Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfcd6d10d0dd04bb946c445d455459896da6fcae.cer
File:                     cfcd6d10d0dd04bb946c445d455459896da6fcae.cer (raw, json)
Hash identifier:          Uz28Pybs++hNVVIMcJLzfy5lQT81cvJ5jijPNbBa7LI=
Subject key identifier:   C2:79:C1:30:AE:CE:0F:68:2E:CE:1C:E2:9B:6F:90:E2:68:79:A3:4C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF8FF9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1e25cbe2-0518-4e5f-9d8e-7ee00c3e2bb3/cfcd6d10d0dd04bb946c445d455459896da6fcae.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1e25cbe2-0518-4e5f-9d8e-7ee00c3e2bb3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:44:16 +0000
Certificate not after:    Wed 18 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 8055
                          AS: 14204
                          IP: 187.84.96.0/20
                          IP: 200.142.240.0/20
                          IP: 200.160.48.0/20
                          IP: 200.189.48.0/21
                          IP: 2804:4c::/32
                          IP: 2804:3a50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16748537 (0xff8ff9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:44:16 2023 GMT
            Not After : Sep 18 15:00:00 2024 GMT
        Subject: CN=cfcd6d10d0dd04bb946c445d455459896da6fcae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:27:09:71:fe:4b:13:27:db:26:18:84:c1:64:
                    2d:f3:ce:40:e2:f9:d4:ae:f0:14:92:80:95:07:30:
                    2a:07:4b:a0:9d:50:b0:c7:14:08:36:3f:ad:e2:83:
                    20:3d:fe:4a:ce:77:d7:e4:ad:c0:25:26:40:17:46:
                    31:a3:b2:22:fb:21:e1:62:19:f0:da:74:39:45:a1:
                    cd:04:83:fa:a1:6a:ee:ae:2a:96:90:ce:93:60:1a:
                    5b:86:37:f4:29:8e:e7:4b:96:ad:49:df:1e:7b:57:
                    c1:e4:cf:ce:8a:4c:96:36:11:dd:11:0f:02:25:7b:
                    41:d1:9a:6e:f1:c4:64:ee:f3:08:5f:fa:26:ae:c0:
                    0b:f8:b6:dd:8a:6d:1c:64:53:39:3c:41:c9:d4:b8:
                    0a:7e:42:f1:7b:94:6c:95:93:1f:8d:45:d0:26:5c:
                    fa:f7:04:6e:08:68:68:f7:80:a8:12:b8:ac:28:ab:
                    85:a1:e0:77:cf:37:99:70:a8:72:a8:28:cb:96:6b:
                    56:a6:58:d5:37:d2:c6:55:d1:d2:fb:07:5d:c3:e3:
                    45:1b:a7:3c:ac:5a:89:c1:e0:67:bc:05:e9:aa:b4:
                    f4:dc:4f:0f:40:03:24:d0:5d:ef:13:87:4d:4c:c4:
                    c3:ed:7e:a1:2b:52:c6:48:f0:64:8b:07:6b:e8:ce:
                    8d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:79:C1:30:AE:CE:0F:68:2E:CE:1C:E2:9B:6F:90:E2:68:79:A3:4C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1e25cbe2-0518-4e5f-9d8e-7ee00c3e2bb3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1e25cbe2-0518-4e5f-9d8e-7ee00c3e2bb3/cfcd6d10d0dd04bb946c445d455459896da6fcae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.84.96.0/20
