Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e023bb317eecb014b8f7048b5b30535732897c94.cer
File:                     e023bb317eecb014b8f7048b5b30535732897c94.cer (raw, json)
Hash identifier:          HlUYjuJkl4qL7D70q6ilRPqjqJhQwsdq5X3w81sUQrg=
Subject key identifier:   B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01033E98
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 18:41:00 +0000
Certificate not after:    Fri 01 Aug 2025 06:00:00 +0000
Subordinate resources:    AS: 6503
                          AS: 14000
                          IP: 148.240.0.0/16
                          IP: 148.243.0.0/16
                          IP: 148.245.0.0/16
                          IP: 187.162.0.0 -- 187.167.255.255
                          IP: 187.176.0.0 -- 187.179.127.255
                          IP: 189.205.0.0/16
                          IP: 189.207.0.0 -- 189.213.255.255
                          IP: 200.23.72.0/23
                          IP: 200.23.147.0/24
                          IP: 200.33.192.0/21
                          IP: 200.33.208.0 -- 200.33.231.255
                          IP: 200.34.64.0/19
                          IP: 200.34.141.0/24
                          IP: 200.36.96.0/19
                          IP: 200.38.64.0/19
                          IP: 200.38.224.0/19
                          IP: 200.39.224.0/19
                          IP: 200.52.0.0/20
                          IP: 200.52.32.0/19
                          IP: 200.56.0.0 -- 200.56.95.255
                          IP: 200.57.96.0/19
                          IP: 200.57.192.0/18
                          IP: 200.76.192.0/19
                          IP: 200.78.128.0/17
                          IP: 200.94.192.0/19
                          IP: 200.188.0.0/17
                          IP: 200.194.0.0/18
                          IP: 200.236.64.0/18
                          IP: 201.140.0.0/18
                          IP: 201.156.0.0/16
                          IP: 201.158.128.0/17
                          IP: 207.249.128.0/18
                          IP: 2806::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16989848 (0x1033e98)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 18:41:00 2023 GMT
            Not After : Aug  1 06:00:00 2025 GMT
        Subject: CN=e023bb317eecb014b8f7048b5b30535732897c94
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:e7:58:ed:4f:05:45:ac:74:32:f6:7f:12:9e:
                    cb:b3:52:43:e4:92:41:bd:72:e7:d1:99:b4:3d:cc:
                    f2:d1:9c:a1:4f:1f:bf:5f:d0:f8:81:86:71:ad:37:
                    3a:02:99:a8:6c:9e:75:ba:4b:6e:2d:73:d9:83:a8:
                    9f:60:4d:d0:5c:aa:01:8b:38:fe:df:8c:fc:40:c8:
                    94:b9:f4:61:ff:33:21:2a:d1:7f:c7:f7:ab:b5:1b:
                    c5:e1:2b:a3:82:bc:47:06:d2:b5:89:29:17:95:a7:
                    97:4a:b8:df:b3:a2:03:81:0b:5b:48:24:21:8c:20:
                    5d:5e:9e:80:ff:c6:d4:ff:c2:9c:4c:1c:f6:65:81:
                    74:a5:ce:3f:db:16:a5:af:56:0a:89:5b:19:6c:4a:
                    cc:9e:b3:41:37:da:ea:05:e8:50:8c:8a:94:18:22:
                    17:55:08:0d:54:0a:bb:4e:72:8c:4f:ba:91:3e:e9:
                    06:4a:0c:a5:27:45:1d:57:86:e7:b2:d3:ba:70:dd:
                    86:0b:7f:bd:07:c2:d4:56:88:4b:a2:e9:85:85:2c:
                    20:1b:78:0e:a7:a5:b2:bf:73:cf:54:9f:ed:64:3d:
                    67:d1:a5:e6:56:7c:98:33:05:b4:52:5e:cb:f7:4f:
                    99:9c:ae:82:9f:46:e6:2c:8d:3b:a0:f7:84:62:1d:
                    2f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:C9:7F:24:9A:19:82:C1:DF:CE:77:29:F4:49:30:D6:E1:90:00:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fe9bc61-186a-45db-9a7a-11e102a90bf4/e023bb317eecb014b8f7048b5b30535732897c94.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.240.0.0/16
                  148.243.0.0/16
                  148.245.0.0/16
                  187.162.0.0-187.167.255.255
                  187.176.0.0-187.179.127.255
                  189.205.0.0/16
                  189.207.0.0-189.213.255.255
                  200.23.72.0/23
                  200.23.147.0/24
                  200.33.192.0/21
                  200.33.208.0-200.33.231.255
                  200.34.64.0/19
                  200.34.141.0/24
                  200.36.96.0/19
                  200.38.64.0/19
                  200.38.224.0/19
                  200.39.224.0/19
                  200.52.0.0/20
                  200.52.32.0/19
                  200.56.0.0-200.56.95.255
                  200.57.96.0/19
                  200.57.192.0/18
                  200.76.192.0/19
                  200.78.128.0/17
                  200.94.192.0/19
                  200.188.0.0/17
                  200.194.0.0/18
                  200.236.64.0/18
                  201.140.0.0/18
                  201.156.0.0/16
                  201.158.128.0/17
                  207.249.128.0/18
                IPv6:
                  2806::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6503
                  14000

    Signature Algorithm: sha256WithRSAEncryption
         be:ff:b8:4c:26:26:01:33:39:bd:a1:58:7b:e0:62:12:20:e0:
         fb:ae:e0:86:33:8e:63:01:15:0d:52:c7:b9:67:49:9e:b5:8b:
         a9:c7:6e:58:94:da:39:96:cd:f4:2b:a3:4b:fc:a6:d7:4e:27:
         89:bb:d2:6f:a3:10:a1:b3:d5:9f:31:9b:a5:a5:49:92:16:d8:
         a5:df:e8:2f:7d:a6:11:5f:02:47:90:74:5d:0c:c4:62:4d:fc:
         7c:47:30:ef:91:d4:b4:5d:0a:1b:45:fb:59:61:6b:29:88:4f:
         69:5a:0f:0f:bb:7b:06:7c:0f:c0:76:69:8e:9e:86:92:46:e6:
         fe:a0:92:84:ae:24:03:10:fa:b0:df:02:2d:ac:fc:63:68:59:
         4f:55:59:d7:94:d2:34:57:1b:fa:8f:dc:54:fd:82:f9:25:df:
         e4:66:5b:8b:60:f4:f1:95:3c:40:38:7f:d0:c8:9e:71:5d:d3:
         bc:dc:4b:39:f7:f8:a9:11:b1:5f:6c:6a:cf:b4:37:61:37:cb:
         44:5b:ab:fe:a1:4d:2f:61:0b:61:16:c6:05:43:08:5c:ff:e0:
         1a:b8:d7:cd:40:97:1b:30:bc:64:4f:de:98:cc:1f:c3:92:98:
         f4:91:a0:5e:f8:50:0e:f4:87:52:95:b0:99:2f:dc:e6:6b:c5:
         b5:f0:74:c7
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org