Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d150a188184eb3e194f963dfc48dfa17a2509aa8.cer
File:                     d150a188184eb3e194f963dfc48dfa17a2509aa8.cer (raw, json)
Hash identifier:          leSQlpvBTgBIbSKc0TsyFlmWfUeJdH6R/p30itMttXw=
Subject key identifier:   21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2EAE7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:09 +0000
Certificate not after:    Sun 25 Aug 2024 20:20:31 +0000
Subordinate resources:    AS: 264801
                          IP: 170.238.170.0/23
                          IP: 2801:1e:5000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15919847 (0xf2eae7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:09 2017 GMT
            Not After : Aug 25 20:20:31 2024 GMT
        Subject: CN=d150a188184eb3e194f963dfc48dfa17a2509aa8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:d3:b0:9e:b3:c9:6b:d2:8e:dd:14:3b:7d:7d:
                    0a:b8:45:e6:49:9b:6c:03:81:91:cf:95:04:e0:9a:
                    9c:a5:fe:3a:95:47:65:1e:29:e2:17:fc:9c:87:14:
                    84:6d:a3:b5:b6:e5:c3:9b:e7:2d:a5:bd:ed:6c:9d:
                    a8:c4:0e:f3:b4:5c:ec:c6:32:8a:1d:f7:5d:ed:7a:
                    7a:dd:7e:82:b9:8e:25:bf:07:9a:99:3c:2f:3e:fd:
                    4b:5b:f2:d8:54:88:e0:1f:ec:00:5f:53:62:50:f6:
                    75:05:83:e7:05:af:11:68:91:56:25:c7:10:73:42:
                    3d:fa:59:cb:8e:0a:50:92:3f:41:3d:32:03:ad:11:
                    7f:e1:a3:a3:2c:4b:8f:29:29:b2:eb:9f:88:6f:b4:
                    35:79:6d:49:2d:c4:ef:49:b8:1a:19:8e:29:c3:67:
                    4c:85:ff:8f:ce:5d:72:bc:14:2d:89:22:1a:fd:28:
                    93:76:25:c6:4c:87:c6:84:9f:7f:67:32:35:ec:93:
                    5d:18:78:b5:df:13:a8:4b:4e:45:5c:22:0b:16:53:
                    e4:b1:96:6d:9f:cb:06:ae:52:f9:14:9f:70:88:75:
                    2e:44:07:44:92:c9:2c:ac:fb:11:dc:87:a0:f9:05:
                    98:79:fd:03:fa:1c:a9:1a:e1:e0:73:42:12:3d:d2:
                    f3:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:20:91:3C:94:CA:E1:FF:C4:4E:C9:5A:B1:74:28:10:39:8E:02:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0a0e8431-8546-408b-b823-d824d6768f41/d150a188184eb3e194f963dfc48dfa17a2509aa8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.170.0/23
                IPv6:
                  2801:1e:5000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264801

    Signature Algorithm: sha256WithRSAEncryption
         98:fa:09:1e:56:aa:d7:cd:4b:5e:bb:62:6b:bc:0a:06:27:e6:
         31:00:08:27:21:bb:7b:e0:2d:02:36:2d:bb:27:62:81:59:36:
         3f:fe:cc:ef:09:5f:e6:45:e5:f3:db:93:ac:e1:74:18:ef:7e:
         65:bb:b6:d3:fc:ee:d9:6a:68:8b:82:c3:e5:77:3f:ea:14:aa:
         ea:df:9e:36:62:e8:31:c7:30:ba:ff:ea:ad:4b:8f:8e:e2:b5:
         61:95:bc:27:3a:d1:48:ee:52:46:b9:c2:fb:6c:da:b7:7b:11:
         75:9e:39:a6:b0:93:c3:7e:71:98:1b:19:52:db:66:18:07:4a:
         84:8a:70:50:a2:71:e8:50:60:dc:c1:e5:ae:12:12:a1:08:a7:
         69:db:bf:3e:21:ec:99:f2:ee:d6:3a:53:8b:81:8f:30:56:1c:
         0c:0a:22:aa:d3:37:79:cd:a5:97:76:3e:4d:1e:5c:87:be:d8:
         34:30:6d:50:45:5f:b7:52:bc:c6:6e:ac:a7:82:0a:a2:fb:2c:
         29:cd:e2:b3:90:68:75:0a:a7:42:96:e3:2e:cf:c3:23:e8:63:
         d6:22:58:01:cd:2b:50:ed:84:63:d3:1a:16:18:65:5d:14:6a:
         8c:1a:56:c3:5e:ce:ca:a8:f1:b8:ae:24:3b:36:98:0d:8c:ae:
         4c:03:2b:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org