Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd2646502cfe0cea63e20030469d2192ca9a1904.cer
File:                     bd2646502cfe0cea63e20030469d2192ca9a1904.cer (raw, json)
Hash identifier:          TklIGK4gIfufUEuzYFlwNdM3LU2qBTEwAOVT9xL3/V0=
Subject key identifier:   2A:CA:56:89:20:86:AB:2D:CB:75:83:74:7E:30:04:02:BB:C8:FF:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010083B9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/82c08c8b-6289-409d-a5bf-b2cffb800ff0/bd2646502cfe0cea63e20030469d2192ca9a1904.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/82c08c8b-6289-409d-a5bf-b2cffb800ff0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:04:14 +0000
Certificate not after:    Wed 18 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 11432
                          IP: 200.155.128.0/18
                          IP: 200.170.192.0/18
                          IP: 200.194.248.0/21
                          IP: 200.201.128.0/19
                          IP: 2804:138::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16810937 (0x10083b9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:04:14 2023 GMT
            Not After : Sep 18 15:00:00 2024 GMT
        Subject: CN=bd2646502cfe0cea63e20030469d2192ca9a1904
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:de:77:19:f9:57:bd:38:e2:16:14:40:0e:0f:
                    0a:6b:64:37:5f:50:81:af:6a:59:38:25:42:26:0e:
                    30:5e:e2:ed:ba:b3:7c:d5:27:06:b2:52:de:1b:ef:
                    54:59:b5:a6:fa:08:ce:76:92:7f:55:f9:b7:60:ce:
                    98:82:0f:c6:87:00:6f:41:99:56:14:91:de:56:95:
                    5f:7b:70:bd:81:f9:01:51:bf:9f:67:a2:b7:b5:41:
                    f1:48:56:2c:06:07:57:5c:8c:af:0f:2c:bd:22:b3:
                    22:3c:f2:3b:32:d7:4f:4f:f9:31:8e:af:a3:61:56:
                    e9:98:3a:b8:e5:83:51:a9:36:ce:2b:04:c5:77:e6:
                    73:a5:60:aa:7a:cb:5f:06:11:3e:0d:e5:8d:8c:9e:
                    36:a2:4a:04:d5:f3:99:05:23:6f:61:1d:5f:09:ff:
                    e1:d2:b6:2f:16:d3:f2:99:af:25:bc:e8:49:7e:7d:
                    0e:3b:46:72:ee:12:fa:8d:6c:45:d5:6c:aa:70:d4:
                    b5:85:32:ee:15:9b:c5:86:df:49:ef:24:84:66:cf:
                    95:47:5f:0e:c6:54:87:ec:4c:e3:a1:86:ea:db:b4:
                    5a:85:c3:95:b2:b4:33:c9:48:a0:39:4c:d2:97:2f:
                    c0:a2:0a:4d:ca:27:96:e2:46:ca:b3:ce:5e:3e:0c:
                    4a:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:CA:56:89:20:86:AB:2D:CB:75:83:74:7E:30:04:02:BB:C8:FF:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/82c08c8b-6289-409d-a5bf-b2cffb800ff0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/82c08c8b-6289-409d-a5bf-b2cffb800ff0/bd2646502cfe0cea63e20030469d2192ca9a1904.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.155.128.0/18
