Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer
File:                     cc3aa122dfd9e78c282ee13cf25302c07b4c605f.cer (raw, json)
Hash identifier:          2qUdaKNgr5isAdZFJPqS66Jy8uLDtPgEZizwanufc+I=
Subject key identifier:   D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E00C7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:39 +0000
Certificate not after:    Sat 30 Mar 2024 15:00:00 +0000
Subordinate resources:    AS: 11664
                          AS: 14535
                          IP: 138.36.52.0/22
                          IP: 177.234.128.0/22
                          IP: 186.182.0.0/16
                          IP: 190.3.0.0/17
                          IP: 190.220.0.0/15
                          IP: 200.49.64.0/19
                          IP: 200.59.128.0 -- 200.59.175.255
                          IP: 200.61.32.0/19
                          IP: 200.69.128.0/19
                          IP: 200.80.128.0/17
                          IP: 200.123.64.0/18
                          IP: 2800:190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14683262 (0xe00c7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:39 2017 GMT
            Not After : Mar 30 15:00:00 2024 GMT
        Subject: CN=cc3aa122dfd9e78c282ee13cf25302c07b4c605f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:98:4a:e9:91:57:f8:70:06:d1:fe:32:0c:52:
                    1c:53:fb:43:c7:04:6e:ea:78:1b:cf:0b:75:78:91:
                    00:cb:9c:67:09:13:57:c4:dd:d5:ee:34:6a:b2:f4:
                    c4:e0:3c:c0:08:c2:4d:69:d8:4f:fa:9c:93:8a:b7:
                    88:a0:39:44:8f:88:f0:a1:0d:60:5a:0a:08:89:39:
                    b6:38:55:71:28:9c:c2:06:89:15:e2:07:e9:d5:48:
                    e6:73:53:7a:59:60:9e:49:00:43:56:73:8a:b0:74:
                    45:ea:bd:b2:e9:41:82:dc:5e:db:29:b1:65:95:af:
                    79:f6:be:e5:91:ff:a6:e3:3a:54:72:7e:87:fe:ee:
                    71:ed:be:7b:c3:53:4e:bf:a1:c8:de:0f:ac:92:83:
                    b5:dd:67:76:02:db:58:9d:2e:23:52:e0:e7:d4:0a:
                    fd:22:fe:5b:41:07:87:0a:d1:ae:24:48:7b:80:f4:
                    0b:4e:b5:0a:c5:ec:e4:f2:29:a7:70:69:d5:db:7c:
                    09:b9:98:42:cc:54:51:dd:3d:c6:11:5d:22:06:15:
                    64:2b:a9:85:45:6e:da:87:bd:9b:d6:36:fc:f7:31:
                    75:3a:38:01:49:2f:ce:50:c8:ef:55:8b:e1:77:db:
                    13:4e:64:39:cd:9e:2f:5c:67:a0:b9:37:74:40:1e:
                    56:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:35:7D:8B:E1:0A:D4:A3:22:1E:6B:85:FA:32:35:A2:68:5D:C7:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5573f7ae-9904-4e6f-a420-753d9cccf11c/cc3aa122dfd9e78c282ee13cf25302c07b4c605f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.52.0/22
                  177.234.128.0/22
                  186.182.0.0/16
                  190.3.0.0/17
                  190.220.0.0/15
                  200.49.64.0/19
                  200.59.128.0-200.59.175.255
                  200.61.32.0/19
                  200.69.128.0/19
                  200.80.128.0/17
                  200.123.64.0/18
                IPv6:
                  2800:190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11664
                  14535

    Signature Algorithm: sha256WithRSAEncryption
         3f:ce:7d:07:c8:fa:a9:f9:49:09:0c:50:cd:d6:16:c1:f1:7d:
         6c:43:49:c2:b9:59:08:04:aa:e6:9e:e5:af:8d:b3:93:50:62:
         be:64:a4:e9:3a:37:35:56:bc:6e:36:34:ac:c4:6a:f7:9d:34:
         d9:31:12:f4:1d:a8:f1:2a:43:d1:8e:6f:b6:28:ee:be:4a:11:
         0c:79:c0:0b:83:94:9a:6e:9f:a7:d9:96:80:b0:64:0e:29:82:
         88:dd:dd:f6:7e:d8:24:81:9b:a4:19:91:06:97:02:ea:84:8e:
         9b:88:f7:c4:6f:5a:25:81:65:c1:56:48:3c:29:8a:f8:41:49:
         d3:f8:9f:e4:82:2e:fb:be:bd:5e:5c:33:aa:1c:06:91:f8:fa:
         2b:24:0d:60:df:1c:f4:38:b9:8a:0c:09:9f:1b:ca:af:71:2b:
         e0:f8:35:10:ff:ea:28:ae:9c:ce:b4:95:e1:3c:1d:b8:3d:da:
         9a:d8:fb:d7:6c:ff:29:1f:b4:80:af:af:e4:e4:2c:df:79:2a:
         fa:8b:cf:43:18:fc:4f:69:cb:39:cd:fa:89:1d:bc:63:31:7f:
         d1:66:50:6b:16:05:3a:6c:8a:bb:b3:94:0e:87:2c:16:fa:64:
         be:c7:fa:84:b4:ae:10:2c:2c:72:cf:91:7f:d1:95:48:bb:16:
         a3:72:ae:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org