Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c804815bcdfef674dc896f6b3f2e0b169560053d.cer
File:                     c804815bcdfef674dc896f6b3f2e0b169560053d.cer (raw, json)
Hash identifier:          Nd3FrqsebhTa5ExHHG8vSggquD65/c5IEaitRlyv9b4=
Subject key identifier:   50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DD4EA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/c804815bcdfef674dc896f6b3f2e0b169560053d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Oct 2021 20:59:57 +0000
Certificate not after:    Thu 29 Feb 2024 17:31:22 +0000
Subordinate resources:    AS: 263740
                          IP: 138.99.36.0/22
                          IP: 143.137.164.0/22
                          IP: 161.0.0.0/19
                          IP: 168.205.160.0/22
                          IP: 170.246.52.0/22
                          IP: 186.65.112.0/20
                          IP: 2803:6c00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14503589 (0xdd4ea5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  4 20:59:57 2021 GMT
            Not After : Feb 29 17:31:22 2024 GMT
        Subject: CN=c804815bcdfef674dc896f6b3f2e0b169560053d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:26:81:87:4c:da:59:95:40:48:aa:84:89:51:
                    3a:78:68:99:4f:ec:8a:83:21:84:8d:1c:5e:2c:f5:
                    e1:81:23:ed:d8:c2:76:58:71:c5:0a:3c:5b:30:08:
                    da:a4:4c:f2:63:42:bf:45:fc:0e:24:c8:12:f2:3b:
                    e6:bd:ac:bc:40:8d:8b:21:a5:9d:d4:cc:dc:52:d0:
                    61:c9:0e:c9:b8:0f:47:64:07:60:b4:cf:69:41:7c:
                    65:04:5e:4a:bb:7a:53:0d:85:c7:6d:ee:a9:fd:d4:
                    5c:47:4e:b3:70:39:cd:5d:21:d5:ee:de:25:3a:54:
                    c9:65:d6:50:c4:60:5d:c0:3e:0b:1f:21:dc:3f:69:
                    63:51:88:89:1a:3c:11:d3:d0:f0:1c:0b:39:82:7c:
                    85:7b:e6:ea:07:80:09:58:ed:d1:c5:d5:34:cc:7a:
                    09:9a:ce:79:51:ee:60:5b:b2:4f:99:14:5d:4e:73:
                    44:78:05:27:fb:e9:d5:b1:29:fd:89:5a:0e:eb:b9:
                    9b:f9:f1:8e:ca:f2:b7:93:73:10:e2:99:75:e3:62:
                    e0:45:c6:24:ee:5a:76:87:0a:ba:e5:3c:58:0f:cc:
                    c6:fb:c3:09:16:49:dd:47:80:7c:5c:9c:e2:2c:3a:
                    ce:38:03:a5:60:2f:a8:e2:a4:a2:cb:16:65:53:08:
                    fd:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:79:6E:13:3A:27:F7:CF:A5:96:4F:35:91:EC:D4:2D:A9:F1:F9:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/003d2bee-aa83-455b-9f96-5d6d48027ee6/c804815bcdfef674dc896f6b3f2e0b169560053d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.36.0/22
                  143.137.164.0/22
                  161.0.0.0/19
