Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c974409d0c2a70c921dd685e863e9f00cb1e262a.cer
File:                     c974409d0c2a70c921dd685e863e9f00cb1e262a.cer (raw, json)
Hash identifier:          OyeBufZocQVBI9QRXhSFR8ng8rO7HzfechowFiwXDto=
Subject key identifier:   FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01031B9F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Thu 25 Sep 2025 05:00:00 +0000
Subordinate resources:    AS: 7303
                          AS: 7934
                          AS: 10318
                          AS: 10481
                          AS: 10895
                          AS: 10983
                          AS: 11356
                          AS: 12264
                          AS: 21590
                          AS: 26608
                          AS: 27871
                          IP: 24.232.0.0/16
                          IP: 66.60.0.0/18
                          IP: 152.168.0.0/14
                          IP: 170.150.196.0/22
                          IP: 170.231.136.0/22
                          IP: 181.0.0.0 -- 181.1.151.255
                          IP: 181.1.156.0 -- 181.15.255.255
                          IP: 181.28.0.0/14
                          IP: 181.80.0.0 -- 181.85.207.255
                          IP: 181.85.216.0 -- 181.91.83.255
                          IP: 181.91.88.0 -- 181.94.196.255
                          IP: 181.94.198.0 -- 181.94.207.255
                          IP: 181.94.211.0/24
                          IP: 181.94.239.0 -- 181.94.240.255
                          IP: 181.94.251.0 -- 181.111.255.255
                          IP: 181.164.0.0 -- 181.171.255.255
                          IP: 181.228.0.0/14
                          IP: 186.108.0.0/14
                          IP: 186.124.0.0/14
                          IP: 186.136.0.0/14
                          IP: 186.152.0.0/15
                          IP: 190.16.0.0/14
                          IP: 190.30.0.0/15
                          IP: 190.136.0.0/14
                          IP: 190.188.0.0 -- 190.195.255.255
                          IP: 190.224.0.0/13
                          IP: 190.244.0.0/14
                          IP: 191.97.128.0/17
                          IP: 196.32.64.0/19
                          IP: 200.3.32.0 -- 200.3.95.255
                          IP: 200.32.0.0/19
                          IP: 200.42.0.0 -- 200.42.159.255
                          IP: 200.43.0.0/16
                          IP: 200.45.0.0/16
                          IP: 200.49.96.0/20
                          IP: 200.49.128.0/19
                          IP: 200.55.64.0/18
                          IP: 200.61.192.0/19
                          IP: 200.63.0.0/19
                          IP: 200.71.224.0/20
                          IP: 200.73.128.0/18
                          IP: 200.80.64.0/20
                          IP: 200.82.0.0/17
                          IP: 200.89.128.0/18
                          IP: 200.105.0.0 -- 200.105.95.255
                          IP: 200.110.224.0/21
                          IP: 200.114.128.0/17
                          IP: 200.117.0.0/16
                          IP: 200.122.0.0/17
                          IP: 200.126.128.0 -- 200.127.255.255
                          IP: 201.212.0.0/15
                          IP: 201.231.0.0/16
                          IP: 201.235.0.0/16
                          IP: 201.252.0.0/15
                          IP: 2001:13d0::/29
                          IP: 2800:2000::/20
                          IP: 2800:b000::/32
                          IP: 2803:da80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16980895 (0x1031b9f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Sep 25 05:00:00 2025 GMT
        Subject: CN=c974409d0c2a70c921dd685e863e9f00cb1e262a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:27:95:82:20:a9:ed:88:38:31:57:5d:c8:0c:
                    12:b1:b0:3f:bd:c4:fa:a6:5d:be:c0:72:34:7c:2a:
                    43:78:d6:6b:12:31:5a:33:33:8b:26:36:ff:85:38:
                    7a:47:dd:80:87:b6:19:5e:ef:4e:e3:47:a4:23:da:
                    ba:2b:96:b7:a7:c9:70:f9:02:5d:21:84:0b:53:55:
                    6d:47:d2:72:49:eb:fb:6a:3c:97:6e:64:f5:4a:7f:
                    21:d1:ee:3f:5e:87:b4:09:4e:42:79:43:69:b7:e1:
