Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ce24136a35f10502f080a99eec6f12882d2f04fa.cer
File:                     ce24136a35f10502f080a99eec6f12882d2f04fa.cer (raw, json)
Hash identifier:          UJvpZC2bJyhRz2Ub5NjgCUFDF8ccL0qY6dLJpi6kfzo=
Subject key identifier:   2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       938E93
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Nov 2020 15:05:39 +0000
Certificate not after:    Wed 01 Jun 2022 06:00:00 +0000
Subordinate resources:    AS: 61440
                          IP: 179.61.128.0/17
                          IP: 181.214.0.0/15
                          IP: 191.96.0.0/16
                          IP: 191.101.0.0/16
                          IP: 2803:80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 9670291 (0x938e93)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 25 15:05:39 2020 GMT
            Not After : Jun  1 06:00:00 2022 GMT
        Subject: CN=ce24136a35f10502f080a99eec6f12882d2f04fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4f:50:67:18:f8:d9:d1:f5:da:9f:84:00:3e:
                    ba:3e:2b:d1:98:51:86:92:4d:d5:74:7e:2a:8c:19:
                    38:b1:aa:83:2f:c9:6b:aa:0a:17:28:70:1c:5b:f5:
                    cf:2e:93:2a:e4:f7:2a:06:9b:fd:91:07:d3:c3:30:
                    44:f8:35:d5:62:6c:e6:ac:e0:82:da:24:55:cf:4e:
                    46:90:1b:8a:1e:37:9d:78:0b:60:57:91:e2:61:55:
                    f2:44:e9:df:d4:8c:32:48:c5:d9:86:7e:fd:9b:88:
                    da:37:8d:a0:2c:cf:48:f4:de:64:35:32:38:71:14:
                    28:d0:85:06:13:67:54:6c:0e:9e:bf:74:29:76:66:
                    9e:b5:0e:cd:2e:40:f7:ad:e2:67:47:ae:67:17:5b:
                    ce:98:0c:06:f2:83:e4:7e:af:8f:61:94:ec:3e:8a:
                    74:99:dd:47:b6:79:1b:0f:8d:40:89:b8:39:bf:e1:
                    3f:41:76:dc:18:f2:71:fc:3f:c4:b2:08:f0:22:fc:
                    54:d3:8e:4b:02:a6:7d:36:1f:f6:37:6b:66:2e:12:
                    36:fa:f1:b6:13:1c:de:2c:ff:76:c8:56:df:9b:81:
                    f8:6c:c1:4d:74:77:77:bc:80:f1:d2:d2:12:d3:8e:
                    97:f8:e9:42:42:d9:99:9f:63:17:25:7b:5f:42:13:
                    80:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:BF:EF:19:5F:7B:40:83:DF:37:7B:2F:FB:C7:7B:50:DD:10:0A:E3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ef4b066-e4d2-4e53-839e-8bdffb17a52b/ce24136a35f10502f080a99eec6f12882d2f04fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.61.128.0/17
                  181.214.0.0/15
                  191.96.0.0/16
                  191.101.0.0/16
                IPv6:
                  2803:80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61440

    Signature Algorithm: sha256WithRSAEncryption
         91:a3:b8:64:2a:27:85:78:07:50:a4:d0:c5:83:05:4d:25:7c:
         34:35:70:9c:45:fe:93:ec:a1:6a:44:ea:ac:eb:8a:5a:99:31:
         2a:c9:e8:ff:7d:a2:0c:31:cb:83:6b:53:25:61:aa:36:97:a5:
         21:38:34:04:bc:f5:4f:9a:17:f6:34:da:1f:71:69:bb:e7:6f:
         1a:d2:c1:e7:5d:9a:52:d7:0f:05:45:a3:ce:62:92:24:05:13:
         b2:10:d0:c0:ae:ee:ca:20:ee:68:72:23:49:b7:09:d2:50:c4:
         d0:68:f9:3f:69:4e:7c:a8:88:a4:80:ae:5b:0f:71:f3:ac:92:
         ac:2c:16:8f:21:a7:b8:59:05:0c:24:87:4f:4b:64:66:5e:37:
         bc:38:d5:35:68:e9:14:dc:a2:e8:6f:ad:01:33:4d:2e:70:de:
         ee:5d:ae:10:75:f6:b8:a4:75:bb:d5:0d:3c:fb:3f:dd:48:e6:
         a4:dc:e1:4d:96:fb:78:dc:61:a5:ee:6a:0a:a9:8f:39:c5:d6:
         47:29:9b:98:1b:ff:83:4a:39:a1:48:53:7f:66:4e:e4:4e:22:
         8e:3c:ec:41:3c:2d:26:36:4f:7f:ef:08:20:d4:e0:d3:af:91:
         c5:48:62:55:c1:cc:bd:02:a0:cc:8a:d2:ed:d3:9f:62:70:d4:
         73:cb:0a:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org