Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer
File:                     ca57033023e73c5b1a524aa43f058bd1ed72d47f.cer (raw, json)
Hash identifier:          lweYi8FZqgO0ZvHnKq2djBAkNzJ/MCdr/1mY4P3mxi4=
Subject key identifier:   96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5BC9A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:59 +0000
Certificate not after:    Wed 18 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 262197
                          IP: 131.108.36.0/22
                          IP: 186.4.0.0/18
                          IP: 186.32.0.0/18
                          IP: 186.32.160.0 -- 186.32.223.255
                          IP: 186.176.0.0 -- 186.177.191.255
                          IP: 2800:860::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16104602 (0xf5bc9a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:59 2017 GMT
            Not After : Sep 18 05:00:00 2024 GMT
        Subject: CN=ca57033023e73c5b1a524aa43f058bd1ed72d47f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:a5:23:8e:08:10:8f:64:10:35:35:bf:98:11:
                    38:f6:5a:22:24:82:00:b4:d3:16:cb:fc:2c:ef:8e:
                    3b:b1:20:c9:88:31:95:54:90:26:cc:3e:7f:c3:12:
                    8b:21:68:be:6f:c3:d9:32:bb:c6:9b:d0:a2:9d:38:
                    20:43:92:8e:79:2e:be:89:d6:95:2e:58:61:ea:46:
                    88:fc:88:82:b7:4e:52:1c:62:a1:d0:8d:e6:2a:8a:
                    20:a8:f4:9a:03:3f:04:7f:7f:73:9a:fc:8a:cb:42:
                    3d:32:14:bc:7f:00:63:01:20:de:c0:27:ae:06:a8:
                    81:d5:fc:1b:25:53:7c:eb:3a:b8:1f:df:b0:08:98:
                    3f:bc:81:b6:dc:74:14:11:88:c1:2f:ff:25:47:16:
                    00:f2:e8:e2:28:7e:95:63:2b:43:c5:87:0a:fa:15:
                    df:2c:5b:3d:cc:bd:6a:f7:37:e8:c0:b4:ed:92:16:
                    16:8c:58:de:b1:1f:11:13:0e:39:be:3c:45:b1:09:
                    fe:d4:19:21:73:53:d1:d8:f9:10:2b:2d:39:ea:3a:
                    f3:b1:da:06:48:91:2b:52:23:19:26:05:f6:f1:a0:
                    71:ef:0f:44:3d:98:6f:ce:f5:5d:54:f7:39:c5:20:
                    02:c0:ae:e0:33:0b:df:b9:fb:db:43:b3:89:02:90:
                    c9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:5B:C5:F5:C2:25:AD:63:AB:03:78:DF:22:AF:94:19:43:DB:B9:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/350b06c7-448f-4125-80cb-fc0d869542d0/ca57033023e73c5b1a524aa43f058bd1ed72d47f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.36.0/22
                  186.4.0.0/18
                  186.32.0.0/18
                  186.32.160.0-186.32.223.255
                  186.176.0.0-186.177.191.255
