Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da0cd30df4491331691a183f5b0a9260b7daadec.cer
File:                     da0cd30df4491331691a183f5b0a9260b7daadec.cer (raw, json)
Hash identifier:          j5UKNo9n5WdsFx/f4KyI2dviKOVTMGpBJHcLWqKf2xA=
Subject key identifier:   21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E7376
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Wed 16 Apr 2025 06:00:00 +0000
Subordinate resources:    AS: 6458
                          AS: 13682
                          AS: 14754
                          IP: 181.209.128.0/17
                          IP: 186.151.0.0 -- 186.151.93.255
                          IP: 186.151.95.0/24
                          IP: 186.151.112.0 -- 186.151.255.255
                          IP: 190.56.0.0/16
                          IP: 190.143.128.0 -- 190.143.239.255
                          IP: 190.148.0.0 -- 190.148.84.255
                          IP: 190.148.86.0 -- 190.149.133.255
                          IP: 190.149.135.0 -- 190.149.151.255
                          IP: 190.149.153.0 -- 190.149.255.255
                          IP: 200.6.192.0/18
                          IP: 200.119.128.0 -- 200.119.150.255
                          IP: 200.119.154.0 -- 200.119.183.255
                          IP: 201.216.128.0/18
                          IP: 216.230.128.0/19
                          IP: 2800:98::/32
                          IP: 2800:890::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17724278 (0x10e7376)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Apr 16 06:00:00 2025 GMT
        Subject: CN=da0cd30df4491331691a183f5b0a9260b7daadec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:36:7f:6d:03:43:08:62:1a:f6:ab:97:c3:10:
                    88:dd:15:6a:0a:2f:48:48:a6:f3:79:ab:c4:29:71:
                    4a:a5:45:9d:b6:52:c8:1b:63:57:78:51:39:c4:da:
                    30:24:54:60:d6:8f:87:a4:11:a9:fe:db:9d:63:6e:
                    90:f7:69:50:2f:c5:08:e1:4e:ac:20:bb:33:70:49:
                    3b:6a:98:ee:6d:53:36:0a:1b:fa:45:3d:18:0c:4e:
                    fc:3c:1a:97:c6:b4:65:45:71:ee:ed:89:b3:74:b7:
                    14:ed:ca:7e:ae:f6:57:56:86:fe:ff:8d:93:fe:24:
                    a9:99:8f:6e:18:10:92:97:10:9d:36:a7:58:a6:6e:
                    8c:57:f1:06:ba:3f:67:f4:6a:47:97:7b:46:99:6d:
                    19:4f:91:da:5a:d1:a7:5c:c9:48:11:e2:bb:4c:36:
                    f1:6c:5f:96:05:d0:e0:01:46:94:ac:11:e7:47:80:
                    3c:03:f9:94:05:3e:18:23:02:a2:61:d3:79:ef:d8:
                    80:e3:2a:fb:01:02:52:06:6f:0d:8f:5c:c1:59:3d:
                    05:4a:ed:15:eb:b5:7c:68:16:60:66:24:6b:fa:d1:
                    5b:69:01:3c:97:d1:1a:69:24:b6:c3:1d:2b:9c:9d:
                    83:9b:60:4f:56:f5:d2:b4:0c:65:b9:c6:57:24:45:
                    d7:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:83:18:7D:91:8F:F4:C5:B1:D9:9E:62:E6:F1:15:ED:BB:60:82:58
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a6bb0c94-a239-4f7a-aff2-4a4a352eed49/da0cd30df4491331691a183f5b0a9260b7daadec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.209.128.0/17
                  186.151.0.0-186.151.93.255
                  186.151.95.0/24
                  186.151.112.0-186.151.255.255
                  190.56.0.0/16
                  190.143.128.0-190.143.239.255
                  190.148.0.0-190.148.84.255
                  190.148.86.0-190.149.133.255
                  190.149.135.0-190.149.151.255
                  190.149.153.0-190.149.255.255
                  200.6.192.0/18
                  200.119.128.0-200.119.150.255
                  200.119.154.0-200.119.183.255
                  201.216.128.0/18
                  216.230.128.0/19
                IPv6:
                  2800:98::/32
                  2800:890::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6458
                  13682
                  14754

    Signature Algorithm: sha256WithRSAEncryption
         b7:78:57:79:a6:5d:a3:1f:57:d8:b2:c2:46:59:1b:81:ba:2f:
         98:16:24:3c:d5:e4:9b:4a:11:97:8d:7c:52:38:bf:01:6f:3f:
         1e:b1:9f:5c:87:ce:43:68:3f:4b:3d:a8:bd:f1:12:2a:92:e5:
         91:84:80:a8:82:ee:12:80:69:a7:be:c3:f2:ae:ae:24:9a:b2:
         61:6f:ab:b7:25:8a:45:e7:f6:b6:bb:bf:2e:26:40:7b:b1:5c:
         ee:d6:c3:b4:79:78:3a:f9:47:0d:8c:29:da:fe:5a:7c:ea:3a:
         fd:b4:4a:dc:30:39:71:9e:b9:29:75:59:51:71:ee:2a:c9:07:
         f5:1a:ba:89:75:c2:8e:2f:59:f0:02:46:6e:2e:9d:a2:a7:76:
         a1:1e:a6:80:9d:4d:e7:7e:ff:eb:07:43:1b:85:18:96:cc:ca:
         86:e1:fb:27:79:3b:9c:12:07:f3:8f:d3:3f:42:72:e4:e0:39:
         84:b4:ea:8a:ff:47:8a:53:38:db:cb:f0:9b:14:ec:1c:ed:fd:
         3f:49:1a:3c:9b:1c:34:22:ff:ca:60:ca:77:89:84:90:a3:06:
         ff:7a:6c:59:cb:45:a9:f0:b1:29:17:9b:95:1e:0b:0f:60:7e:
         e2:8f:46:10:21:2e:7f:68:56:9b:86:37:66:44:45:55:52:d7:
         23:15:bb:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:29 2024 by rpki-client on console-ams.rpki-client.org