                  168.205.160.0/22
                  170.246.52.0/22
                  186.65.112.0/20
                IPv6:
                  2803:6c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263740

    Signature Algorithm: sha256WithRSAEncryption
         64:16:19:f8:7e:d7:09:a0:e6:a4:dc:c1:89:6a:b8:20:78:eb:
         2f:cf:91:c7:09:90:84:59:99:f3:df:20:8d:67:cf:5f:46:c2:
         b9:21:d9:43:4d:e5:76:be:5e:02:d0:82:62:66:07:13:51:56:
         db:65:ee:62:35:dd:ab:ef:ef:b8:7f:d2:ed:9b:ad:ff:0c:a9:
         68:0e:07:c7:aa:1c:95:0d:f7:02:a4:6b:22:f4:a0:37:f6:84:
         6d:e5:2e:b7:a6:fd:8d:31:c9:4b:9a:05:be:aa:53:56:be:72:
         23:1f:63:d5:a6:57:67:61:f0:a8:51:6f:d4:7d:9a:fa:6b:a6:
         48:a4:f0:af:aa:12:11:db:6b:ef:f9:4e:94:d9:29:d2:ad:2a:
         53:10:fe:39:8f:8d:2b:bc:83:39:a2:bd:52:53:5a:10:b9:72:
         21:c5:4d:e3:75:cc:0b:20:b6:a8:07:15:c7:f4:4c:90:cc:14:
         7d:f2:59:5c:cf:f6:46:5f:99:6f:48:f5:43:8a:20:96:c0:7d:
         b9:19:64:07:96:eb:df:e0:5f:a6:0d:6f:5e:76:8e:db:f4:74:
         3b:db:bd:cd:34:5f:64:47:65:e6:06:70:44:44:75:82:eb:ed:
         8f:88:6d:a8:a9:54:19:75:09:f3:db:45:78:51:64:52:3a:72:
         e0:41:94:c6
-----BEGIN CERTIFICATE-----
MIIF+DCCBOCgAwIBAgIEAN1OpTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIxMTAwNDIwNTk1N1oXDTI0MDIyOTE3MzEy
MlowMzExMC8GA1UEAxMoYzgwNDgxNWJjZGZlZjY3NGRjODk2ZjZiM2YyZTBiMTY5
NTYwMDUzZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPAmgYdM2lmV
QEiqhIlROnhomU/sioMhhI0cXiz14YEj7djCdlhxxQo8WzAI2qRM8mNCv0X8DiTI
EvI75r2svECNiyGlndTM3FLQYckOybgPR2QHYLTPaUF8ZQReSrt6Uw2Fx23uqf3U
XEdOs3A5zV0h1e7eJTpUyWXWUMRgXcA+Cx8h3D9pY1GIiRo8EdPQ8BwLOYJ8hXvm
6geACVjt0cXVNMx6CZrOeVHuYFuyT5kUXU5zRHgFJ/vp1bEp/YlaDuu5m/nxjsry
t5NzEOKZdeNi4EXGJO5adocKuuU8WA/MxvvDCRZJ3UeAfFyc4iw6zjgDpWAvqOKk
ossWZVMI/QECAwEAAaOCAycwggMjMB0GA1UdDgQWBBRQeW4TOif3z6WWTzWR7NQt
qfH5hTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMDNkMmJlZS1hYTgz
LTQ1NWItOWY5Ni01ZDZkNDgwMjdlZTYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDAzZDJiZWUtYWE4My00
NTViLTlmOTYtNWQ2ZDQ4MDI3ZWU2L2M4MDQ4MTViY2RmZWY2NzRkYzg5NmY2YjNm
MmUwYjE2OTU2MDA1M2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBM
BggrBgEFBQcBBwEB/wQ9MDswKgQCAAEwJAMEAopjJAMEAo+JpAMEBaEAAAMEAqjN
oAMEAqr2NAMEBLpBcDANBAIAAjAHAwUAKANsADAaBggrBgEFBQcBCAEB/wQLMAmg
BzAFAgMEBjwwDQYJKoZIhvcNAQELBQADggEBAGQWGfh+1wmg5qTcwYlquCB46y/P
kccJkIRZmfPfII1nz19Gwrkh2UNN5Xa+XgLQgmJmBxNRVttl7mI13avv77h/0u2b
rf8MqWgOB8eqHJUN9wKkayL0oDf2hG3lLrem/Y0xyUuaBb6qU1a+ciMfY9WmV2dh
8KhRb9R9mvprpkik8K+qEhHba+/5TpTZKdKtKlMQ/jmPjSu8gzmivVJTWhC5ciHF
TeN1zAsgtqgHFcf0TJDMFH3yWVzP9kZfmW9I9UOKIJbAfbkZZAeW69/gX6YNb152
jtv0dDvbvc00X2RHZeYGcEREdYLr7Y+IbaipVBl1CfPbRXhRZFI6cuBBlMY=
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org