                IPv6:
                  2800:860::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262197

    Signature Algorithm: sha256WithRSAEncryption
         65:9e:10:67:2a:ec:55:87:92:ce:b0:ef:e5:b2:41:23:fc:b9:
         be:44:8b:c5:8f:34:93:b1:a1:84:43:1d:b0:4b:e3:99:12:3f:
         87:45:91:35:f9:c3:64:01:bf:b9:c0:f6:06:b6:2b:3e:08:30:
         8c:a2:c4:41:a1:06:80:70:c2:7e:e5:35:62:0b:a8:a2:2e:5a:
         d3:45:2f:32:04:11:fb:95:38:99:91:6a:b4:45:43:51:7e:9c:
         3d:49:31:26:31:9d:79:bb:c7:13:92:6a:b6:d6:d0:b2:e9:2b:
         b9:8e:d3:a8:80:58:4d:f8:4d:2c:5d:4e:7d:c1:bf:43:ba:f4:
         03:09:ab:40:25:0f:04:63:a2:05:3c:af:d2:00:48:dc:8e:3c:
         1a:7b:af:46:b6:50:13:43:e3:82:50:2a:b2:58:ab:49:49:a3:
         c1:8e:d9:80:50:55:ce:98:c2:d0:c0:f5:92:1f:15:53:c6:c9:
         17:b8:fe:37:a1:87:dd:12:fc:e5:d3:e6:e9:59:2d:ec:50:9f:
         e1:16:14:d9:c8:7c:8b:20:50:96:a0:b1:e9:82:ca:99:02:88:
         f9:49:23:9d:f3:7a:93:bc:6f:ad:fe:dd:8e:27:bd:23:6d:aa:
         37:e6:9d:fd:f8:c8:53:c4:c8:31:04:61:9d:7d:31:e7:08:7f:
         c0:e5:c7:41
-----BEGIN CERTIFICATE-----
MIIGATCCBOmgAwIBAgIEAPW8mjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzY1OVoXDTI0MDkxODA1MDAw
MFowMzExMC8GA1UEAxMoY2E1NzAzMzAyM2U3M2M1YjFhNTI0YWE0M2YwNThiZDFl
ZDcyZDQ3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBANmlI44IEI9k
EDU1v5gROPZaIiSCALTTFsv8LO+OO7EgyYgxlVSQJsw+f8MSiyFovm/D2TK7xpvQ
op04IEOSjnkuvonWlS5YYepGiPyIgrdOUhxiodCN5iqKIKj0mgM/BH9/c5r8istC
PTIUvH8AYwEg3sAnrgaogdX8GyVTfOs6uB/fsAiYP7yBttx0FBGIwS//JUcWAPLo
4ih+lWMrQ8WHCvoV3yxbPcy9avc36MC07ZIWFoxY3rEfERMOOb48RbEJ/tQZIXNT
0dj5ECstOeo687HaBkiRK1IjGSYF9vGgce8PRD2Yb871XVT3OcUgAsCu4DML37n7
20OziQKQySUCAwEAAaOCAzAwggMsMB0GA1UdDgQWBBSWW8X1wiWtY6sDeN8ir5QZ
Q9u55jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zNTBiMDZjNy00NDhm
LTQxMjUtODBjYi1mYzBkODY5NTQyZDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzUwYjA2YzctNDQ4Zi00
MTI1LTgwY2ItZmMwZDg2OTU0MmQwL2NhNTcwMzMwMjNlNzNjNWIxYTUyNGFhNDNm
MDU4YmQxZWQ3MmQ0N2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBV
BggrBgEFBQcBBwEB/wRGMEQwMwQCAAEwLQMEAoNsJAMEBroEAAMEBrogADAMAwQF
uiCgAwQFuiDAMAsDAwS6sAMEBrqxgDANBAIAAjAHAwUAKAAIYDAaBggrBgEFBQcB
CAEB/wQLMAmgBzAFAgMEADUwDQYJKoZIhvcNAQELBQADggEBAGWeEGcq7FWHks6w
7+WyQSP8ub5Ei8WPNJOxoYRDHbBL45kSP4dFkTX5w2QBv7nA9ga2Kz4IMIyixEGh
BoBwwn7lNWILqKIuWtNFLzIEEfuVOJmRarRFQ1F+nD1JMSYxnXm7xxOSarbW0LLp
K7mO06iAWE34TSxdTn3Bv0O69AMJq0AlDwRjogU8r9IASNyOPBp7r0a2UBND44JQ
KrJYq0lJo8GO2YBQVc6YwtDA9ZIfFVPGyRe4/jehh90S/OXT5ulZLexQn+EWFNnI
fIsgUJagsemCypkCiPlJI53zepO8b63+3Y4nvSNtqjfmnf34yFPEyDEEYZ19MecI
f8Dlx0E=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org