Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c9527375371d93c65d5c71695e40f1d5f95f4533.cer
File:                     c9527375371d93c65d5c71695e40f1d5f95f4533.cer (raw, json)
Hash identifier:          yT4jAeCcQbI06wRke/4/WwPI1la3nI9UcsEZs8LLc64=
Subject key identifier:   6D:30:F5:7E:33:9C:D0:B8:F8:51:36:FD:B6:D0:2F:C9:45:2F:C7:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E82711
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9176cd65-cfe4-4986-8492-3280096b3f23/c9527375371d93c65d5c71695e40f1d5f95f4533.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9176cd65-cfe4-4986-8492-3280096b3f23/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 10 May 2020 22:58:36 +0000
Certificate not after:    Mon 03 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 52270
                          IP: 190.105.200.0/21
                          IP: 190.105.224.0/20
                          IP: 200.85.152.0/21
                          IP: 2800:9d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15214353 (0xe82711)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 22:58:36 2020 GMT
            Not After : Jun  3 06:00:00 2024 GMT
        Subject: CN=c9527375371d93c65d5c71695e40f1d5f95f4533
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:cb:cb:8f:82:db:cc:27:c2:63:80:15:45:c2:
                    c9:0a:b2:1b:65:a1:84:42:95:c9:87:6c:f3:d5:ae:
                    4a:3d:ff:db:83:b7:1d:f4:76:2b:8a:d8:ae:34:06:
                    51:31:44:fc:0b:71:46:27:12:6d:f6:86:60:56:70:
                    01:b3:5c:73:05:88:47:4b:5a:a2:0d:c9:77:7c:6d:
                    65:d1:d1:1f:4c:96:67:b9:51:f6:bc:14:7a:c7:c1:
                    42:86:40:74:0b:1f:35:51:0e:0a:b1:a9:cb:fa:d6:
                    4a:24:2f:d5:36:0d:d2:24:eb:a3:aa:b5:4c:92:af:
                    72:85:d5:1e:32:b6:8a:d9:50:89:f7:9a:7c:91:a2:
                    3e:69:f0:5b:06:81:9f:36:e5:0c:64:67:c6:60:45:
                    78:6c:b8:0d:99:9e:6d:d9:62:68:ea:d4:7e:2a:96:
                    28:d3:41:9b:13:b4:52:ed:c3:06:6e:fa:6a:06:8f:
                    d8:88:03:9a:a6:cf:9a:a1:73:ab:be:0f:39:92:c9:
                    c0:fc:c3:72:37:cb:e5:f0:4f:6f:e7:4e:f1:73:ae:
                    6e:b7:19:58:e5:5d:3c:62:d4:f7:4c:1d:43:18:69:
                    2c:04:fb:ce:bb:60:a1:12:61:9c:24:a6:18:e3:5c:
                    fe:22:f9:db:04:ab:ce:a5:bc:14:89:87:b5:b3:36:
                    ba:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6D:30:F5:7E:33:9C:D0:B8:F8:51:36:FD:B6:D0:2F:C9:45:2F:C7:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9176cd65-cfe4-4986-8492-3280096b3f23/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9176cd65-cfe4-4986-8492-3280096b3f23/c9527375371d93c65d5c71695e40f1d5f95f4533.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.105.200.0/21
                  190.105.224.0/20
                  200.85.152.0/21
                IPv6:
                  2800:9d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52270

    Signature Algorithm: sha256WithRSAEncryption
         6b:5a:bb:dc:f2:48:85:93:63:a8:3a:37:31:80:68:6e:80:6e:
         51:4c:bd:b8:b9:26:cd:92:48:5f:33:1a:ee:8b:29:ca:44:c5:
         20:e4:f4:e2:f4:77:be:ee:fb:cf:11:e3:f6:88:3d:f2:b5:55:
         f8:be:ba:30:f7:9b:f7:38:12:f5:9f:dc:7f:59:1c:d8:e5:8e:
         b9:0c:15:cd:b9:a5:11:43:b4:6f:b0:ac:a8:46:33:13:2c:ea:
         b5:a6:c8:db:ad:6b:05:df:64:a8:23:89:74:3d:3d:26:28:a6:
         c8:7b:81:97:fc:c5:68:f4:b1:61:12:79:cb:82:8a:62:ff:10:
         9d:49:e9:a7:24:92:78:44:19:ec:be:47:dd:15:73:76:b3:db:
         42:38:e7:b2:7f:6b:ab:c8:aa:38:8a:a7:45:32:0a:9f:0f:c3:
         b5:a7:f1:f0:ac:73:9f:71:e1:d7:27:2b:8e:dc:db:ff:0a:e7:
         a2:c5:3d:af:ef:c6:cc:8b:f3:b4:7d:ac:c8:4b:69:18:4b:54:
         9c:9d:79:2f:be:f9:f3:ad:8f:e7:02:7b:70:8d:91:e4:fa:42:
         93:d7:00:c0:30:57:89:93:2c:82:c1:be:c6:1e:f4:3c:0e:8b:
         ae:7b:7e:ab:f8:6e:87:99:ce:68:98:49:1c:59:06:8b:0a:8e:
         5a:e2:bb:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org