Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e10299c1af81d7fbd554ad8da2099da215779551.cer
File:                     e10299c1af81d7fbd554ad8da2099da215779551.cer (raw, json)
Hash identifier:          gyiJ3gGNzVFgs3dT4jeTudTAe3PlvIkk9rytjWQDyh4=
Subject key identifier:   F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D913E9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/e10299c1af81d7fbd554ad8da2099da215779551.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:21 +0000
Certificate not after:    Mon 08 Jan 2024 14:00:00 +0000
Subordinate resources:    AS: 22869
                          AS: 27884
                          AS: 267739
                          IP: 45.4.136.0/22
                          IP: 131.72.208.0/22
                          IP: 138.94.120.0/22
                          IP: 143.0.236.0/22
                          IP: 143.208.16.0/22
                          IP: 190.6.192.0/20
                          IP: 190.92.0.0 -- 190.92.95.255
                          IP: 190.211.136.0/22
                          IP: 201.158.48.0/22
                          IP: 2800:b10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14226409 (0xd913e9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:21 2017 GMT
            Not After : Jan  8 14:00:00 2024 GMT
        Subject: CN=e10299c1af81d7fbd554ad8da2099da215779551
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d5:84:22:e4:ef:e2:e1:f3:7e:65:ef:e4:a6:
                    70:a6:ca:5f:4c:b6:b3:86:11:f0:06:2f:04:b5:b4:
                    ab:c3:64:91:39:d3:1c:79:4f:ba:13:30:f1:b3:fd:
                    bf:4b:c0:15:ca:b9:eb:bd:e1:a4:28:46:c9:85:60:
                    7b:38:61:cd:d9:63:1e:8e:44:0b:c4:0d:7d:74:4c:
                    40:ba:88:7b:fe:a5:e9:b1:02:02:f4:0c:fe:a1:3b:
                    4e:2f:17:ef:65:56:39:38:91:f4:15:e4:cb:eb:1c:
                    29:aa:b1:75:f4:bb:67:13:8d:c6:a6:f7:ce:03:bf:
                    4e:f0:c7:cb:c5:42:53:72:df:26:21:19:5a:be:aa:
                    5b:a3:2c:df:4d:65:25:53:63:54:ee:48:f5:7b:8c:
                    ec:d7:c9:70:55:a7:f1:e1:cb:b4:1a:37:3d:cc:dc:
                    d0:8f:44:b4:35:06:a8:a8:04:25:db:32:77:c2:c3:
                    0d:2d:4b:f4:9b:e7:9a:28:da:f2:c0:53:a7:4c:73:
                    81:ad:3e:91:94:6e:27:8a:32:36:d1:3b:2f:1d:41:
                    17:90:96:5c:82:11:e4:d1:7e:54:2a:60:1a:83:c1:
                    22:3f:c9:4b:3d:d3:91:23:b3:f6:e6:b7:ae:f7:35:
                    ff:b2:3e:e5:f2:76:57:5c:72:56:97:85:e7:15:8e:
                    e0:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:DE:D6:0D:E4:4B:6E:A9:9A:05:7E:76:40:6D:04:7E:81:9D:D0:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1dc18f07-ba20-4380-8afd-8cafade4058f/e10299c1af81d7fbd554ad8da2099da215779551.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.136.0/22
