Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d18f35cfd92e313d3187378fdfd3c86ff57ac7e1.cer
File:                     d18f35cfd92e313d3187378fdfd3c86ff57ac7e1.cer (raw, json)
Hash identifier:          WdB76F2DulmDHCbKTvo+2XjsDp2Swbgx7qoGiEPwzFg=
Subject key identifier:   54:74:85:FB:37:E5:84:0C:5D:6A:6F:8B:9C:C7:02:6E:A1:6A:59:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF4CE4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2ac855ad-ad36-451d-96ff-b2ed33c95176/d18f35cfd92e313d3187378fdfd3c86ff57ac7e1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2ac855ad-ad36-451d-96ff-b2ed33c95176/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:14:31 +0000
Certificate not after:    Tue 03 Jun 2025 18:46:59 +0000
Subordinate resources:    AS: 28165
                          IP: 131.255.100.0/22
                          IP: 138.59.148.0/22
                          IP: 138.204.92.0/22
                          IP: 170.81.168.0/22
                          IP: 177.184.192.0/20
                          IP: 177.222.16.0/20
                          IP: 187.62.208.0/20
                          IP: 191.240.144.0/20
                          IP: 200.229.224.0/20
                          IP: 2804:340::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16731364 (0xff4ce4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:14:31 2023 GMT
            Not After : Jun  3 18:46:59 2025 GMT
        Subject: CN=d18f35cfd92e313d3187378fdfd3c86ff57ac7e1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:82:b5:7b:ed:08:54:45:b5:c7:87:a6:f7:5a:
                    cf:30:1c:55:0e:87:98:4a:00:74:b7:5d:2f:7b:81:
                    e1:c4:c4:89:40:6f:8b:ba:36:cd:f3:4d:62:28:83:
                    56:41:55:27:18:be:e3:4a:bd:57:0d:c0:d3:ba:27:
                    7e:ef:60:67:25:58:16:dc:92:0a:3f:69:7f:04:31:
                    07:37:7c:97:72:66:24:67:75:f4:fb:27:57:3d:db:
                    25:f1:a2:2e:5d:96:75:c0:3c:97:39:b0:03:5c:f1:
                    b1:87:1d:95:08:03:96:83:2f:5c:73:f0:ac:1a:9c:
                    79:86:56:82:30:bb:65:1e:fd:6a:77:67:26:85:f3:
                    3c:8c:2f:f6:cb:1a:7f:05:c3:bc:39:d9:15:56:91:
                    a5:46:ab:1d:85:9b:78:fe:fd:fb:e6:96:9a:19:25:
                    88:9f:ea:fa:bc:53:1a:45:21:5b:46:a2:9e:dc:65:
                    9d:af:ec:79:3b:ad:8f:71:59:8b:bf:64:07:ea:55:
                    4b:84:28:f2:eb:53:bd:9c:b2:c7:20:06:46:56:fb:
                    c6:40:4c:f6:95:d9:59:e0:95:51:cb:bb:d3:a5:6e:
                    55:d3:85:16:b6:84:19:d9:f7:f1:5d:0c:ff:5f:c3:
                    55:f7:aa:ef:47:8e:80:0e:12:d5:88:99:49:f3:15:
                    4a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:74:85:FB:37:E5:84:0C:5D:6A:6F:8B:9C:C7:02:6E:A1:6A:59:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2ac855ad-ad36-451d-96ff-b2ed33c95176/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2ac855ad-ad36-451d-96ff-b2ed33c95176/d18f35cfd92e313d3187378fdfd3c86ff57ac7e1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.100.0/22
                  138.59.148.0/22
                  138.204.92.0/22
                  170.81.168.0/22
                  177.184.192.0/20
                  177.222.16.0/20
                  187.62.208.0/20
                  191.240.144.0/20
                  200.229.224.0/20
                IPv6:
                  2804:340::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28165

    Signature Algorithm: sha256WithRSAEncryption
         85:47:c8:d8:f3:8f:39:8c:47:91:f1:4c:b4:96:5d:8d:b5:fc:
         64:ac:b8:be:d5:b7:61:17:78:23:0c:71:4b:4e:5e:e1:14:ee:
         98:e4:88:30:74:c8:91:7a:d7:c9:32:d9:99:74:a4:da:fb:a8:
         94:7b:a0:92:28:c2:29:b6:66:2a:00:b7:99:30:a6:c8:3d:e2:
         34:8e:31:bb:72:04:57:01:86:97:e0:57:5f:e3:ee:06:09:05:
         70:1b:5b:d2:63:5e:a9:32:fb:e9:9e:06:24:48:aa:02:52:5f:
         7e:79:09:19:38:5f:98:be:92:d3:15:0f:f5:00:05:94:9d:38:
         ee:a4:a5:3d:42:02:63:91:c1:41:04:68:2a:63:cd:3f:df:1f:
         ab:a8:eb:51:ee:76:6a:70:d6:1d:05:bd:32:ae:60:d4:83:f2:
         0b:10:fc:68:f9:f0:96:07:f9:7b:47:11:21:03:64:16:b5:2f:
         64:49:07:9a:22:31:f9:d5:85:cc:8c:ba:be:20:5a:0d:47:e2:
         f3:d6:c7:e4:c0:3e:5d:fb:02:23:6c:c7:37:1c:c0:0d:48:5a:
         62:99:ab:68:e7:66:7c:a0:3b:ff:7b:c5:08:5c:e1:53:7e:fa:
         bc:56:be:08:ae:fa:52:f6:b8:c9:40:6c:9c:2a:7c:fa:bb:b5:
         d2:d9:47:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org