Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b5d933e43bb68e4aa0afa4157c889b4b406113c5.cer
File:                     b5d933e43bb68e4aa0afa4157c889b4b406113c5.cer (raw, json)
Hash identifier:          QCjxxIBFe5pIVSSlS8g6ls4txujz2mibpd7+X9FCl7c=
Subject key identifier:   B3:37:DF:2A:CC:B3:F7:ED:65:5C:18:67:7B:E3:DB:1E:D5:AC:59:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC42DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/b5d933e43bb68e4aa0afa4157c889b4b406113c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 May 2019 19:35:19 +0000
Certificate not after:    Fri 16 Feb 2024 19:33:25 +0000
Subordinate resources:    IP: 161.0.192.0/19
                          IP: 186.32.128.0/19
                          IP: 186.32.224.0 -- 186.32.247.255
                          IP: 190.53.48.0 -- 190.53.95.255
                          IP: 190.53.192.0/18
                          IP: 190.99.0.0 -- 190.99.23.255
                          IP: 190.181.192.0/18
                          IP: 2803:f400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14435036 (0xdc42dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  9 19:35:19 2019 GMT
            Not After : Feb 16 19:33:25 2024 GMT
        Subject: CN=b5d933e43bb68e4aa0afa4157c889b4b406113c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:8c:2d:d2:44:25:11:a6:b5:f6:c5:b3:f6:c0:
                    ae:f2:9b:8a:0f:4f:73:0d:a4:aa:22:1a:8d:f2:b7:
                    fc:4b:ad:2f:a9:dc:66:1b:55:14:cb:8a:f2:31:99:
                    72:1d:c8:7a:4d:9c:ec:49:07:dd:26:69:ef:2d:b0:
                    a4:3a:7d:53:bd:dc:0a:df:de:c1:ec:f9:11:9b:78:
                    b7:34:20:a2:1b:a3:34:1c:65:04:c0:66:3b:39:a4:
                    da:93:9c:03:2c:a3:f3:0e:3d:69:65:82:ee:50:71:
                    aa:1a:c6:bc:d7:e1:63:2f:9a:c9:59:51:41:d0:cb:
                    29:60:e9:22:4e:b3:46:14:60:6e:9a:84:38:2e:3d:
                    13:a3:e4:be:03:48:c0:0c:ab:b9:bc:2b:f6:61:d7:
                    5e:6d:59:a8:95:61:88:5f:ff:99:56:47:67:53:5f:
                    4b:c0:75:5b:e2:f3:83:8b:19:98:3a:39:f9:1a:53:
                    9c:39:01:b2:9a:ee:5e:a3:64:c0:14:55:40:f9:1e:
                    4d:1c:d2:35:11:d1:90:b9:82:55:90:2f:66:bd:2f:
                    2e:ac:dc:5f:8f:67:17:e9:73:86:7f:97:18:54:c6:
                    10:99:27:bc:e9:b8:77:9a:06:46:c4:57:b7:83:25:
                    66:25:cc:48:3f:df:40:58:12:9e:a5:50:cf:74:05:
                    6a:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:37:DF:2A:CC:B3:F7:ED:65:5C:18:67:7B:E3:DB:1E:D5:AC:59:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a65848fe-1463-4488-be2c-2daf76af068a/b5d933e43bb68e4aa0afa4157c889b4b406113c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.0.192.0/19
                  186.32.128.0/19
