Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer
File:                     b29e0207ef6228f7f5d5995ae3679dc81aaf3156.cer (raw, json)
Hash identifier:          Y/sDEXc7EdZiYjGEOunLvIzxk5PmQFTcU5AC1UY4BOs=
Subject key identifier:   9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010BEEF0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 18:41:00 +0000
Certificate not after:    Fri 01 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 6503
                          AS: 14000
                          IP: 148.240.0.0/16
                          IP: 148.243.0.0/16
                          IP: 148.245.0.0/16
                          IP: 187.162.0.0 -- 187.167.255.255
                          IP: 187.176.0.0 -- 187.179.127.255
                          IP: 189.205.0.0/16
                          IP: 189.207.0.0 -- 189.213.255.255
                          IP: 200.23.72.0/23
                          IP: 200.23.147.0/24
                          IP: 200.33.192.0/21
                          IP: 200.33.208.0 -- 200.33.231.255
                          IP: 200.34.64.0/19
                          IP: 200.34.141.0/24
                          IP: 200.36.96.0/19
                          IP: 200.38.64.0/19
                          IP: 200.38.224.0/19
                          IP: 200.39.224.0/19
                          IP: 200.52.0.0/20
                          IP: 200.52.32.0/19
                          IP: 200.56.0.0 -- 200.56.95.255
                          IP: 200.57.96.0/19
                          IP: 200.57.192.0/18
                          IP: 200.76.192.0/19
                          IP: 200.78.128.0/17
                          IP: 200.94.192.0/19
                          IP: 200.188.0.0/17
                          IP: 200.194.0.0/18
                          IP: 200.236.64.0/18
                          IP: 201.140.0.0/18
                          IP: 201.156.0.0/16
                          IP: 201.158.128.0/17
                          IP: 207.249.128.0/18
                          IP: 2806::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17559280 (0x10beef0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 18:41:00 2023 GMT
            Not After : Aug  1 06:00:00 2025 GMT
        Subject: CN=b29e0207ef6228f7f5d5995ae3679dc81aaf3156
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:10:a2:fe:97:55:b9:c0:1f:6e:79:f9:a8:96:
                    cf:ac:fd:cc:88:70:08:2b:77:4d:87:01:4b:20:1d:
                    09:52:c6:07:2b:b2:7c:03:d7:68:57:c3:af:70:6d:
                    0f:0b:7f:7b:c1:87:5b:db:44:50:9b:44:84:b4:46:
                    5a:18:27:0f:1a:31:f9:ef:aa:be:5d:96:fa:6e:d6:
                    a6:21:b5:a9:dd:09:40:c5:83:3b:bb:88:21:dd:df:
                    c7:0a:2e:49:3f:d9:82:cb:74:ca:21:58:81:bb:ad:
                    97:6b:87:99:d2:6f:48:57:2f:35:fe:28:41:a0:32:
                    ab:24:e6:10:bd:3e:27:06:9c:17:b7:aa:04:5e:ea:
                    cf:d6:22:de:db:3a:c4:08:d6:ff:91:6a:f0:d9:97:
                    60:4d:74:e2:f5:2b:f9:c9:1b:f4:34:4f:c1:0b:60:
                    8b:1d:da:7e:e4:e1:97:ed:86:68:39:20:80:32:b2:
                    08:c8:10:ed:56:44:a5:e7:02:4b:d3:62:3e:eb:86:
                    63:0e:5a:03:d5:3c:1a:10:3d:77:71:af:58:7a:0e:
                    aa:55:6d:19:0c:9f:7b:1b:ef:f8:e1:57:3a:dc:3e:
                    b9:d3:1c:a4:26:18:35:1b:e1:bf:16:91:ec:ef:75:
                    30:ae:90:fe:9f:c0:29:8b:58:46:ef:b5:79:18:1a:
                    9f:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:8F:64:B0:67:3E:F1:A0:8C:1E:A8:D8:8A:49:CA:D4:3E:8F:C3:89
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/b29e0207ef6228f7f5d5995ae3679dc81aaf3156.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.240.0.0/16
                  148.243.0.0/16
                  148.245.0.0/16
                  187.162.0.0-187.167.255.255
                  187.176.0.0-187.179.127.255
                  189.205.0.0/16
                  189.207.0.0-189.213.255.255
                  200.23.72.0/23
                  200.23.147.0/24
                  200.33.192.0/21
                  200.33.208.0-200.33.231.255
                  200.34.64.0/19
                  200.34.141.0/24
                  200.36.96.0/19
                  200.38.64.0/19
                  200.38.224.0/19
                  200.39.224.0/19
                  200.52.0.0/20
                  200.52.32.0/19
                  200.56.0.0-200.56.95.255
                  200.57.96.0/19
                  200.57.192.0/18
                  200.76.192.0/19
                  200.78.128.0/17
                  200.94.192.0/19
                  200.188.0.0/17
                  200.194.0.0/18
                  200.236.64.0/18
                  201.140.0.0/18
                  201.156.0.0/16
                  201.158.128.0/17
                  207.249.128.0/18
                IPv6:
                  2806::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6503
                  14000

    Signature Algorithm: sha256WithRSAEncryption
         ad:fc:9f:af:2a:34:53:c4:ea:be:f7:9f:ff:6c:e4:10:fa:1b:
         5c:54:f9:91:4c:25:a7:7b:1c:78:eb:90:7e:b4:ba:11:c3:e7:
         c7:dd:30:93:b8:7c:db:6f:ed:1c:86:1c:de:57:5d:72:df:ed:
         f3:9d:eb:4b:d2:5b:cd:fc:df:fb:25:e8:3f:bc:18:5d:8f:7a:
         de:14:d3:9f:7e:b7:c6:45:7c:c1:95:13:9f:95:33:c5:35:09:
         96:0d:00:5f:85:3c:1d:a8:1e:7b:d2:fe:e2:1f:4c:25:87:4f:
         78:e6:77:de:68:cd:e0:a8:6d:4c:5f:6a:8c:c3:2d:d4:a9:f3:
         26:c7:78:c1:54:b8:33:fb:40:5b:85:86:0a:d4:5c:d5:17:72:
         56:4f:96:32:00:2b:b7:78:75:0b:66:17:45:e4:03:bc:5e:b7:
         2d:bb:2e:2c:68:48:4c:99:f1:5f:5e:42:5d:bf:8d:4f:66:9a:
         b8:14:67:4c:b8:f3:8c:d7:05:2b:98:14:ec:ca:97:4e:a4:31:
         2a:f9:9e:40:96:15:4b:a2:44:e7:32:8f:84:05:7e:d3:27:83:
         b2:42:06:51:af:d8:e3:94:31:2d:32:4c:ea:0a:fd:82:22:12:
         25:6a:fd:af:f9:93:17:41:c5:40:6e:19:54:98:3d:48:ce:be:
         b8:be:ac:1d
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:29 2024 by rpki-client on console-ams.rpki-client.org