Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2be57a8c0fd76452079fcf2d4dc569819c2ed31.cer
File:                     c2be57a8c0fd76452079fcf2d4dc569819c2ed31.cer (raw, json)
Hash identifier:          GOpYIM3/3CdMTDvW4xYn6UDm2ShqTBlGlSVbRDa/ylE=
Subject key identifier:   25:E8:84:D7:24:AC:85:71:45:FF:9F:71:0D:06:B9:ED:F5:8E:37:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6013A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4042023c-6d97-47cf-8018-67c5d58add42/c2be57a8c0fd76452079fcf2d4dc569819c2ed31.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4042023c-6d97-47cf-8018-67c5d58add42/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Thu 30 Nov 2023 14:00:00 +0000
Subordinate resources:    AS: 27665
                          IP: 131.100.160.0/22
                          IP: 138.59.24.0/22
                          IP: 143.0.172.0/22
                          IP: 161.0.224.0/19
                          IP: 181.188.0.0/17
                          IP: 190.6.224.0/20
                          IP: 190.83.128.0/17
                          IP: 190.213.0.0/16
                          IP: 200.1.104.0/21
                          IP: 2800:e00::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14025018 (0xd6013a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Nov 30 14:00:00 2023 GMT
        Subject: CN=c2be57a8c0fd76452079fcf2d4dc569819c2ed31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:00:18:0a:24:8e:86:55:39:e7:92:41:66:
                    78:40:b3:1d:ac:a0:9d:77:ea:ee:76:d6:ef:78:92:
                    94:4b:bf:95:2f:c7:8c:3b:3c:06:43:f9:2c:8a:6d:
                    ea:2a:a9:1f:1f:25:bc:7d:71:26:b1:1c:6d:14:de:
                    8f:5e:5a:cf:c0:5b:38:d6:45:98:4f:c6:62:39:e2:
                    bc:df:63:ac:a6:e2:4b:86:4e:df:45:93:38:a6:39:
                    58:49:ac:38:45:8a:12:f5:87:f3:82:3f:7b:c2:d1:
                    92:10:59:bb:f6:16:d4:fe:00:3f:f7:c5:79:2b:35:
                    26:e2:c2:b1:1e:a1:cb:86:33:16:a2:68:30:4e:67:
                    a5:07:9b:06:bc:7e:cd:2c:13:4c:82:8a:83:08:1b:
                    87:25:af:43:44:b5:9f:fe:ef:88:d3:77:c7:19:8b:
                    9b:81:3e:f6:56:fe:8d:d7:6a:2b:ad:ef:da:97:3a:
                    56:c3:c4:42:96:ad:f6:13:5f:0b:e2:b9:38:3e:d3:
                    b5:05:b1:23:ef:ac:dd:c1:03:20:a2:83:9c:59:eb:
                    ff:34:34:f6:24:14:09:8d:1e:09:79:04:e9:95:37:
                    a6:2b:05:c3:38:88:c2:fd:a6:c1:f1:0d:15:06:f1:
                    90:81:2c:f3:35:2e:78:8c:37:9a:f8:a3:01:96:6e:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E8:84:D7:24:AC:85:71:45:FF:9F:71:0D:06:B9:ED:F5:8E:37:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4042023c-6d97-47cf-8018-67c5d58add42/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4042023c-6d97-47cf-8018-67c5d58add42/c2be57a8c0fd76452079fcf2d4dc569819c2ed31.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.160.0/22
                  138.59.24.0/22
