Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d096404f63772aa8165da1f7e01c34c4e378a916.cer
File:                     d096404f63772aa8165da1f7e01c34c4e378a916.cer (raw, json)
Hash identifier:          euwN4UqAVGGVBy1PVKqcmODD5nM2xFB0Bl1xPmWN6Nc=
Subject key identifier:   AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8C307
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/d096404f63772aa8165da1f7e01c34c4e378a916.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:05 +0000
Certificate not after:    Wed 09 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 27725
                          AS: 264713
                          IP: 152.206.0.0/15
                          IP: 181.225.224.0/19
                          IP: 190.6.64.0/19
                          IP: 190.15.144.0/20
                          IP: 190.92.112.0/20
                          IP: 200.13.144.0/21
                          IP: 200.55.128.0/18
                          IP: 2001:1358::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16302855 (0xf8c307)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:05 2017 GMT
            Not After : Oct  9 05:00:00 2024 GMT
        Subject: CN=d096404f63772aa8165da1f7e01c34c4e378a916
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:39:14:4c:59:30:97:aa:79:e6:13:71:be:d3:
                    be:90:0d:8b:94:ce:e9:b9:2d:67:6d:06:65:67:43:
                    2f:18:5b:30:b5:fa:05:7c:11:5f:80:7c:34:1f:2b:
                    3e:22:49:d5:42:49:ad:9b:71:5c:16:9a:23:1d:88:
                    e8:72:32:ab:90:32:d1:0c:1c:3e:f4:9a:8f:b1:34:
                    57:25:16:0a:3f:9e:63:ec:52:6e:de:b6:8a:03:6f:
                    17:3a:a5:94:9e:11:c8:4b:9a:b8:03:5d:d5:7e:65:
                    78:00:3d:fa:34:ca:6f:a1:e0:b7:95:13:88:0e:6c:
                    39:bb:e0:f3:78:b5:d1:bf:3d:bc:bc:93:76:3f:af:
                    46:49:ea:fd:b3:06:0d:96:4a:61:8d:0a:3a:9d:67:
                    d7:be:af:43:76:82:0b:0e:41:73:8e:6c:8d:32:aa:
                    27:2d:e4:c6:28:ce:3b:78:8a:0d:0e:77:47:87:8a:
                    06:80:a6:f1:48:c4:5f:23:fb:3a:b9:1c:ba:62:dc:
                    de:bb:e0:d5:69:74:75:bc:4f:a1:55:09:f6:0e:df:
                    3f:c9:af:bd:53:be:42:fa:b4:cb:3e:83:12:1b:13:
                    56:90:68:44:b7:0d:d5:79:78:29:4a:7a:61:ea:06:
                    9d:8d:36:38:51:0a:3b:11:7d:ab:9d:48:5d:f8:5a:
                    15:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:84:A6:DF:5E:30:C0:53:10:DA:CC:67:B6:EF:FE:41:4E:74:D2:95
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d6483cfb-7ab1-4508-bf6f-8953957d8887/d096404f63772aa8165da1f7e01c34c4e378a916.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  152.206.0.0/15
                  181.225.224.0/19
                  190.6.64.0/19
                  190.15.144.0/20
                  190.92.112.0/20
                  200.13.144.0/21
                  200.55.128.0/18
                IPv6:
                  2001:1358::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27725
                  264713

    Signature Algorithm: sha256WithRSAEncryption
         5f:e8:6a:e4:84:30:52:8b:a3:65:90:a0:49:82:9c:4f:e1:c4:
         f8:1b:96:50:78:fd:7a:79:fa:fa:1e:66:e9:cb:4a:11:11:05:
         74:75:a8:62:82:24:00:92:e5:bc:2c:c8:a4:a5:50:ab:08:95:
         a1:20:c3:6c:c9:d9:fb:97:46:66:f1:63:ae:e4:62:19:d7:72:
         3d:ed:14:b6:1f:6b:e0:2c:40:dd:a2:22:72:d1:3a:ba:f1:6c:
         73:00:ad:1d:c1:84:a2:f4:ee:05:24:3d:45:d9:89:7a:31:a8:
         9a:7b:8b:1a:d7:0b:ff:5a:54:e9:78:e5:93:08:74:ec:e9:9a:
         0e:08:d1:78:30:42:10:fd:57:fe:a4:a1:77:eb:c5:0e:dd:17:
         67:fb:e0:f4:70:57:f3:4e:06:76:32:e5:d4:19:cd:7b:27:83:
         78:ce:eb:3b:db:a3:70:ae:f6:81:a4:55:bc:24:cb:39:2e:92:
         73:28:45:c0:87:13:f2:42:4a:dd:69:a6:44:7d:c7:cd:ea:39:
         83:75:ea:44:c5:7a:0f:bf:e7:c4:71:44:27:cb:83:ed:7e:b2:
         29:78:86:19:b4:a7:e1:63:db:09:b3:97:f7:dd:4d:74:a6:82:
         d9:60:7c:18:d1:11:e0:4c:db:dc:e5:52:bf:99:df:f0:43:f9:
         93:bb:7a:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org