                  200.170.192.0/18
                  200.194.248.0/21
                  200.201.128.0/19
                IPv6:
                  2804:138::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11432

    Signature Algorithm: sha256WithRSAEncryption
         65:1a:6a:2f:4d:40:c8:c1:1f:e2:0e:a8:2d:b0:4f:9d:d1:2d:
         62:ae:dc:e4:89:85:aa:eb:41:77:70:ed:32:ec:55:61:b1:7d:
         19:7e:da:9a:6d:a6:e6:2b:34:4c:73:8d:4e:e0:43:df:c6:5c:
         39:2c:ae:76:e9:28:29:6e:84:89:e3:29:24:7c:c4:fb:cf:d6:
         e5:e8:ce:19:7d:6c:59:65:83:ca:58:a5:4d:fb:f6:0b:cf:f9:
         01:e0:8b:94:99:df:79:57:6b:dc:bd:8d:43:16:56:93:48:1a:
         65:ab:94:a8:46:6d:59:0b:9c:43:46:d7:a4:d0:e1:76:e5:5d:
         7c:d5:40:9b:f0:2b:f9:de:f1:cf:36:34:1f:5e:3e:aa:4b:af:
         95:4f:8c:87:a3:2c:4d:e6:97:09:27:58:54:4e:6b:f4:e2:d7:
         69:5e:18:4d:5b:a5:35:63:58:ff:ad:fc:12:04:92:e6:d4:1c:
         56:ee:bc:17:ef:02:44:47:1b:68:a1:ff:d9:1d:34:85:d1:30:
         43:48:53:94:1b:8a:78:88:21:64:ae:65:91:8d:bc:a4:4b:d3:
         31:fd:81:e4:23:b7:12:79:c8:9a:ff:4c:dd:0f:be:a8:be:6e:
         35:df:f8:4e:e8:1e:a4:90:cd:f8:e5:8d:6b:67:07:7d:10:36:
         42:43:22:0c
-----BEGIN CERTIFICATE-----
MIIF6zCCBNOgAwIBAgIEAQCDuTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTEwNzE5MDQxNFoXDTI0MDkxODE1MDAw
MFowMzExMC8GA1UEAxMoYmQyNjQ2NTAyY2ZlMGNlYTYzZTIwMDMwNDY5ZDIxOTJj
YTlhMTkwNDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIzedxn5V704
4hYUQA4PCmtkN19Qga9qWTglQiYOMF7i7bqzfNUnBrJS3hvvVFm1pvoIznaSf1X5
t2DOmIIPxocAb0GZVhSR3laVX3twvYH5AVG/n2eit7VB8UhWLAYHV1yMrw8svSKz
IjzyOzLXT0/5MY6vo2FW6Zg6uOWDUak2zisExXfmc6VgqnrLXwYRPg3ljYyeNqJK
BNXzmQUjb2EdXwn/4dK2LxbT8pmvJbzoSX59DjtGcu4S+o1sRdVsqnDUtYUy7hWb
xYbfSe8khGbPlUdfDsZUh+xM46GG6tu0WoXDlbK0M8lIoDlM0pcvwKIKTconluJG
yrPOXj4MSrcCAwEAAaOCAxowggMWMB0GA1UdDgQWBBQqylaJIIarLct1g3R+MAQC
u8j/WzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy84MmMwOGM4Yi02Mjg5
LTQwOWQtYTViZi1iMmNmZmI4MDBmZjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvODJjMDhjOGItNjI4OS00
MDlkLWE1YmYtYjJjZmZiODAwZmYwL2JkMjY0NjUwMmNmZTBjZWE2M2UyMDAzMDQ2
OWQyMTkyY2E5YTE5MDQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEBsibgAMEBsiqwAMEA8jC+AMEBcjJ
gDANBAIAAjAHAwUAKAQBODAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgIsqDANBgkq
hkiG9w0BAQsFAAOCAQEAZRpqL01AyMEf4g6oLbBPndEtYq7c5ImFqutBd3DtMuxV
YbF9GX7amm2m5is0THONTuBD38ZcOSyudukoKW6EieMpJHzE+8/W5ejOGX1sWWWD
ylilTfv2C8/5AeCLlJnfeVdr3L2NQxZWk0gaZauUqEZtWQucQ0bXpNDhduVdfNVA
m/Ar+d7xzzY0H14+qkuvlU+Mh6MsTeaXCSdYVE5r9OLXaV4YTVulNWNY/638EgSS
5tQcVu68F+8CREcbaKH/2R00hdEwQ0hTlBuKeIghZK5lkY28pEvTMf2B5CO3EnnI
mv9M3Q++qL5uNd/4TugepJDN+OWNa2cHfRA2QkMiDA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:29 2024 by rpki-client on console-ams.rpki-client.org