                    90:3a:51:4f:40:17:e7:41:cc:28:69:e0:df:50:1a:
                    42:84:8a:6d:87:b5:2a:19:3c:da:5c:91:7e:e7:55:
                    1f:8f:0e:bf:0c:83:c5:a3:94:e8:48:2c:86:c4:dc:
                    77:f3:1e:bc:c7:e5:a5:d8:77:94:d8:71:2a:64:75:
                    ed:40:fe:aa:8c:21:17:c6:6f:6a:79:3a:dc:3d:6d:
                    19:f0:c5:6c:3d:c3:4d:72:40:5a:6e:15:4e:76:c8:
                    88:78:44:75:0b:20:76:0a:0e:d8:1c:81:6b:ca:01:
                    c8:7a:41:18:05:83:76:08:6b:20:16:cc:68:1c:7d:
                    e6:90:ee:8e:4b:8b:86:81:52:1b:78:02:4e:2b:57:
                    43:bf:58:39:2b:4c:64:05:4e:fa:e5:32:9e:89:1d:
                    a0:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:8E:FC:68:56:00:AB:63:EA:02:4F:A3:0D:1F:15:D5:B5:B0:C1:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/c974409d0c2a70c921dd685e863e9f00cb1e262a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/16
                  66.60.0.0/18
                  152.168.0.0/14
                  170.150.196.0/22
                  170.231.136.0/22
                  181.0.0.0-181.1.151.255
                  181.1.156.0-181.15.255.255
                  181.28.0.0/14
                  181.80.0.0-181.85.207.255
                  181.85.216.0-181.91.83.255
                  181.91.88.0-181.94.196.255
                  181.94.198.0-181.94.207.255
                  181.94.211.0/24
                  181.94.239.0-181.94.240.255
                  181.94.251.0-181.111.255.255
                  181.164.0.0-181.171.255.255
                  181.228.0.0/14
                  186.108.0.0/14
                  186.124.0.0/14
                  186.136.0.0/14
                  186.152.0.0/15
                  190.16.0.0/14
                  190.30.0.0/15
                  190.136.0.0/14
                  190.188.0.0-190.195.255.255
                  190.224.0.0/13
                  190.244.0.0/14
                  191.97.128.0/17
                  196.32.64.0/19
                  200.3.32.0-200.3.95.255
                  200.32.0.0/19
                  200.42.0.0-200.42.159.255
                  200.43.0.0/16
                  200.45.0.0/16
                  200.49.96.0/20
                  200.49.128.0/19
                  200.55.64.0/18
                  200.61.192.0/19
                  200.63.0.0/19
                  200.71.224.0/20
                  200.73.128.0/18
                  200.80.64.0/20
                  200.82.0.0/17
                  200.89.128.0/18
                  200.105.0.0-200.105.95.255
                  200.110.224.0/21
                  200.114.128.0/17
                  200.117.0.0/16
                  200.122.0.0/17
                  200.126.128.0-200.127.255.255
                  201.212.0.0/15
                  201.231.0.0/16
                  201.235.0.0/16
                  201.252.0.0/15
                IPv6:
                  2001:13d0::/29
                  2800:2000::/20
                  2800:b000::/32
                  2803:da80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7303
                  7934
                  10318
                  10481
                  10895
                  10983
                  11356
                  12264
                  21590
                  26608
                  27871

    Signature Algorithm: sha256WithRSAEncryption
         55:96:e8:0f:a3:b8:c6:8b:50:a0:56:32:c9:76:b5:8f:27:4c:
         0e:1f:30:fc:0c:e4:3f:0a:ec:83:08:33:75:4e:e1:89:c6:03:
         9e:3e:71:34:f2:07:7f:71:0f:0a:04:f3:d2:76:fb:0a:c0:8a:
         50:bc:78:05:e0:cd:a1:9c:31:0d:94:18:ae:c4:4d:9e:14:59:
         d9:72:22:59:34:da:0e:fb:ef:8d:20:14:1c:2a:e4:0c:ad:5b:
         3e:86:87:77:2f:39:f1:82:69:17:31:c1:9d:d8:4d:c3:aa:96:
         97:ca:48:f6:aa:e1:52:fd:36:3b:e3:bf:ff:1e:22:14:d8:43:
         6b:d7:e3:74:94:57:54:4f:2b:e0:b5:58:1c:fe:fe:00:51:a2:
         4a:14:aa:5a:42:87:0b:93:2f:50:8e:db:39:ff:a0:45:fa:4f:
         34:ec:24:bb:df:59:3b:5d:2c:10:20:d9:0f:71:c7:ae:34:35:
         0b:c7:18:09:82:0b:fc:8b:c0:d3:7d:4a:66:34:45:08:5f:c3:
         43:37:e9:a2:d8:74:2a:72:d4:01:67:c3:91:a0:45:98:49:88:
         47:8f:b9:39:e5:14:83:6b:80:fd:f5:5d:3e:cf:45:55:48:4a:
         19:bb:aa:05:14:b7:af:72:26:db:8c:ea:8f:80:cf:0a:c5:12:
         85:cd:d0:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org