                  186.32.224.0-186.32.247.255
                  190.53.48.0-190.53.95.255
                  190.53.192.0/18
                  190.99.0.0-190.99.23.255
                  190.181.192.0/18
                IPv6:
                  2803:f400::/32

    Signature Algorithm: sha256WithRSAEncryption
         54:26:a1:e7:5f:cb:af:42:d6:91:a1:0b:b0:12:e9:3e:68:0f:
         cf:94:13:52:c4:52:0b:79:66:cb:12:57:40:bc:10:3e:42:95:
         dc:b6:de:0f:c1:5f:ff:fe:f7:66:66:73:39:07:3c:36:f4:23:
         39:fc:00:95:2e:4a:11:a9:fe:34:20:a0:58:bc:e2:cc:54:ce:
         31:29:80:0f:df:8e:61:ec:d6:92:e9:f1:00:4d:3f:12:e2:8f:
         e4:c7:50:b5:31:cd:0c:31:19:21:c4:33:39:27:8d:e7:76:52:
         e5:d2:84:4b:5a:99:b9:4f:42:30:df:80:ec:66:25:02:19:b4:
         0b:d8:50:91:e3:43:5a:98:57:ea:8d:25:02:b9:45:ad:34:f5:
         ec:1c:4d:c8:a8:02:63:61:80:17:47:65:78:9c:de:70:7f:35:
         79:f1:00:a8:ff:be:8f:c6:ab:ff:61:3b:81:6f:6e:86:20:cc:
         4f:62:28:57:7c:d5:25:21:09:e9:19:b7:e0:a1:30:ca:b3:02:
         8a:55:06:5e:bb:71:96:3d:fa:24:57:fa:13:e0:9b:4e:24:48:
         c7:17:6e:31:2a:89:88:04:d1:a9:87:46:97:d0:ac:5f:c7:0b:
         8e:26:a7:56:2c:1b:b0:94:e4:29:08:2d:f9:2a:e8:cb:fe:9f:
         ac:54:cc:7c
-----BEGIN CERTIFICATE-----
MIIF+TCCBOGgAwIBAgIEANxC3DANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE5MDUwOTE5MzUxOVoXDTI0MDIxNjE5MzMy
NVowMzExMC8GA1UEAxMoYjVkOTMzZTQzYmI2OGU0YWEwYWZhNDE1N2M4ODliNGI0
MDYxMTNjNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAISMLdJEJRGm
tfbFs/bArvKbig9Pcw2kqiIajfK3/EutL6ncZhtVFMuK8jGZch3Iek2c7EkH3SZp
7y2wpDp9U73cCt/ewez5EZt4tzQgohujNBxlBMBmOzmk2pOcAyyj8w49aWWC7lBx
qhrGvNfhYy+ayVlRQdDLKWDpIk6zRhRgbpqEOC49E6PkvgNIwAyrubwr9mHXXm1Z
qJVhiF//mVZHZ1NfS8B1W+Lzg4sZmDo5+RpTnDkBspruXqNkwBRVQPkeTRzSNRHR
kLmCVZAvZr0vLqzcX49nF+lzhn+XGFTGEJknvOm4d5oGRsRXt4MlZiXMSD/fQFgS
nqVQz3QFauUCAwEAAaOCAygwggMkMB0GA1UdDgQWBBSzN98qzLP37WVcGGd749se
1axZtjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9hNjU4NDhmZS0xNDYz
LTQ0ODgtYmUyYy0yZGFmNzZhZjA2OGEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYTY1ODQ4ZmUtMTQ2My00
NDg4LWJlMmMtMmRhZjc2YWYwNjhhL2I1ZDkzM2U0M2JiNjhlNGFhMGFmYTQxNTdj
ODg5YjRiNDA2MTEzYzUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBp
BggrBgEFBQcBBwEB/wRaMFgwRwQCAAEwQQMEBaEAwAMEBboggDAMAwQFuiDgAwQD
uiDwMAwDBAS+NTADBAW+NUADBAa+NcAwCwMDAL5jAwQDvmMQAwQGvrXAMA0EAgAC
MAcDBQAoA/QAMA0GCSqGSIb3DQEBCwUAA4IBAQBUJqHnX8uvQtaRoQuwEuk+aA/P
lBNSxFILeWbLEldAvBA+QpXctt4PwV///vdmZnM5Bzw29CM5/ACVLkoRqf40IKBY
vOLMVM4xKYAP345h7NaS6fEATT8S4o/kx1C1Mc0MMRkhxDM5J43ndlLl0oRLWpm5
T0Iw34DsZiUCGbQL2FCR40NamFfqjSUCuUWtNPXsHE3IqAJjYYAXR2V4nN5wfzV5
8QCo/76Pxqv/YTuBb26GIMxPYihXfNUlIQnpGbfgoTDKswKKVQZeu3GWPfokV/oT
4JtOJEjHF24xKomIBNGph0aX0KxfxwuOJqdWLBuwlOQpCC35KujL/p+sVMx8
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org