Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4295d606394c7ad9d08b793d9446f63fa4a8646.cer
File:                     b4295d606394c7ad9d08b793d9446f63fa4a8646.cer (raw, json)
Hash identifier:          OkvFyHDtfYAwvb7CP/putfmQRjfMsZcj6LlnxHTpFVY=
Subject key identifier:   F9:84:B2:4F:D3:69:DB:71:7C:AC:43:BF:BC:6E:3D:B6:95:2F:7B:DC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108B2AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5bf79d33-1d35-4ba3-86e4-8cbc2ec14534/b4295d606394c7ad9d08b793d9446f63fa4a8646.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5bf79d33-1d35-4ba3-86e4-8cbc2ec14534/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 15:55:20 +0000
Certificate not after:    Mon 16 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 2715
                          IP: 200.6.41.0/24
                          IP: 200.20.0.0 -- 200.20.27.255
                          IP: 200.20.56.0 -- 200.20.255.255
                          IP: 200.156.0.0/19
                          IP: 200.156.64.0 -- 200.156.255.255
                          IP: 2804:1f10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17347245 (0x108b2ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 29 15:55:20 2024 GMT
            Not After : Dec 16 14:00:00 2024 GMT
        Subject: CN=b4295d606394c7ad9d08b793d9446f63fa4a8646
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:90:44:4d:2f:6e:53:db:d6:02:a8:8a:42:70:
                    90:ba:05:b5:64:e1:7f:54:74:8e:f2:3e:27:a4:aa:
                    3e:b7:50:9c:72:65:5a:9e:8b:58:ac:8d:34:73:7e:
                    ae:b1:7a:8d:cd:c8:0a:4a:a4:0b:d4:3d:2c:e2:8d:
                    ce:32:0b:3d:06:98:50:55:45:cb:79:cb:8b:d3:36:
                    f7:d7:c0:b4:4a:72:d0:ab:e8:59:b4:0a:98:36:f0:
                    c6:12:de:7c:3c:dd:d9:8f:8b:dd:b4:44:7e:83:05:
                    0e:46:90:df:a0:0a:61:55:aa:f3:50:71:38:38:8f:
                    99:82:20:0f:dd:65:eb:f8:86:c7:5e:fb:41:8e:c2:
                    f2:e4:b7:0b:76:64:a9:69:93:b5:59:b3:01:53:47:
                    d6:54:27:e9:4c:f5:15:c4:80:c6:2f:15:08:82:ac:
                    79:a1:ee:c6:ab:86:8e:31:38:ed:d0:60:e0:b0:7d:
                    bc:7e:e3:73:c5:c1:2f:2c:00:cf:b2:87:2c:fe:7c:
                    b1:88:ed:bf:b5:30:83:52:a5:7d:93:d6:b0:21:4a:
                    ea:ad:62:85:85:09:0f:34:35:a9:46:68:03:a4:a8:
                    d2:e4:b7:b5:52:db:82:0c:bb:77:27:e6:e0:ca:c1:
                    2b:0f:09:0e:e6:1f:07:30:3a:c6:67:bf:ab:ff:39:
                    b4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:84:B2:4F:D3:69:DB:71:7C:AC:43:BF:BC:6E:3D:B6:95:2F:7B:DC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5bf79d33-1d35-4ba3-86e4-8cbc2ec14534/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5bf79d33-1d35-4ba3-86e4-8cbc2ec14534/b4295d606394c7ad9d08b793d9446f63fa4a8646.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.41.0/24
