Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db621b88a3f513a5b25e83dde333801d0583bd90.cer
File:                     db621b88a3f513a5b25e83dde333801d0583bd90.cer (raw, json)
Hash identifier:          ifB5Bs3Yr3mYeIgIPfpnzmOAPypk84AAloqswkpWr1M=
Subject key identifier:   8F:72:21:AD:C5:B0:4A:1F:76:B2:16:F3:DA:11:BE:C9:1D:62:AA:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF844B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/79fafa28-d62d-477f-979c-57c06d7c1204/db621b88a3f513a5b25e83dde333801d0583bd90.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/79fafa28-d62d-477f-979c-57c06d7c1204/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 02 Jul 2018 18:45:30 +0000
Certificate not after:    Sun 24 Mar 2024 22:11:19 +0000
Subordinate resources:    AS: 52339
                          IP: 131.72.28.0/22
                          IP: 190.13.112.0/22
                          IP: 190.107.212.0 -- 190.107.223.255
                          IP: 190.151.144.0/20
                          IP: 2803:7580::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14648395 (0xdf844b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  2 18:45:30 2018 GMT
            Not After : Mar 24 22:11:19 2024 GMT
        Subject: CN=db621b88a3f513a5b25e83dde333801d0583bd90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:51:cf:4d:3e:85:96:59:2a:94:49:d4:e0:78:
                    25:55:68:89:62:fb:10:d6:4e:fb:46:fe:61:0e:1b:
                    ec:07:9b:89:a8:81:cc:18:a1:e7:6c:34:b3:e8:2f:
                    3e:7d:8a:d5:f5:d3:07:66:ef:1e:6f:45:91:3c:69:
                    b8:d6:93:6e:9b:3c:e4:64:63:1f:fe:dd:6a:5f:31:
                    3d:f3:7a:ee:45:ba:51:b5:a2:21:ed:0a:83:21:65:
                    85:0e:24:82:f1:d7:a0:de:ff:cb:ea:32:6c:a1:9d:
                    c0:4b:d3:dc:eb:81:7b:06:95:aa:02:4a:d3:bf:df:
                    4b:da:5a:11:4b:56:fe:8a:a2:bb:33:54:f2:d3:bd:
                    05:3c:a4:92:6b:ef:43:f5:39:b1:d5:b1:eb:d5:a0:
                    11:eb:09:79:42:c8:e8:73:e1:a1:3b:e9:d1:a0:cf:
                    d3:1d:17:d9:95:c7:04:76:db:4c:44:cd:f9:b4:b8:
                    e9:55:4e:c9:6e:ac:b3:31:20:29:60:a7:a0:5a:a0:
                    ab:47:7d:e2:40:81:23:48:04:f7:ec:2c:16:89:25:
                    e4:a7:35:f3:61:aa:95:66:6a:a0:15:51:ea:5c:e1:
                    ea:dd:1c:a5:02:05:aa:23:2d:78:d4:58:b1:2b:a9:
                    c8:f0:3b:31:a7:b6:ce:80:84:fc:f7:70:6f:e8:8b:
                    db:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:72:21:AD:C5:B0:4A:1F:76:B2:16:F3:DA:11:BE:C9:1D:62:AA:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/79fafa28-d62d-477f-979c-57c06d7c1204/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/79fafa28-d62d-477f-979c-57c06d7c1204/db621b88a3f513a5b25e83dde333801d0583bd90.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.72.28.0/22
                  190.13.112.0/22
                  190.107.212.0-190.107.223.255
                  190.151.144.0/20
                IPv6:
                  2803:7580::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52339

    Signature Algorithm: sha256WithRSAEncryption
         22:6b:5f:a8:5c:d5:81:03:ec:85:c6:42:31:bb:03:e2:71:ae:
         79:c5:80:77:1e:f7:d8:2b:de:98:8f:f9:db:3a:fb:1d:93:1c:
         55:de:ec:8c:46:da:f3:7e:64:7c:a5:b6:cb:6c:d4:dd:4e:f1:
         b0:81:40:91:eb:f1:1e:46:43:48:50:b6:ba:c4:8a:73:d9:b5:
         7e:9f:e2:aa:d9:ec:9b:5b:f6:08:0f:e2:6f:29:83:24:da:cc:
         7b:f6:26:9c:be:7b:7b:d2:0d:7b:71:15:cf:c4:83:62:d2:ab:
         85:d4:fe:30:a0:6b:30:c9:21:66:37:56:dc:b3:c1:8f:13:80:
         1b:89:f6:b5:f9:35:64:37:46:60:ca:2e:73:b6:d9:e7:52:3b:
         fc:9c:90:8e:d4:c1:6c:be:63:58:03:f0:10:ec:dd:b7:f8:3a:
         1a:8b:fe:ef:51:0c:25:55:23:a9:72:7e:02:c3:7f:36:00:18:
         6e:b8:42:c2:34:66:98:3d:ae:c0:99:ea:6d:b7:51:6c:d9:53:
         5e:ba:90:f2:8f:44:bc:c5:59:a2:89:34:92:54:95:e2:6f:ab:
         f5:59:5b:b3:ff:e7:a4:86:5f:6b:5e:3a:26:1a:cf:ce:10:b7:
         dc:c7:52:8c:7e:bc:ab:10:c8:86:3c:fd:fc:b4:2b:e9:62:9d:
         54:4a:d2:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org