS: 28540
                          AS: 28564
                          AS: 262912
                          IP: 189.201.244.0/22
                          IP: 192.100.224.0/22
                          IP: 200.23.0.0/23
                          IP: 200.23.30.0/24
                          IP: 200.23.179.0/24
                          IP: 200.33.0.0/23
                          IP: 200.33.80.0/24
                          IP: 200.33.111.0/24
                          IP: 200.34.22.0/24
                          IP: 200.94.176.0/21
                          IP: 201.131.248.0/21
                          IP: 207.248.64.0/23
                          IP: 207.248.68.0/22
                          IP: 2001:1201::/43
                          IP: 2001:1221::/48
                          IP: 2001:1250::/32
                          IP: 2001:1258::/32
                          IP: 2001:13c7:7000::/48
                          IP: 2001:13c7:7014::/48
                          IP: 2801:c4:c0::/43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15817264 (0xf15a30)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  4 23:07:18 2020 GMT
            Not After : Aug 11 15:00:00 2024 GMT
        Subject: CN=b1eadf44e23f1448be60c0468eb9f4738d5692ba
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:3b:99:7d:82:0c:f7:ec:6b:85:c3:09:71:41:
                    97:1c:9c:f6:7d:f0:84:f4:4b:d3:a2:f6:4c:bf:b1:
                    1b:76:0d:69:5f:47:c4:29:93:9f:44:76:9f:24:a0:
                    58:8d:ee:ee:c1:96:ef:2a:c7:03:87:7d:72:15:7d:
                    94:8c:00:af:80:d4:44:cf:1d:c3:57:af:b0:de:60:
                    fd:3a:27:b4:1e:6a:08:9b:f4:78:1c:c0:ff:a3:7d:
                    9c:fc:19:b1:83:7e:58:a0:37:5a:f0:44:03:1f:c4:
                    d6:3d:f9:a7:f7:cc:ba:6d:59:07:a9:41:6a:29:f2:
                    a5:9f:91:e2:46:5e:35:fe:cb:ab:cc:12:bf:b3:a9:
                    0a:75:a3:42:1a:66:c6:6a:36:a8:91:3f:c9:67:95:
                    a3:8b:b5:25:25:2d:de:ca:31:3e:a6:bb:94:83:88:
                    9d:a6:0a:f0:c3:4f:f9:0a:fa:02:fb:ff:68:d3:48:
                    56:27:a5:73:02:36:1c:0e:c4:c4:a3:77:93:7b:aa:
                    5b:8c:da:5f:ba:7a:37:7e:b8:9b:bb:b3:f3:db:f4:
                    56:2e:b1:26:27:50:5c:25:65:29:b8:78:06:22:27:
                    c2:f8:78:d5:45:86:2e:95:80:6c:05:0b:4e:cb:e2:
                    ad:ce:8f:5c:91:9a:d9:ae:e4:12:99:7a:67:04:c1:
                    cf:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E2:F3:81:5E:62:68:44:E2:76:86:2B:C2:EE:C5:28:ED:89:97:0F:F1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/58b48363-8d7d-4a83-9f91-04dce3c34c3d/b1eadf44e23f1448be60c0468eb9f4738d5692ba.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.201.244.0/22
                  192.100.224.0/22
                  200.23.0.0/23
                  200.23.30.0/24
                  200.23.179.0/24
                  200.33.0.0/23
                  200.33.80.0/24
                  200.33.111.0/24
                  200.34.22.0/24
                  200.94.176.0/21
                  201.131.248.0/21
                  207.248.64.0/23
                  207.248.68.0/22
                IPv6:
                  2001:1201::/43
                  2001:1221::/48
                  2001:1250::/32
                  2001:1258::/32
                  2001:13c7:7000::/48
                  2001:13c7:7014::/48
                  2801:c4:c0::/43

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22894
                  27661
                  28377
                  28468
                  28495-28500
                  28504
                  28510-28511
                  28540
                  28564
                  262912

    Signature Algorithm: sha256WithRSAEncryption
         44:0e:68:b4:d6:c1:29:13:79:40:b3:6e:e1:98:73:ce:64:9c:
         bf:44:3a:bb:f0:d0:3a:f2:3b:09:21:bc:10:a1:d0:ea:a2:ae:
         9f:49:e1:9f:ac:15:bc:b2:52:67:65:56:fd:bf:8e:df:ed:65:
         e5:8d:5d:e2:1f:be:c5:ac:db:59:aa:5d:6a:25:58:d1:34:23:
         c9:20:89:f0:17:36:8a:e2:fe:9c:3a:7f:f9:6a:c9:b3:f4:d9:
         e6:83:9e:81:6d:4c:94:dd:44:65:83:e5:e9:b3:36:4d:41:d6:
         5a:be:af:3a:c7:70:be:3d:99:e5:22:d6:bf:29:57:45:79:f2:
         cb:0f:68:cc:38:4e:ea:8a:eb:11:04:9d:6e:a3:61:eb:a0:de:
         01:ea:7a:76:0e:44:7a:fd:80:46:56:7b:4c:fd:ca:c2:15:96:
         51:32:30:32:8b:e5:37:3b:bf:af:02:80:40:bf:6d:f8:60:6f:
         26:49:67:ce:65:ca:d5:e7:3b:8f:1e:34:1a:3d:c3:aa:88:9a:
         e2:c9:bc:ef:71:c7:c2:be:52:e7:aa:16:a2:79:30:77:f5:3c:
         3f:64:01:83:a4:34:51:19:5a:c6:0a:2c:81:17:2a:4b:c1:5a:
         33:61:50:9d:a9:72:79:73:2e:d7:c6:1a:8e:3e:3c:48:1b:73:
         92:48:c9:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:29 2024 by rpki-client on console-ams.rpki-client.org