Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b4c8b3ac73cf9611eef90b72d21e700fe5e76d46.cer
File:                     b4c8b3ac73cf9611eef90b72d21e700fe5e76d46.cer (raw, json)
Hash identifier:          TPTYxOiiEILouDd3UuXJKUZn9v1rRSSJnB2iPOtJiyY=
Subject key identifier:   D6:C7:2F:6F:DF:68:89:DB:67:25:03:8D:A3:00:E1:AF:FC:A8:A5:3A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5839D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5798ae25-278c-4959-b96a-29ea8a456781/b4c8b3ac73cf9611eef90b72d21e700fe5e76d46.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5798ae25-278c-4959-b96a-29ea8a456781/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Apr 2023 04:00:23 +0000
Certificate not after:    Thu 22 Aug 2024 05:00:00 +0000
Subordinate resources:    AS: 12252
                          AS: 27702
                          IP: 179.6.0.0/15
                          IP: 190.81.0.0/16
                          IP: 190.113.192.0/19
                          IP: 190.116.0.0/14
                          IP: 190.222.0.0/15
                          IP: 200.24.160.0/19
                          IP: 200.62.128.0/17
                          IP: 200.108.96.0/20
                          IP: 201.130.24.0/22
                          IP: 216.244.128.0/18
                          IP: 2800:200::/32
                          IP: 2800:4b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15041437 (0xe5839d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 14 04:00:23 2023 GMT
            Not After : Aug 22 05:00:00 2024 GMT
        Subject: CN=b4c8b3ac73cf9611eef90b72d21e700fe5e76d46
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:8f:d3:29:72:d2:d0:ad:ae:33:fb:b4:a4:39:
                    06:45:cd:82:7b:66:ac:37:d0:d5:38:f4:8b:1a:ac:
                    5b:c5:d8:ef:6d:47:0e:ae:0c:a0:34:f8:49:c1:2c:
                    4d:86:dc:e9:52:63:0f:1e:39:b8:65:c6:ae:cd:d2:
                    d9:0f:4b:04:67:80:23:05:db:28:a1:0c:0a:9e:f3:
                    42:2a:8a:e5:cd:80:6c:8c:3e:3e:91:ef:91:21:81:
                    cc:ae:de:c6:74:26:3c:3c:f3:c8:0a:33:af:30:07:
                    d3:0d:24:28:5d:12:6e:90:31:f6:f0:88:5a:3d:f2:
                    6f:8b:bd:3f:1d:44:7f:1c:d1:af:9f:3e:0f:eb:3c:
                    3b:90:0a:54:ec:fd:89:a4:a9:de:5e:3a:70:a5:46:
                    e2:51:a9:e6:1d:28:6e:04:db:f6:15:f2:bf:07:8f:
                    89:14:b9:56:e5:24:59:f0:53:6f:c5:80:d2:c3:fe:
                    a7:ac:57:2d:4f:bc:8a:61:5b:2c:34:55:a7:5e:a3:
                    f9:c9:c2:0d:06:88:b9:b1:e2:66:15:b6:ca:5c:35:
                    81:06:ef:c6:80:41:d8:0e:f6:70:92:32:0b:bf:80:
                    d9:95:d4:c0:63:2a:52:ea:af:15:4e:59:d3:6a:41:
                    be:3c:5f:46:9d:59:92:50:1c:8e:20:26:af:66:6d:
                    62:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:C7:2F:6F:DF:68:89:DB:67:25:03:8D:A3:00:E1:AF:FC:A8:A5:3A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5798ae25-278c-4959-b96a-29ea8a456781/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5798ae25-278c-4959-b96a-29ea8a456781/b4c8b3ac73cf9611eef90b72d21e700fe5e76d46.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.6.0.0/15