                  200.20.0.0-200.20.27.255
                  200.20.56.0-200.20.255.255
                  200.156.0.0/19
                  200.156.64.0-200.156.255.255
                IPv6:
                  2804:1f10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  2715

    Signature Algorithm: sha256WithRSAEncryption
         7b:18:36:51:a9:05:f4:80:69:2d:80:f1:31:84:a7:6c:fa:b5:
         84:45:5a:65:2c:85:2e:92:66:f1:cb:49:ab:ed:a7:84:9b:58:
         c9:4f:ef:33:0c:25:fa:12:26:43:d9:c9:cc:bc:bb:3a:aa:d0:
         26:62:3e:8b:3b:8b:6c:43:3b:73:42:c3:40:85:19:8a:0f:42:
         86:34:80:42:05:4f:20:c1:8b:92:19:54:62:f6:31:5e:02:2b:
         c3:cb:99:fc:0b:0f:99:0b:25:ea:51:41:48:dd:9d:99:71:49:
         93:24:4a:5a:66:0c:c3:9b:a6:d4:ca:22:f1:e9:ef:25:02:d1:
         6a:6c:8c:b0:49:9e:d1:9e:bf:5c:ab:42:c6:cb:31:75:10:5e:
         3f:ee:0e:07:6d:d5:21:c6:64:08:af:d1:5d:1d:b0:f7:80:e1:
         46:55:51:24:b3:b0:3b:7f:8e:1b:67:80:14:db:6c:64:29:75:
         4a:5c:e6:a4:3e:b4:aa:57:7a:9c:10:c8:cc:e2:cd:da:d2:ca:
         10:72:e4:99:7f:40:bf:30:29:1d:65:d7:0a:fe:7c:76:1c:9f:
         17:ed:87:6f:19:d7:8c:5a:c1:1f:8d:b5:f1:c8:bd:0d:76:d3:
         cf:4d:9f:85:e0:82:5a:52:41:c2:63:71:84:e5:07:01:77:84:
         a8:7b:3b:99
-----BEGIN CERTIFICATE-----
MIIGBjCCBO6gAwIBAgIEAQiyrTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDEyOTE1NTUyMFoXDTI0MTIxNjE0MDAw
MFowMzExMC8GA1UEAxMoYjQyOTVkNjA2Mzk0YzdhZDlkMDhiNzkzZDk0NDZmNjNm
YTRhODY0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJOQRE0vblPb
1gKoikJwkLoFtWThf1R0jvI+J6SqPrdQnHJlWp6LWKyNNHN+rrF6jc3ICkqkC9Q9
LOKNzjILPQaYUFVFy3nLi9M299fAtEpy0KvoWbQKmDbwxhLefDzd2Y+L3bREfoMF
DkaQ36AKYVWq81BxODiPmYIgD91l6/iGx177QY7C8uS3C3ZkqWmTtVmzAVNH1lQn
6Uz1FcSAxi8VCIKseaHuxquGjjE47dBg4LB9vH7jc8XBLywAz7KHLP58sYjtv7Uw
g1KlfZPWsCFK6q1ihYUJDzQ1qUZoA6So0uS3tVLbggy7dyfm4MrBKw8JDuYfBzA6
xme/q/85tPcCAwEAAaOCAzUwggMxMB0GA1UdDgQWBBT5hLJP02nbcXysQ7+8bj22
lS973DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81YmY3OWQzMy0xZDM1
LTRiYTMtODZlNC04Y2JjMmVjMTQ1MzQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNWJmNzlkMzMtMWQzNS00
YmEzLTg2ZTQtOGNiYzJlYzE0NTM0L2I0Mjk1ZDYwNjM5NGM3YWQ5ZDA4Yjc5M2Q5
NDQ2ZjYzZmE0YTg2NDYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBb
BggrBgEFBQcBBwEB/wRMMEowOQQCAAEwMwMEAMgGKTALAwMCyBQDBALIFBgwCwME
A8gUOAMDAMgUAwQFyJwAMAsDBAbInEADAwDInDANBAIAAjAHAwUAKAQfEDAZBggr
BgEFBQcBCAEB/wQKMAigBjAEAgIKmzANBgkqhkiG9w0BAQsFAAOCAQEAexg2UakF
9IBpLYDxMYSnbPq1hEVaZSyFLpJm8ctJq+2nhJtYyU/vMwwl+hImQ9nJzLy7OqrQ
JmI+izuLbEM7c0LDQIUZig9ChjSAQgVPIMGLkhlUYvYxXgIrw8uZ/AsPmQsl6lFB
SN2dmXFJkyRKWmYMw5um1Moi8envJQLRamyMsEme0Z6/XKtCxssxdRBeP+4OB23V
IcZkCK/RXR2w94DhRlVRJLOwO3+OG2eAFNtsZCl1SlzmpD60qld6nBDIzOLN2tLK
EHLkmX9AvzApHWXXCv58dhyfF+2HbxnXjFrBH4218ci9DXbTz02fheCCWlJBwmNx
hOUHAXeEqHs7mQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:28 2024 by rpki-client on console-ams.rpki-client.org