Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dbcfebcf318884357d16ed4e6f30af5c556f4799.cer
File:                     dbcfebcf318884357d16ed4e6f30af5c556f4799.cer (raw, json)
Hash identifier:          HHwzbbSN7QicJhu/XZTiE2Hz0Qk6QIEJ9LoYbWIJ0Ic=
Subject key identifier:   D3:CF:9E:8C:57:65:F7:FD:32:F4:E4:1C:2B:27:8E:FE:06:34:A7:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEE5B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/76c0534c-5420-490e-bfea-e75b06f6bbbf/dbcfebcf318884357d16ed4e6f30af5c556f4799.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/76c0534c-5420-490e-bfea-e75b06f6bbbf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:48:28 +0000
Certificate not after:    Sat 30 Nov 2024 15:39:17 +0000
Subordinate resources:    AS: 52871
                          IP: 177.136.0.0 -- 177.136.9.255
                          IP: 177.136.12.0/24
                          IP: 177.136.14.0/23
                          IP: 177.136.32.0 -- 177.136.41.255
                          IP: 177.136.43.0 -- 177.136.45.255
                          IP: 177.136.47.0/24
                          IP: 201.157.194.0/23
                          IP: 201.157.199.0 -- 201.157.210.255
                          IP: 201.157.212.0/24
                          IP: 201.157.214.0/23
                          IP: 201.157.217.0 -- 201.157.218.255
                          IP: 201.157.220.0/24
                          IP: 201.157.229.0/24
                          IP: 201.157.231.0/24
                          IP: 201.157.235.0 -- 201.157.237.255
                          IP: 201.157.246.0/24
                          IP: 201.157.251.0 -- 201.157.255.255
                          IP: 2804:870::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16704946 (0xfee5b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:48:28 2023 GMT
            Not After : Nov 30 15:39:17 2024 GMT
        Subject: CN=dbcfebcf318884357d16ed4e6f30af5c556f4799
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:d9:98:e6:be:39:e6:5c:fd:8e:68:70:9f:3d:
                    7c:2b:77:a9:6e:24:ff:f5:ac:12:4e:6f:06:a6:53:
                    42:0d:ac:6b:63:7c:64:b3:e0:45:44:b5:b1:15:d2:
                    3e:9b:90:c2:b9:b3:68:a7:b3:99:c8:2a:62:09:1a:
                    fe:8c:b4:31:8b:bb:3e:3d:72:7a:89:a9:5b:38:52:
                    eb:a9:d6:13:f4:fd:7a:52:bd:28:2a:d3:bf:4c:09:
                    5b:ff:14:a3:9a:20:8c:9d:b6:4e:d1:31:3f:d9:e0:
                    67:58:e8:52:b6:49:86:8d:91:fb:9f:6f:36:86:42:
                    fe:3d:71:52:e7:78:bd:5f:fa:88:55:c8:ca:a2:0f:
                    e8:25:c4:72:a3:3a:66:d9:10:f5:11:ed:f9:7e:d2:
                    c8:be:e9:23:b2:af:cc:40:e4:b7:26:a6:9a:e2:9b:
                    56:75:c3:bd:aa:83:8e:25:66:df:b0:81:f7:cb:a9:
                    9a:91:0e:cc:3a:7d:4c:7d:c2:98:51:c2:f5:ca:7d:
                    33:b3:11:f5:6f:5f:4d:ed:12:08:91:5e:0b:21:2d:
                    f3:e6:bb:a0:30:04:65:09:2b:a2:f5:3c:17:89:92:
                    84:7f:88:a8:8a:df:3d:01:27:e1:2b:fa:7c:a9:be:
                    03:dc:fe:9d:30:3a:85:2d:0d:a7:fa:a6:d3:d0:a4:
                    3c:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:CF:9E:8C:57:65:F7:FD:32:F4:E4:1C:2B:27:8E:FE:06:34:A7:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76c0534c-5420-490e-bfea-e75b06f6bbbf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76c0534c-5420-490e-bfea-e75b06f6bbbf/dbcfebcf318884357d16ed4e6f30af5c556f4799.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.136.0.0-177.136.9.255
                  177.136.12.0/24
                  177.136.14.0/23
                  177.136.32.0-177.136.41.255
                  177.136.43.0-177.136.45.255
                  177.136.47.0/24
                  201.157.194.0/23
                  201.157.199.0-201.157.210.255
                  201.157.212.0/24
                  201.157.214.0/23
                  201.157.217.0-201.157.218.255
                  201.157.220.0/24
                  201.157.229.0/24
                  201.157.231.0/24
                  201.157.235.0-201.157.237.255
                  201.157.246.0/24
                  201.157.251.0-201.157.255.255
                IPv6:
                  2804:870::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52871

    Signature Algorithm: sha256WithRSAEncryption
         30:38:ef:1d:28:57:82:e5:33:4d:e8:3b:4c:95:99:77:d3:e4:
         bf:fb:f0:c5:81:e7:54:93:27:1b:b2:ec:f4:8b:59:b9:9d:52:
         5d:4a:5e:4a:e3:2e:ae:5e:68:18:cb:ae:64:03:22:5a:95:12:
         1e:7d:cb:e3:fa:87:39:dd:94:0a:d7:5b:df:e0:61:8e:2f:ee:
         3b:46:f5:8a:69:a2:29:a9:61:10:32:ed:19:24:18:78:42:3a:
         8a:36:69:b2:b8:8e:68:31:24:c5:a2:f5:cc:7d:c5:67:3a:0c:
         0b:d4:bb:e7:d7:45:14:c6:d8:eb:b5:05:c6:56:37:9c:c0:57:
         ad:4b:a1:42:b1:de:60:d9:fa:a1:77:96:6e:14:1d:2c:06:fd:
         56:23:fa:3d:e0:5b:55:2a:21:ab:fc:db:35:92:f1:08:e0:e0:
         b4:51:0b:ba:23:1e:d9:1d:52:00:dd:e3:ee:36:17:b9:d8:fc:
         86:2f:73:e1:5e:01:35:58:29:98:70:03:7e:d9:84:63:b3:81:
         c0:df:57:22:00:eb:99:76:a4:d1:76:63:e0:ae:a9:e7:a9:5a:
         a4:9f:8b:97:5a:90:d7:fd:08:7d:f6:44:34:cf:3e:47:28:0d:
         05:3d:1a:e3:57:09:6e:89:28:e3:9f:5f:86:f1:bb:c1:55:db:
         df:b6:72:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org