                  143.0.172.0/22
                  161.0.224.0/19
                  181.188.0.0/17
                  190.6.224.0/20
                  190.83.128.0/17
                  190.213.0.0/16
                  200.1.104.0/21
                IPv6:
                  2800:e00::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27665

    Signature Algorithm: sha256WithRSAEncryption
         c2:6e:ef:75:65:79:93:64:d1:8a:34:6b:44:1c:4b:03:86:ec:
         b6:81:de:a7:b8:54:5a:42:c3:ab:08:82:2e:43:df:6a:92:f9:
         83:24:06:d6:3f:67:bb:35:5b:fc:92:d0:b3:49:24:55:91:d6:
         ef:ff:39:1d:5d:3c:9d:28:6a:1f:a4:a6:eb:70:33:d3:ea:4c:
         6c:43:79:77:fc:2a:73:36:76:da:a6:ef:b6:ff:6e:61:45:44:
         bb:d3:9e:b5:60:0d:e3:19:9b:81:56:f8:1e:18:96:b8:7f:c5:
         77:a8:55:d9:8e:cd:dc:01:42:66:70:b1:a8:ed:cc:37:67:6a:
         67:7e:77:fc:20:23:49:c5:64:61:75:0a:a1:db:c4:de:75:1b:
         b6:a6:ed:e0:da:68:f6:34:5c:2d:3c:3c:aa:ba:f6:61:21:c3:
         53:2f:8c:8e:00:28:2c:f5:8d:82:69:01:c9:62:07:3e:34:e3:
         88:82:eb:25:27:e3:ae:b2:72:a4:60:0d:17:a4:31:27:b0:ca:
         61:3f:17:b9:5e:4b:4c:d5:07:b7:94:72:db:0e:6b:84:5a:cc:
         b0:80:7d:0c:8c:f4:63:2d:a0:87:21:a5:63:8f:d8:0d:10:42:
         53:0f:f2:f0:66:0d:4b:55:8a:b0:a5:7c:5d:c7:d8:5c:37:cc:
         0e:0d:0f:a0
-----BEGIN CERTIFICATE-----
MIIGCDCCBPCgAwIBAgIEANYBOjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczNVoXDTIzMTEzMDE0MDAw
MFowMzExMC8GA1UEAxMoYzJiZTU3YThjMGZkNzY0NTIwNzlmY2YyZDRkYzU2OTgx
OWMyZWQzMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIDwABgKJI6G
VTnnkkFmeECzHaygnXfq7nbW73iSlEu/lS/HjDs8BkP5LIpt6iqpHx8lvH1xJrEc
bRTej15az8BbONZFmE/GYjnivN9jrKbiS4ZO30WTOKY5WEmsOEWKEvWH84I/e8LR
khBZu/YW1P4AP/fFeSs1JuLCsR6hy4YzFqJoME5npQebBrx+zSwTTIKKgwgbhyWv
Q0S1n/7viNN3xxmLm4E+9lb+jddqK63v2pc6VsPEQpat9hNfC+K5OD7TtQWxI++s
3cEDIKKDnFnr/zQ09iQUCY0eCXkE6ZU3pisFwziIwv2mwfENFQbxkIEs8zUueIw3
mvijAZZuLlcCAwEAAaOCAzcwggMzMB0GA1UdDgQWBBQl6ITXJKyFcUX/n3ENBrnt
9Y437DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MDQyMDIzYy02ZDk3
LTQ3Y2YtODAxOC02N2M1ZDU4YWRkNDIvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDA0MjAyM2MtNmQ5Ny00
N2NmLTgwMTgtNjdjNWQ1OGFkZDQyL2MyYmU1N2E4YzBmZDc2NDUyMDc5ZmNmMmQ0
ZGM1Njk4MTljMmVkMzEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBd
BggrBgEFBQcBBwEB/wROMEwwOwQCAAEwNQMEAoNkoAMEAoo7GAMEAo8ArAMEBaEA
4AMEB7W8AAMEBL4G4AMEB75TgAMDAL7VAwQDyAFoMA0EAgACMAcDBQQoAA4AMBkG
CCsGAQUFBwEIAQH/BAowCKAGMAQCAmwRMA0GCSqGSIb3DQEBCwUAA4IBAQDCbu91
ZXmTZNGKNGtEHEsDhuy2gd6nuFRaQsOrCIIuQ99qkvmDJAbWP2e7NVv8ktCzSSRV
kdbv/zkdXTydKGofpKbrcDPT6kxsQ3l3/CpzNnbapu+2/25hRUS70561YA3jGZuB
VvgeGJa4f8V3qFXZjs3cAUJmcLGo7cw3Z2pnfnf8ICNJxWRhdQqh28TedRu2pu3g
2mj2NFwtPDyquvZhIcNTL4yOACgs9Y2CaQHJYgc+NOOIguslJ+OusnKkYA0XpDEn
sMphPxe5XktM1Qe3lHLbDmuEWsywgH0MjPRjLaCHIaVjj9gNEEJTD/LwZg1LVYqw
pXxdx9hcN8wODQ+g
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:29 2024 by rpki-client on console-ams.rpki-client.org