Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer
File:                     bfbb4d3a6dd5e649a6554c4817ce0ed277429136.cer (raw, json)
Hash identifier:          UvuKPWHRC3v77Dwc/k+iPPSENMtcKYu1GMNrRZSI/DI=
Subject key identifier:   76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE0681
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Jan 2022 19:43:47 +0000
Certificate not after:    Fri 17 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 4926
                          AS: 10834
                          AS: 22927
                          IP: 138.219.80.0/22
                          IP: 168.226.0.0/16
                          IP: 179.36.0.0 -- 179.41.255.255
                          IP: 181.20.0.0 -- 181.27.255.255
                          IP: 186.38.0.0/15
                          IP: 186.56.0.0/13
                          IP: 186.128.0.0/13
                          IP: 190.48.0.0/14
                          IP: 190.172.0.0 -- 190.179.255.255
                          IP: 191.80.0.0 -- 191.85.255.255
                          IP: 200.0.192.0/23
                          IP: 200.0.224.0/19
                          IP: 200.5.64.0/18
                          IP: 200.5.192.0/18
                          IP: 200.9.212.0/23
                          IP: 200.9.235.0/24
                          IP: 200.10.96.0 -- 200.10.129.255
                          IP: 200.16.128.0/17
                          IP: 200.32.32.0/19
                          IP: 200.41.128.0/17
                          IP: 200.51.0.0/16
                          IP: 200.63.128.0/18
                          IP: 200.70.0.0/16
                          IP: 201.176.0.0 -- 201.181.255.255
                          IP: 201.250.0.0/15
                          IP: 201.254.0.0/15
                          IP: 209.13.0.0/16
                          IP: 2800:380::/31
                          IP: 2802:8000::/25

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16647809 (0xfe0681)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 13 19:43:47 2022 GMT
            Not After : Jan 17 05:00:00 2025 GMT
        Subject: CN=bfbb4d3a6dd5e649a6554c4817ce0ed277429136
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:68:6e:e6:e7:0e:36:96:0d:a9:86:b6:df:de:
                    0a:8a:7b:46:20:cd:4e:bd:0e:02:50:8a:ab:b6:51:
                    fd:2b:46:58:a2:ec:2b:d3:dd:66:a0:92:58:38:c3:
                    bb:d2:6a:88:82:1c:5c:5c:51:94:9b:73:ec:08:7c:
                    44:98:c9:eb:32:46:8b:06:2b:6a:8d:bc:4b:e7:f0:
                    93:33:55:a1:16:9a:93:b0:b4:06:15:55:c9:be:72:
                    d1:4b:39:42:0e:2e:1c:c2:96:10:7d:c8:33:92:f3:
                    79:f2:59:0a:fa:7f:43:2e:38:f6:4c:fe:8e:96:36:
                    40:b4:74:aa:79:ee:2a:fd:7c:81:ce:1d:22:9d:c3:
                    b3:97:d0:96:e6:d5:4c:fd:83:65:d1:69:d0:1d:f0:
                    33:4e:c0:88:ea:ba:49:38:d5:7c:64:96:30:de:44:
                    58:82:dd:ea:9e:da:5a:e5:45:3e:7e:6e:2a:56:ae:
                    26:ce:de:d7:c3:00:ab:ef:69:e4:60:6b:75:35:e4:
                    81:6c:c7:f5:97:4c:6d:df:27:d8:d8:c6:cd:fa:eb:
                    da:f8:66:74:cf:a2:0c:ef:49:92:25:ec:ec:5f:ff:
                    35:c3:9e:c6:f1:d6:3d:7e:5a:ff:36:2f:ab:df:eb:
                    29:3b:b8:ed:58:b3:da:9d:a9:fa:ff:74:86:f8:a9:
                    14:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:7F:42:4D:48:34:06:C4:20:E5:DF:19:BE:BE:99:3F:72:5A:F7:B6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5375bcfc-8b86-452e-850d-83cfe3b50f06/bfbb4d3a6dd5e649a6554c4817ce0ed277429136.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.219.80.0/22
                  168.226.0.0/16
                  179.36.0.0-179.41.255.255
                  181.20.0.0-181.27.255.255
                  186.38.0.0/15
                  186.56.0.0/13
                  186.128.0.0/13
                  190.48.0.0/14
                  190.172.0.0-190.179.255.255
                  191.80.0.0-191.85.255.255
                  200.0.192.0/23
                  200.0.224.0/19
                  200.5.64.0/18
                  200.5.192.0/18
                  200.9.212.0/23
                  200.9.235.0/24
                  200.10.96.0-200.10.129.255
                  200.16.128.0/17
                  200.32.32.0/19
                  200.41.128.0/17
                  200.51.0.0/16
                  200.63.128.0/18
                  200.70.0.0/16
                  201.176.0.0-201.181.255.255
                  201.250.0.0/15
                  201.254.0.0/15
                  209.13.0.0/16
                IPv6:
                  2800:380::/31
                  2802:8000::/25

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4926
                  10834
                  22927

    Signature Algorithm: sha256WithRSAEncryption
         1f:bb:60:75:90:84:d4:71:bf:05:5d:65:69:c4:6b:73:51:43:
         66:fa:44:85:30:0a:46:80:79:54:25:2b:3b:97:98:3b:29:00:
         27:4f:2f:3b:9b:a9:5f:67:61:5a:ee:5f:78:cb:40:ab:cd:b4:
         9a:00:80:25:07:db:72:41:92:aa:bb:05:7c:0a:86:0a:b0:33:
         3d:6d:35:65:e9:95:00:79:c0:74:2c:3c:4b:76:62:16:00:1f:
         f0:47:20:d5:36:d4:fb:3f:5f:aa:1b:e4:a4:6e:f1:ee:85:ef:
         7e:b4:27:25:85:8b:3a:16:a3:94:cc:d3:21:da:b9:40:7e:a8:
         13:00:22:4e:ad:20:5f:b2:3c:e0:ba:d6:8c:fe:c5:c9:aa:c8:
         2a:ac:a1:b5:a4:92:ec:78:2c:8d:05:d1:f1:0a:c7:0b:24:38:
         08:f5:be:8c:51:7d:93:65:e1:8e:84:fa:56:cc:cb:26:2e:54:
         fd:89:b3:8a:34:f4:ae:e0:29:0a:93:57:8b:f5:83:59:f8:22:
         b4:0a:0c:34:7d:79:00:9f:f2:f0:f1:1b:08:95:05:a7:30:b4:
         09:8d:e8:b8:2e:c6:17:1c:19:f4:f8:c7:ba:c5:76:38:5e:79:
         0d:06:43:75:d9:88:07:f1:c8:18:85:72:df:9b:d0:9c:4f:3e:
         02:7e:04:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org