Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer
File:                     d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.cer (raw, json)
Hash identifier:          GQexu2KuvnQKCGektWfor54uaGHrqPpwjRw5cqQ7C9Q=
Subject key identifier:   40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4842D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:20 +0000
Certificate not after:    Mon 09 Sep 2024 22:02:57 +0000
Subordinate resources:    AS: 28114
                          AS: 270103
                          IP: 168.195.108.0/22
                          IP: 181.118.0.0/19
                          IP: 186.183.0.0/17
                          IP: 190.12.160.0/19
                          IP: 190.115.32.0/19
                          IP: 200.114.120.0/21
                          IP: 2803:2600::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16024621 (0xf4842d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:20 2017 GMT
            Not After : Sep  9 22:02:57 2024 GMT
        Subject: CN=d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:00:40:5d:6b:5d:fe:39:11:42:17:7a:4e:b1:
                    3b:30:d4:d5:d7:4d:cc:99:fb:d9:7d:27:be:8b:00:
                    4f:7d:19:cf:7c:87:01:9c:57:63:86:48:82:a3:0a:
                    f0:13:f2:f2:2e:bb:5c:f4:44:aa:c8:70:e3:6c:6e:
                    d0:52:39:22:45:38:1d:ec:b8:c6:0a:c0:83:3e:bd:
                    1a:87:de:f3:c0:22:b9:0b:3d:4f:4f:d7:af:7d:cf:
                    3a:ea:0c:cf:e3:89:21:7b:fe:db:0a:a5:0f:ce:a8:
                    f6:d8:3f:e2:5c:09:8b:4a:56:85:8e:69:69:ca:11:
                    2f:3a:5c:6a:c2:76:0e:f9:a7:19:a0:48:82:7b:29:
                    84:c2:33:08:ac:aa:d2:44:0c:89:01:3c:f1:9b:9a:
                    b6:4a:d4:12:b8:cc:0a:63:02:d7:bf:01:8f:2c:bd:
                    f3:32:09:5c:b7:9c:75:a3:d8:74:a4:9a:ea:0e:91:
                    4e:23:40:9f:9a:ab:71:14:42:42:41:90:4a:28:5f:
                    33:3b:22:e3:15:6b:fb:76:b2:10:c4:e4:83:8b:32:
                    93:2e:c7:64:b9:cb:37:f4:f5:4a:e1:fb:4e:19:18:
                    e4:71:db:ce:30:72:03:d1:27:57:ef:d0:94:15:17:
                    c1:eb:d1:c0:62:25:8e:99:6f:90:31:bc:d2:59:28:
                    8f:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:37:2B:8A:A4:64:31:7E:A5:61:E6:C4:63:CB:F7:04:CD:94:A0:63
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cff76ec0-7d4a-49c3-b4ae-3e6a91b723cb/d8cb185dc2b67fea4e8fcc9303de76b2e6b3e765.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.195.108.0/22
                  181.118.0.0/19
                  186.183.0.0/17
                  190.12.160.0/19
                  190.115.32.0/19
                  200.114.120.0/21
                IPv6:
                  2803:2600::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28114
                  270103

    Signature Algorithm: sha256WithRSAEncryption
         6d:58:3a:da:be:2d:e9:02:8a:a4:8c:ab:01:eb:ef:97:29:c5:
         ce:33:d9:35:86:59:e9:8f:ff:55:52:e0:c6:07:90:8d:d1:d3:
         79:06:32:32:18:f8:46:ab:9b:36:29:55:e5:bc:e4:5a:96:3a:
         47:0b:83:b4:3e:d4:74:b5:a2:b4:e6:43:11:bf:2f:42:8f:cb:
         b7:c5:ab:15:1c:75:1b:17:36:51:4f:f6:f1:d0:c1:1e:ca:1c:
         cd:86:13:e2:e9:25:0c:af:00:7b:da:b5:53:f3:20:18:f3:d1:
         b3:d1:75:ab:da:0b:b2:e3:dd:77:59:f3:8d:16:8e:f2:55:14:
         d8:42:0f:26:a3:1e:f3:4f:19:09:36:e2:32:16:28:fb:16:89:
         e9:cd:e1:cd:ea:fa:01:8d:5d:ec:76:18:6b:cb:53:52:de:e9:
         47:52:f7:49:08:b2:19:bf:c8:57:59:b6:58:52:20:63:6d:11:
         66:66:75:97:52:36:12:c8:5f:39:a7:93:d6:08:5b:10:30:72:
         85:ce:d7:ec:ca:d7:e1:ad:f5:85:f4:97:4a:5a:74:09:6a:63:
         1f:7a:c6:9e:6a:7c:5d:88:27:38:fa:38:e9:89:3f:b6:ba:1c:
         5e:1c:0e:57:bb:77:86:c4:37:77:37:19:c6:c2:c4:e3:61:7e:
         4d:79:e1:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org