                  200.142.240.0/20
                  200.160.48.0/20
                  200.189.48.0/21
                IPv6:
                  2804:4c::/32
                  2804:3a50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8055
                  14204

    Signature Algorithm: sha256WithRSAEncryption
         24:d9:28:6c:87:ff:e6:a4:87:ca:1a:63:18:fe:1e:70:53:e6:
         68:af:9c:36:cb:1c:26:02:c6:ef:4a:00:ad:13:38:88:85:49:
         d5:2d:a0:83:c7:5c:44:14:5d:f1:a4:f9:da:60:51:f9:7e:c5:
         51:b4:a0:5f:aa:5e:89:be:30:07:8d:b0:d5:d9:e4:63:46:9f:
         11:be:fb:1f:0e:db:bc:df:a5:19:e1:7b:af:04:dc:47:1a:e8:
         f9:93:cb:33:46:81:2a:04:b0:82:a0:b6:97:f7:bc:d4:7a:37:
         9b:f1:20:f6:09:d1:db:a9:7c:3a:20:5d:8a:e8:c7:d7:4a:bd:
         65:3d:07:ca:31:ad:d9:e9:ee:5d:07:bf:4d:95:29:da:8f:c5:
         98:a3:ef:43:d0:64:e0:19:b9:0c:de:8b:d1:6a:3b:e6:9c:63:
         f1:50:96:eb:02:f9:82:c7:07:c6:7c:3b:80:ee:70:1b:65:c6:
         cb:33:61:0c:ce:71:16:e0:b6:44:1f:fb:fa:da:d2:e9:70:d2:
         9b:4e:f3:9f:d6:f6:1f:46:eb:cd:37:1a:4b:77:c1:a8:c7:bd:
         6a:ca:da:4d:e0:60:fb:bc:cd:f6:d5:7d:d5:4e:02:7b:5a:27:
         df:4d:9e:a7:f8:70:dc:f2:5e:52:df:23:0c:9f:eb:7d:b3:9f:
         d5:f2:9d:c6
-----BEGIN CERTIFICATE-----
MIIF9jCCBN6gAwIBAgIEAP+P+TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTAyOTE3NDQxNloXDTI0MDkxODE1MDAw
MFowMzExMC8GA1UEAxMoY2ZjZDZkMTBkMGRkMDRiYjk0NmM0NDVkNDU1NDU5ODk2
ZGE2ZmNhZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIgnCXH+SxMn
2yYYhMFkLfPOQOL51K7wFJKAlQcwKgdLoJ1QsMcUCDY/reKDID3+Ss531+StwCUm
QBdGMaOyIvsh4WIZ8Np0OUWhzQSD+qFq7q4qlpDOk2AaW4Y39CmO50uWrUnfHntX
weTPzopMljYR3REPAiV7QdGabvHEZO7zCF/6Jq7AC/i23YptHGRTOTxBydS4Cn5C
8XuUbJWTH41F0CZc+vcEbghoaPeAqBK4rCirhaHgd883mXCocqgoy5ZrVqZY1TfS
xlXR0vsHXcPjRRunPKxaicHgZ7wF6aq09NxPD0ADJNBd7xOHTUzEw+1+oStSxkjw
ZIsHa+jOja8CAwEAAaOCAyUwggMhMB0GA1UdDgQWBBTCecEwrs4PaC7OHOKbb5Di
aHmjTDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xZTI1Y2JlMi0wNTE4
LTRlNWYtOWQ4ZS03ZWUwMGMzZTJiYjMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWUyNWNiZTItMDUxOC00
ZTVmLTlkOGUtN2VlMDBjM2UyYmIzL2NmY2Q2ZDEwZDBkZDA0YmI5NDZjNDQ1ZDQ1
NTQ1OTg5NmRhNmZjYWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBH
BggrBgEFBQcBBwEB/wQ4MDYwHgQCAAEwGAMEBLtUYAMEBMiO8AMEBMigMAMEA8i9
MDAUBAIAAjAOAwUAKAQATAMFACgEOlAwHQYIKwYBBQUHAQgBAf8EDjAMoAowCAIC
H3cCAjd8MA0GCSqGSIb3DQEBCwUAA4IBAQAk2Shsh//mpIfKGmMY/h5wU+Zor5w2
yxwmAsbvSgCtEziIhUnVLaCDx1xEFF3xpPnaYFH5fsVRtKBfql6JvjAHjbDV2eRj
Rp8RvvsfDtu836UZ4XuvBNxHGuj5k8szRoEqBLCCoLaX97zUejeb8SD2CdHbqXw6
IF2K6MfXSr1lPQfKMa3Z6e5dB79NlSnaj8WYo+9D0GTgGbkM3ovRajvmnGPxUJbr
AvmCxwfGfDuA7nAbZcbLM2EMznEW4LZEH/v62tLpcNKbTvOf1vYfRuvNNxpLd8Go
x71qytpN4GD7vM321X3VTgJ7WiffTZ6n+HDc8l5S3yMMn+t9s5/V8p3G
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org