Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d65959d5e3125a8e00fa54595054775f2d61736a.cer
File:                     d65959d5e3125a8e00fa54595054775f2d61736a.cer (raw, json)
Hash identifier:          bPyPmYCa9kmMH/ShXfFe2Ae+jS8tpeVlhab3GcTJpZE=
Subject key identifier:   97:46:91:8E:A1:79:9B:42:B9:19:23:0B:73:88:0B:DD:20:F8:0F:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF3BFB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7afdecf6-5c24-46a4-80a1-0247ed16b304/d65959d5e3125a8e00fa54595054775f2d61736a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7afdecf6-5c24-46a4-80a1-0247ed16b304/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:11:40 +0000
Certificate not after:    Wed 05 Feb 2025 14:00:00 +0000
Subordinate resources:    AS: 17379
                          IP: 186.203.0.0/16
                          IP: 187.48.0.0/16
                          IP: 189.21.0.0/16
                          IP: 189.77.0.0/16
                          IP: 200.157.0.0/16
                          IP: 200.184.0.0/16
                          IP: 201.12.0.0/16
                          IP: 201.36.0.0/16
                          IP: 201.70.0.0/16
                          IP: 2804:20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16727035 (0xff3bfb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:11:40 2023 GMT
            Not After : Feb  5 14:00:00 2025 GMT
        Subject: CN=d65959d5e3125a8e00fa54595054775f2d61736a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:31:b2:b3:4a:a7:97:63:02:2c:48:2a:8a:75:
                    89:36:c7:5a:77:a9:38:83:46:5f:87:5c:67:82:32:
                    48:b4:21:c3:02:b1:2b:2b:97:e9:9a:f6:e2:3d:51:
                    0f:ff:02:2f:1e:2f:ca:45:7b:b5:bf:f9:d1:f2:e8:
                    79:16:0e:41:02:85:66:3d:f8:86:02:0e:5d:01:34:
                    39:8c:51:6e:fb:d3:74:1e:3e:a7:48:49:cc:cc:e0:
                    4c:6f:16:50:a0:f7:e3:f2:bb:60:5a:1f:03:80:a5:
                    f9:a1:2f:04:8e:7c:64:77:f2:bf:fd:64:28:82:82:
                    c8:d3:90:c0:00:99:64:19:07:89:f7:c5:91:a7:5d:
                    b8:29:af:02:be:94:72:a8:67:10:d6:6a:ed:89:e1:
                    d8:bc:f6:1b:ce:3d:1a:a1:99:a7:67:85:48:e7:07:
                    ea:e8:a7:f5:c2:bd:7a:52:1e:31:70:31:a9:60:21:
                    14:68:09:d8:7b:fa:b0:ad:4b:fa:f3:cb:5b:d4:e1:
                    16:18:16:aa:06:b7:71:21:56:15:91:ca:3e:09:3a:
                    69:93:d3:3f:94:ec:59:f4:48:e9:f7:c7:b9:3f:88:
                    13:ae:dc:6b:51:20:8b:c8:fa:8f:7c:e7:84:38:4e:
                    ef:90:e2:c6:47:f9:98:95:3d:0f:d3:de:7c:b0:73:
                    5a:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:46:91:8E:A1:79:9B:42:B9:19:23:0B:73:88:0B:DD:20:F8:0F:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7afdecf6-5c24-46a4-80a1-0247ed16b304/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7afdecf6-5c24-46a4-80a1-0247ed16b304/d65959d5e3125a8e00fa54595054775f2d61736a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.203.0.0/16
                  187.48.0.0/16
                  189.21.0.0/16
                  189.77.0.0/16
                  200.157.0.0/16
                  200.184.0.0/16
                  201.12.0.0/16
                  201.36.0.0/16
                  201.70.0.0/16
                IPv6:
                  2804:20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  17379

    Signature Algorithm: sha256WithRSAEncryption
         8d:8a:a4:b0:8c:7b:fb:1f:f8:07:02:6c:b7:8a:8a:4c:15:ad:
         8a:a8:a1:2f:05:3d:05:ee:a3:2e:e2:42:3f:2b:87:c1:53:29:
         71:20:76:7f:9b:82:ed:8d:51:58:60:9f:c3:f6:2a:cf:0f:99:
         97:4b:f7:6c:95:e0:e9:9e:8b:13:bd:62:5b:cc:16:0f:73:22:
         21:02:13:53:d8:36:09:6d:ed:bb:d4:f0:d4:27:8a:66:3a:fc:
         9d:13:bf:eb:70:6f:b1:8d:63:40:a4:13:a2:ae:b3:19:5d:8f:
         3f:8c:2d:e0:6b:fc:8c:d3:59:49:94:e7:6c:3c:4b:85:3a:18:
         4b:32:a6:e8:31:a7:43:33:0f:6e:06:0c:04:7a:ff:fa:9f:28:
         8e:f1:4a:74:fe:ff:79:44:15:1d:f2:da:4b:43:59:19:06:39:
         a1:ce:67:f1:4a:14:47:2a:3e:54:33:76:3e:2a:fe:38:74:d8:
         91:68:59:05:4d:59:93:17:bf:04:41:00:f2:a4:f9:2c:c5:de:
         b3:f7:01:58:ce:03:40:23:0e:13:39:1a:22:24:f8:41:56:41:
         e8:dc:bf:3f:fe:a6:d1:6a:e5:c4:31:3b:51:94:9a:d2:8b:dd:
         2d:fb:86:c1:41:e5:09:5f:66:31:11:5a:55:ae:f8:2a:ac:88:
         f4:64:d8:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org