Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bfbdd559af6aac3348d7a10caf850960a448f10d.cer
File:                     bfbdd559af6aac3348d7a10caf850960a448f10d.cer (raw, json)
Hash identifier:          O15h2PSXHfTwzksyCJZkj6uxafB8i8H46usJg578z/w=
Subject key identifier:   1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6AB08
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:40 +0000
Certificate not after:    Thu 07 Dec 2023 04:00:00 +0000
Subordinate resources:    AS: 52314
                          AS: 264683
                          IP: 168.227.24.0/22
                          IP: 200.14.116.0/24
                          IP: 200.124.176.0/21
                          IP: 2801:0:140::/47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14068488 (0xd6ab08)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:40 2017 GMT
            Not After : Dec  7 04:00:00 2023 GMT
        Subject: CN=bfbdd559af6aac3348d7a10caf850960a448f10d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:e7:e5:51:91:ff:44:c9:c3:81:a6:29:91:1c:
                    16:a1:13:53:95:71:62:42:4e:9e:8a:56:86:f6:1f:
                    92:42:6f:87:2f:da:a6:82:c0:f1:3c:88:39:d9:d8:
                    54:71:6e:85:67:af:c0:26:0d:46:1c:69:42:b8:d6:
                    a3:23:93:ea:27:fb:ee:22:57:59:ba:df:20:9c:4c:
                    6b:d3:10:30:7b:46:fe:e6:0d:a3:26:b4:4c:34:24:
                    f2:12:4f:a0:ce:5a:f6:65:fe:b5:53:4f:99:01:b2:
                    0d:03:3c:e8:fe:6a:0b:f8:8d:c4:a7:34:6c:4a:e2:
                    4f:1f:9e:a9:f1:90:1c:2a:e7:e7:7f:7d:07:e5:99:
                    f2:b9:a2:b7:09:4a:e8:0d:2f:23:e3:4d:36:55:65:
                    fc:c8:00:a3:4a:50:d1:63:99:11:db:d0:bc:da:f0:
                    7a:00:2a:25:dc:8f:bc:72:29:b4:de:e5:eb:42:61:
                    d3:e8:c8:49:2c:1c:f2:c6:d1:18:6b:14:fa:d7:39:
                    6c:a5:72:38:44:a1:78:69:c8:5f:22:a5:cb:9c:f0:
                    03:39:79:ab:c0:74:b0:0f:47:1e:71:d2:84:6d:19:
                    08:99:75:b5:c4:d1:a6:36:2c:bf:d6:5c:7e:5c:c4:
                    f2:55:33:75:32:9f:b6:22:25:66:63:a9:fd:64:69:
                    f0:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:06:EB:DB:19:A7:32:BB:47:B8:29:4B:96:95:00:0B:5F:49:B2:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9b2c7066-95ca-44cd-b9c8-bd97d6d718ab/bfbdd559af6aac3348d7a10caf850960a448f10d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.24.0/22
                  200.14.116.0/24
                  200.124.176.0/21
                IPv6:
                  2801:0:140::/47

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52314
                  264683

    Signature Algorithm: sha256WithRSAEncryption
         7b:8b:19:ee:f3:ff:b5:60:8d:29:09:c3:41:d6:ab:fc:87:cf:
         6f:8d:95:b3:d4:2a:c0:15:63:66:68:4e:3c:b2:86:bb:d6:51:
         0e:b7:cc:75:6e:93:d3:29:52:69:90:7c:8d:95:10:92:48:a0:
         61:ac:ca:26:79:8d:bf:5c:ad:46:35:9f:fd:09:e9:e5:42:f3:
         f7:8c:8f:85:51:69:a6:57:8c:c1:32:fa:9c:57:38:8b:38:91:
         4a:d0:18:60:db:48:f4:a0:a4:86:41:03:ae:f4:98:f2:52:9e:
         00:5f:f6:fd:7d:2b:bc:45:bd:f2:ae:8d:a1:71:7e:ed:f7:b5:
         74:98:7d:ae:b6:7f:7f:10:d1:21:57:a6:05:61:41:90:1b:7d:
         9f:cf:f3:2b:43:ca:6f:00:08:e2:e9:b7:d6:82:ce:85:85:9e:
         36:fb:a3:2e:b7:e3:4f:a5:7e:45:d7:63:3e:bc:62:0f:7c:0d:
         00:a6:5c:ed:65:c3:73:32:54:0c:c5:3f:42:42:e6:ea:3d:21:
         42:01:10:98:da:10:5a:71:d1:2e:f2:32:08:3c:25:2c:80:3e:
         59:1d:a4:e5:48:7c:11:26:eb:2d:a5:9f:48:61:3a:d2:36:2e:
         d5:df:5a:af:65:45:24:d6:e1:49:94:13:99:08:d9:b1:fa:89:
         47:b9:fe:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org