Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf32c440f6d298edbc3b18cdfef6f6a2739acb6b.cer
File:                     bf32c440f6d298edbc3b18cdfef6f6a2739acb6b.cer (raw, json)
Hash identifier:          2E0OHVNRbBMFC4hmyA36kBrkFJmOG2MsTWwYbm8HO5Y=
Subject key identifier:   25:19:85:DF:F7:45:96:8F:07:C4:C9:37:22:95:7C:B9:5E:81:E3:EF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC0AB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/de51a9cd-0fb7-4d0b-9b2a-e01c65dd8ee2/bf32c440f6d298edbc3b18cdfef6f6a2739acb6b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/de51a9cd-0fb7-4d0b-9b2a-e01c65dd8ee2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 22:28:52 +0000
Certificate not after:    Tue 22 Oct 2024 15:18:34 +0000
Subordinate resources:    AS: 263717
                          IP: 132.255.164.0/22
                          IP: 167.250.36.0/22
                          IP: 170.82.144.0/22
                          IP: 170.84.172.0/22
                          IP: 2803:e780::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15469236 (0xec0ab4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 31 22:28:52 2023 GMT
            Not After : Oct 22 15:18:34 2024 GMT
        Subject: CN=bf32c440f6d298edbc3b18cdfef6f6a2739acb6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:19:c7:17:a0:99:3a:5d:27:ac:96:09:c9:fe:
                    01:cc:41:85:d7:76:9d:9e:43:75:aa:27:c9:cf:3a:
                    11:c2:f1:d2:34:a8:17:b8:52:f4:d0:47:a9:68:71:
                    8c:76:d7:d0:8c:98:8d:cc:10:35:f3:43:3f:8c:3c:
                    38:b9:26:a0:2e:6d:3c:0f:94:af:71:11:11:ff:1a:
                    67:12:17:4c:2c:65:13:d1:56:26:cc:f4:e3:58:53:
                    a0:c8:bb:ee:bf:5e:95:08:79:35:b2:2a:1d:ca:67:
                    21:27:68:86:99:84:06:d3:58:74:e6:cb:54:79:a8:
                    1f:8c:8e:42:11:6b:83:4f:37:58:bc:aa:97:0b:d2:
                    4c:ca:bb:15:fc:89:ea:53:a9:66:8a:1e:a2:27:13:
                    8c:0a:0f:fc:5c:be:60:51:e9:d1:8c:34:8c:e6:6e:
                    31:a1:5c:e6:7e:c2:88:8f:82:44:cd:52:b1:05:29:
                    83:f7:6a:48:a5:e9:94:01:72:8e:4f:90:02:d1:9b:
                    6c:37:59:e3:2c:30:7f:60:81:2c:3b:43:13:e4:b9:
                    32:bc:43:04:c2:c8:85:0f:e9:8d:5b:50:0a:50:07:
                    34:cf:69:bb:36:8a:88:2f:1a:41:42:c3:4e:2a:5a:
                    ec:b0:2c:61:96:2a:bd:93:d8:fa:21:8d:f1:74:db:
                    f6:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:19:85:DF:F7:45:96:8F:07:C4:C9:37:22:95:7C:B9:5E:81:E3:EF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/de51a9cd-0fb7-4d0b-9b2a-e01c65dd8ee2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/de51a9cd-0fb7-4d0b-9b2a-e01c65dd8ee2/bf32c440f6d298edbc3b18cdfef6f6a2739acb6b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.164.0/22
