Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dde2f278b02bfd93a1576b25a75669344d21d2af.cer
File:                     dde2f278b02bfd93a1576b25a75669344d21d2af.cer (raw, json)
Hash identifier:          ecbcZOQO3OEMx2tGGmrqACJ8QdLh6kk2s5maPBsOKUQ=
Subject key identifier:   9B:DF:B0:0C:7D:18:D7:58:19:31:79:4B:1A:4B:83:6A:49:C5:33:CB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF3414
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0fa23176-8993-409c-aea8-58261d56e2a5/dde2f278b02bfd93a1576b25a75669344d21d2af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0fa23176-8993-409c-aea8-58261d56e2a5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:10:04 +0000
Certificate not after:    Tue 15 Apr 2025 16:10:39 +0000
Subordinate resources:    AS: 28212
                          AS: 52892
                          AS: 268218
                          IP: 45.235.236.0/22
                          IP: 131.221.12.0/22
                          IP: 138.185.232.0/22
                          IP: 170.78.140.0/22
                          IP: 177.22.80.0/20
                          IP: 177.72.232.0/21
                          IP: 181.191.16.0/22
                          IP: 187.63.16.0/20
                          IP: 189.113.96.0/20
                          IP: 2804:1354::/32
                          IP: 2804:32d8::/32
                          IP: 2804:4dc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16725012 (0xff3414)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:10:04 2023 GMT
            Not After : Apr 15 16:10:39 2025 GMT
        Subject: CN=dde2f278b02bfd93a1576b25a75669344d21d2af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:72:af:05:29:dc:02:c3:dc:99:4c:41:00:03:
                    9a:aa:b8:00:0f:11:27:a7:5f:43:82:01:66:ff:35:
                    48:59:09:45:8a:5e:04:72:05:0b:da:4a:33:4d:b9:
                    60:e5:cd:06:e6:d4:ad:65:05:1a:e4:33:fc:6b:df:
                    6d:55:68:72:48:78:4a:f1:70:6d:88:f4:14:ad:85:
                    99:e3:ed:cd:94:66:07:c3:b6:02:59:85:54:af:21:
                    ca:72:01:a2:7f:e1:a0:b9:80:d8:81:c3:cf:60:8b:
                    ca:a5:96:45:85:d7:00:cc:a8:8a:b0:71:41:1d:f3:
                    df:e3:2a:1d:1c:d9:3e:55:51:a1:8f:4f:fc:4d:22:
                    48:8a:1b:7d:47:e6:ea:3e:0c:71:c9:8f:bb:28:1e:
                    23:43:e9:7e:25:f3:7c:b8:28:4c:42:6e:e3:79:60:
                    f4:a1:2c:5a:7e:9b:72:09:45:ba:94:40:24:15:62:
                    d9:96:77:10:0f:19:46:c7:7f:16:6d:8d:24:44:4d:
                    dd:6a:4e:7d:1f:58:5d:86:11:eb:7d:41:4f:6a:73:
                    d5:3c:78:cc:05:20:e2:a9:ad:52:91:0c:58:3e:e9:
                    37:26:da:71:c5:f2:e7:b2:27:b7:3e:93:16:cc:24:
                    3b:50:d5:fd:1b:a9:b0:15:87:94:af:26:7f:d9:6d:
                    c2:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:DF:B0:0C:7D:18:D7:58:19:31:79:4B:1A:4B:83:6A:49:C5:33:CB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0fa23176-8993-409c-aea8-58261d56e2a5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0fa23176-8993-409c-aea8-58261d56e2a5/dde2f278b02bfd93a1576b25a75669344d21d2af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.236.0/22
                  131.221.12.0/22
                  138.185.232.0/22
                  170.78.140.0/22
                  177.22.80.0/20
                  177.72.232.0/21
                  181.191.16.0/22
                  187.63.16.0/20
                  189.113.96.0/20
                IPv6:
                  2804:1354::/32
                  2804:32d8::/32
                  2804:4dc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28212
                  52892
                  268218

    Signature Algorithm: sha256WithRSAEncryption
         28:34:3d:e0:59:1f:59:59:94:23:85:75:81:f5:43:bf:dd:ba:
         c7:bb:b9:a6:c1:5c:18:95:2d:de:e5:8e:47:9e:fe:75:05:e8:
         df:3d:c4:a5:f8:f4:a2:7a:24:54:69:eb:d0:8d:59:a8:bf:17:
         38:22:ce:0c:85:db:b3:e7:45:fc:65:20:3e:45:68:74:0c:26:
         69:0c:47:43:25:f6:81:61:25:f9:7a:be:50:6f:50:c0:bd:66:
         1d:45:f6:dd:e4:10:02:c2:60:09:f6:8f:a6:2c:28:8f:94:ad:
         99:9c:7f:7b:9b:29:84:69:21:b9:53:16:53:81:a6:50:dc:4d:
         1d:50:2b:2a:fd:58:07:a3:91:61:c5:f3:18:c6:8f:65:a2:62:
         02:8e:1a:ae:1a:11:6d:8c:d8:06:67:9d:59:c9:4e:81:50:83:
         34:56:a3:f2:d5:53:7e:31:db:fb:ee:6f:36:1d:32:f7:aa:ec:
         f8:5b:c2:56:c1:35:8f:fc:c7:21:f6:f0:10:73:e2:c2:63:1d:
         d5:a1:33:8c:2f:24:04:d6:14:06:fe:be:ab:21:82:c0:b5:f4:
         e2:13:e7:8d:65:21:b9:f4:de:43:29:43:20:f8:20:96:0a:44:
         3a:ba:e0:54:fd:f6:91:d4:6f:a5:e7:b4:aa:a5:e1:fc:60:44:
         5c:23:50:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org