Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7c15fafa30bfcd79bf9951262573158d98a275e.cer
File:                     c7c15fafa30bfcd79bf9951262573158d98a275e.cer (raw, json)
Hash identifier:          0s8W/ue+sQFcAqn7UyEDw6LGk1LAYYRL+c2ExZW/FHs=
Subject key identifier:   A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7113B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:02 +0000
Certificate not after:    Sun 29 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 11830
                          AS: 28081
                          IP: 45.232.116.0/22
                          IP: 181.193.0.0 -- 181.195.255.255
                          IP: 200.91.64.0 -- 200.91.191.255
                          IP: 201.191.0.0 -- 201.207.255.255
                          IP: 201.237.0.0/16
                          IP: 2001:1330::/29
                          IP: 2800:d300::/29
                          IP: 2803:9b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16191803 (0xf7113b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:02 2017 GMT
            Not After : Sep 29 05:00:00 2024 GMT
        Subject: CN=c7c15fafa30bfcd79bf9951262573158d98a275e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:8a:f9:a2:27:ee:c1:cd:f5:61:3e:e0:e8:
                    9b:30:82:59:0c:d2:89:ca:db:0c:b8:a6:38:04:34:
                    82:52:dd:aa:f9:fa:bc:25:bf:4b:dc:32:5f:b0:42:
                    1e:d4:88:f7:89:86:45:a7:56:c3:1a:c9:53:7d:af:
                    63:fb:52:96:4f:8d:84:a4:9b:13:81:ba:ef:ac:ec:
                    85:af:11:5e:02:98:08:f8:29:ff:93:ee:8a:03:bf:
                    a4:0e:90:3b:a4:6f:84:9f:6b:d9:1d:47:d9:5c:a6:
                    f0:d4:87:a7:c6:63:5e:82:94:04:78:de:12:2c:eb:
                    b0:79:57:50:fd:01:ed:43:eb:51:fb:1c:da:39:79:
                    a5:68:23:3a:ca:96:77:15:e7:01:da:43:74:fe:84:
                    c4:be:79:40:99:ac:ea:d4:b5:e0:b0:84:67:99:ae:
                    ef:0f:3d:f1:b4:4c:73:ae:0d:1c:15:87:0b:b3:d9:
                    62:3f:a8:27:c9:de:58:9f:21:ad:5c:4a:24:f3:ea:
                    e7:ee:29:e4:06:07:26:a9:7c:c5:71:83:4d:e6:84:
                    ea:4c:6f:0f:c3:74:65:34:5a:e6:30:e5:d3:7b:a2:
                    b6:c1:ab:60:90:b8:d3:72:d4:43:3c:37:2c:28:74:
                    1e:ba:17:61:55:c4:3b:b2:48:89:40:a0:d9:67:3a:
                    d5:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B0:7B:0A:3C:92:83:71:FC:2A:2E:8E:B5:E8:B5:AA:F3:74:F0:47
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bb6a3acc-2a4c-4fbc-a2a6-950fd1e2667d/c7c15fafa30bfcd79bf9951262573158d98a275e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.116.0/22
                  181.193.0.0-181.195.255.255
                  200.91.64.0-200.91.191.255
                  201.191.0.0-201.207.255.255
                  201.237.0.0/16
                IPv6:
                  2001:1330::/29
                  2800:d300::/29
                  2803:9b20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11830
                  28081

    Signature Algorithm: sha256WithRSAEncryption
         1e:ca:08:c8:95:d0:bf:02:c7:e6:c9:34:ba:16:15:f2:3e:03:
         7a:4d:88:40:eb:9e:8c:05:ef:e5:e5:d7:eb:75:9e:e4:90:db:
         7b:a5:1d:0a:c9:d9:a6:63:04:5a:2c:ed:c1:b8:12:2d:11:d3:
         0b:a8:e7:9d:35:06:89:38:06:2c:8f:a5:bb:f2:18:31:94:0e:
         c7:d0:e9:f9:c3:bc:25:74:73:1e:40:2b:7d:23:f4:d7:77:f2:
         cf:c8:9b:e1:2c:65:0e:89:7a:25:12:49:80:a1:93:45:6f:eb:
         ca:2e:48:31:40:57:2d:c7:27:43:68:b3:7e:8a:da:a1:6b:5d:
         c9:e9:e8:9e:9e:89:ec:b6:7a:e9:55:14:cb:5c:9f:98:40:2b:
         1c:4d:a4:30:df:9c:9c:e1:68:18:81:69:45:e7:84:ba:c7:0e:
         e7:06:d5:b8:04:04:d6:04:e5:50:9c:d2:68:83:10:e1:47:30:
         0d:57:21:63:06:ed:af:8e:45:c8:ff:91:37:48:02:be:d1:e2:
         f8:cb:62:6f:94:1b:ff:0d:0b:e9:ca:0e:ce:de:4c:5f:92:aa:
         7d:14:ff:58:6d:6e:6a:3f:7d:54:5b:67:07:92:9d:2d:43:1f:
         da:3e:04:12:3a:83:27:f4:0a:eb:50:a9:84:fc:28:31:68:fb:
         06:04:7b:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org