                  167.250.36.0/22
                  170.82.144.0/22
                  170.84.172.0/22
                IPv6:
                  2803:e780::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263717

    Signature Algorithm: sha256WithRSAEncryption
         83:26:39:d2:63:89:cd:a6:0d:fd:f9:36:57:95:48:f8:ff:a0:
         9a:2c:ad:f2:40:9c:d3:5d:d5:97:51:22:9b:ab:8f:79:1a:10:
         64:ab:24:5d:a2:bc:fc:6e:d3:49:60:a7:03:10:b0:8c:2f:92:
         d2:bc:0e:33:88:60:2e:c1:af:90:ff:ea:c5:ab:83:e3:ac:bb:
         43:85:48:7a:18:82:7e:dc:91:70:31:b7:51:9d:6b:36:4e:06:
         2d:0c:ca:28:b5:42:c3:4a:5a:b6:c1:33:75:3f:7e:fa:bc:7f:
         bd:19:31:68:09:01:3e:db:db:f6:63:d1:dd:5e:18:b2:f0:8a:
         1f:29:65:9e:92:6e:4d:de:d6:a9:b9:be:ee:00:d3:1b:07:8a:
         ee:cc:5c:b9:d4:8d:e4:f7:00:3f:3a:1a:25:72:90:f1:34:f3:
         77:6a:8b:ce:29:60:a1:7c:ae:c7:5e:52:25:1b:ee:a3:3a:bd:
         3a:7f:b4:b5:e9:5f:42:bf:79:a7:01:01:0b:74:f0:c0:d0:fd:
         cb:d0:32:b7:11:c1:f5:61:d8:55:3a:d1:cc:b5:52:4e:73:38:
         5b:2f:ae:04:79:6d:3b:02:3d:4c:65:6c:59:09:15:5d:53:06:
         b0:d9:c9:c8:6d:39:09:60:f7:86:74:ef:50:8f:a0:5a:d3:e3:
         47:d6:cd:31
-----BEGIN CERTIFICATE-----
MIIF7DCCBNSgAwIBAgIEAOwKtDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUzMTIyMjg1MloXDTI0MTAyMjE1MTgz
NFowMzExMC8GA1UEAxMoYmYzMmM0NDBmNmQyOThlZGJjM2IxOGNkZmVmNmY2YTI3
MzlhY2I2YjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI4ZxxegmTpd
J6yWCcn+AcxBhdd2nZ5Ddaonyc86EcLx0jSoF7hS9NBHqWhxjHbX0IyYjcwQNfND
P4w8OLkmoC5tPA+Ur3EREf8aZxIXTCxlE9FWJsz041hToMi77r9elQh5NbIqHcpn
ISdohpmEBtNYdObLVHmoH4yOQhFrg083WLyqlwvSTMq7FfyJ6lOpZooeoicTjAoP
/Fy+YFHp0Yw0jOZuMaFc5n7CiI+CRM1SsQUpg/dqSKXplAFyjk+QAtGbbDdZ4yww
f2CBLDtDE+S5MrxDBMLIhQ/pjVtQClAHNM9puzaKiC8aQULDTipa7LAsYZYqvZPY
+iGN8XTb9q0CAwEAAaOCAxswggMXMB0GA1UdDgQWBBQlGYXf90WWjwfEyTcilXy5
XoHj7zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kZTUxYTljZC0wZmI3
LTRkMGItOWIyYS1lMDFjNjVkZDhlZTIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZGU1MWE5Y2QtMGZiNy00
ZDBiLTliMmEtZTAxYzY1ZGQ4ZWUyL2JmMzJjNDQwZjZkMjk4ZWRiYzNiMThjZGZl
ZjZmNmEyNzM5YWNiNmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBA
BggrBgEFBQcBBwEB/wQxMC8wHgQCAAEwGAMEAoT/pAMEAqf6JAMEAqpSkAMEAqpU
rDANBAIAAjAHAwUAKAPngDAaBggrBgEFBQcBCAEB/wQLMAmgBzAFAgMEBiUwDQYJ
KoZIhvcNAQELBQADggEBAIMmOdJjic2mDf35NleVSPj/oJosrfJAnNNd1ZdRIpur
j3kaEGSrJF2ivPxu00lgpwMQsIwvktK8DjOIYC7Br5D/6sWrg+Osu0OFSHoYgn7c
kXAxt1GdazZOBi0Myii1QsNKWrbBM3U/fvq8f70ZMWgJAT7b2/Zj0d1eGLLwih8p
ZZ6Sbk3e1qm5vu4A0xsHiu7MXLnUjeT3AD86GiVykPE083dqi84pYKF8rsdeUiUb
7qM6vTp/tLXpX0K/eacBAQt08MDQ/cvQMrcRwfVh2FU60cy1Uk5zOFsvrgR5bTsC
PUxlbFkJFV1TBrDZychtOQlg94Z071CPoFrT40fWzTE=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:29 2024 by rpki-client on console-ams.rpki-client.org