                  190.81.0.0/16
                  190.113.192.0/19
                  190.116.0.0/14
                  190.222.0.0/15
                  200.24.160.0/19
                  200.62.128.0/17
                  200.108.96.0/20
                  201.130.24.0/22
                  216.244.128.0/18
                IPv6:
                  2800:200::/32
                  2800:4b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  12252
                  27702

    Signature Algorithm: sha256WithRSAEncryption
         6f:d1:26:dd:53:bd:66:79:9e:a6:33:69:99:6e:86:ca:60:e8:
         b0:8e:6f:2a:16:d2:22:f7:19:ec:52:04:05:95:15:34:37:d3:
         29:55:cc:d6:d4:3a:ce:23:d6:dc:c5:23:69:32:76:d1:e0:48:
         d3:2f:5e:0e:16:8a:12:f4:ea:32:ba:6e:16:c6:8b:86:20:8f:
         76:59:5a:b3:29:c6:47:21:0f:8e:65:79:d2:ea:ed:6d:7d:bc:
         76:3d:86:b3:0f:a1:24:60:d9:40:f5:46:ed:53:39:f5:47:81:
         d2:92:22:89:1f:31:c1:b0:51:b4:79:a0:1e:cf:40:64:af:37:
         85:83:cf:9a:65:e7:f2:8f:d7:63:df:d7:65:38:d7:f8:93:4c:
         d6:d4:3b:d9:bb:b7:cb:26:39:32:77:12:ff:38:b1:75:87:43:
         46:f9:3b:39:5c:0b:3b:0d:5f:be:c0:bf:b4:a3:3e:b3:ef:f9:
         e6:d4:3c:97:44:aa:25:8e:26:86:0b:08:29:e1:f3:82:10:a5:
         79:73:0b:30:39:65:bc:21:de:d9:c5:9f:0d:3a:09:cb:4d:3e:
         54:02:31:b4:0c:3e:ab:67:92:7f:e3:d3:39:96:0d:6f:24:0d:
         d1:2d:84:c2:e0:64:8a:bf:a8:55:2a:95:f5:51:7c:14:fa:a0:
         83:3a:c5:26
-----BEGIN CERTIFICATE-----
MIIGFjCCBP6gAwIBAgIEAOWDnTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQxNDA0MDAyM1oXDTI0MDgyMjA1MDAw
MFowMzExMC8GA1UEAxMoYjRjOGIzYWM3M2NmOTYxMWVlZjkwYjcyZDIxZTcwMGZl
NWU3NmQ0NjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALiP0yly0tCt
rjP7tKQ5BkXNgntmrDfQ1Tj0ixqsW8XY721HDq4MoDT4ScEsTYbc6VJjDx45uGXG
rs3S2Q9LBGeAIwXbKKEMCp7zQiqK5c2AbIw+PpHvkSGBzK7exnQmPDzzyAozrzAH
0w0kKF0SbpAx9vCIWj3yb4u9Px1EfxzRr58+D+s8O5AKVOz9iaSp3l46cKVG4lGp
5h0obgTb9hXyvwePiRS5VuUkWfBTb8WA0sP+p6xXLU+8imFbLDRVp16j+cnCDQaI
ubHiZhW2ylw1gQbvxoBB2A72cJIyC7+A2ZXUwGMqUuqvFU5Z02pBvjxfRp1ZklAc
jiAmr2ZtYh8CAwEAAaOCA0UwggNBMB0GA1UdDgQWBBTWxy9v32iJ22clA42jAOGv
/KilOjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy81Nzk4YWUyNS0yNzhj
LTQ5NTktYjk2YS0yOWVhOGE0NTY3ODEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNTc5OGFlMjUtMjc4Yy00
OTU5LWI5NmEtMjllYThhNDU2NzgxL2I0YzhiM2FjNzNjZjk2MTFlZWY5MGI3MmQy
MWU3MDBmZTVlNzZkNDYubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBn
BggrBgEFBQcBBwEB/wRYMFYwPgQCAAEwOAMDAbMGAwMAvlEDBAW+ccADAwK+dAMD
Ab7eAwQFyBigAwQHyD6AAwQEyGxgAwQCyYIYAwQG2PSAMBQEAgACMA4DBQAoAAIA
AwUAKAAEsDAdBggrBgEFBQcBCAEB/wQOMAygCjAIAgIv3AICbDYwDQYJKoZIhvcN
AQELBQADggEBAG/RJt1TvWZ5nqYzaZluhspg6LCObyoW0iL3GexSBAWVFTQ30ylV
zNbUOs4j1tzFI2kydtHgSNMvXg4WihL06jK6bhbGi4Ygj3ZZWrMpxkchD45ledLq
7W19vHY9hrMPoSRg2UD1Ru1TOfVHgdKSIokfMcGwUbR5oB7PQGSvN4WDz5pl5/KP
12Pf12U41/iTTNbUO9m7t8smOTJ3Ev84sXWHQ0b5OzlcCzsNX77Av7SjPrPv+ebU
PJdEqiWOJoYLCCnh84IQpXlzCzA5Zbwh3tnFnw06CctNPlQCMbQMPqtnkn/j0zmW
DW8kDdEthMLgZIq/qFUqlfVRfBT6oIM6xSY=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org