                  131.72.208.0/22
                  138.94.120.0/22
                  143.0.236.0/22
                  143.208.16.0/22
                  190.6.192.0/20
                  190.92.0.0-190.92.95.255
                  190.211.136.0/22
                  201.158.48.0/22
                IPv6:
                  2800:b10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22869
                  27884
                  267739

    Signature Algorithm: sha256WithRSAEncryption
         a7:b8:41:d3:e7:e4:09:d3:a9:65:92:2f:6c:1e:92:8e:cc:57:
         64:38:a0:32:b7:52:f7:21:48:21:9f:28:34:ae:af:55:b1:17:
         c2:bf:66:58:04:94:e3:d1:9b:7e:99:81:01:04:b6:2a:75:02:
         06:ca:c1:6b:a3:3b:2e:46:9b:c0:5f:56:dc:3a:04:c1:51:ff:
         e8:62:f3:db:4c:56:d4:6e:95:e2:5f:91:a8:f7:33:66:bd:4e:
         18:7d:37:fa:43:55:40:6f:f3:96:bf:62:19:49:b9:70:e0:7d:
         25:5e:cc:25:04:28:ee:5f:55:a8:91:36:0f:28:d1:e7:d6:38:
         42:09:5a:3e:85:19:07:88:e7:e8:2f:2f:62:21:c5:25:01:47:
         06:d9:71:75:42:e4:c2:dc:44:bf:f9:7b:01:c0:41:59:db:af:
         2a:87:b6:ab:07:7f:57:54:f7:b8:61:2e:9a:35:e5:fd:c3:79:
         eb:de:9a:28:d5:bd:8a:4c:ce:08:04:b2:89:37:b8:3c:4c:c6:
         ff:32:04:94:7a:4f:3a:18:e1:cb:29:56:5e:4c:5c:a6:ad:ed:
         f8:ed:94:7a:73:b3:ce:ac:ad:f3:2d:b1:f2:23:4d:72:2c:55:
         3e:9d:41:9a:60:d8:24:54:dd:81:6b:b7:b9:ce:36:dd:84:1f:
         39:e9:8e:a0
-----BEGIN CERTIFICATE-----
MIIGGTCCBQGgAwIBAgIEANkT6TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcyMVoXDTI0MDEwODE0MDAw
MFowMzExMC8GA1UEAxMoZTEwMjk5YzFhZjgxZDdmYmQ1NTRhZDhkYTIwOTlkYTIx
NTc3OTU1MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJDVhCLk7+Lh
835l7+SmcKbKX0y2s4YR8AYvBLW0q8NkkTnTHHlPuhMw8bP9v0vAFcq5673hpChG
yYVgezhhzdljHo5EC8QNfXRMQLqIe/6l6bECAvQM/qE7Ti8X72VWOTiR9BXky+sc
KaqxdfS7ZxONxqb3zgO/TvDHy8VCU3LfJiEZWr6qW6Ms301lJVNjVO5I9XuM7NfJ
cFWn8eHLtBo3Pczc0I9EtDUGqKgEJdsyd8LDDS1L9Jvnmija8sBTp0xzga0+kZRu
J4oyNtE7Lx1BF5CWXIIR5NF+VCpgGoPBIj/JSz3TkSOz9ua3rvc1/7I+5fJ2V1xy
VpeF5xWO4AMCAwEAAaOCA0gwggNEMB0GA1UdDgQWBBT03tYN5EtuqZoFfnZAbQR+
gZ3QMDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xZGMxOGYwNy1iYTIw
LTQzODAtOGFmZC04Y2FmYWRlNDA1OGYvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWRjMThmMDctYmEyMC00
MzgwLThhZmQtOGNhZmFkZTQwNThmL2UxMDI5OWMxYWY4MWQ3ZmJkNTU0YWQ4ZGEy
MDk5ZGEyMTU3Nzk1NTEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjBl
BggrBgEFBQcBBwEB/wRWMFQwQwQCAAEwPQMEAi0EiAMEAoNI0AMEAopeeAMEAo8A
7AMEAo/QEAMEBL4GwDALAwMCvlwDBAW+XEADBAK+04gDBALJnjAwDQQCAAIwBwMF
ACgACxAwIgYIKwYBBQUHAQgBAf8EEzARoA8wDQICWVUCAmzsAgMEFdswDQYJKoZI
hvcNAQELBQADggEBAKe4QdPn5AnTqWWSL2weko7MV2Q4oDK3UvchSCGfKDSur1Wx
F8K/ZlgElOPRm36ZgQEEtip1AgbKwWujOy5Gm8BfVtw6BMFR/+hi89tMVtRuleJf
kaj3M2a9Thh9N/pDVUBv85a/YhlJuXDgfSVezCUEKO5fVaiRNg8o0efWOEIJWj6F
GQeI5+gvL2IhxSUBRwbZcXVC5MLcRL/5ewHAQVnbryqHtqsHf1dU97hhLpo15f3D
eevemijVvYpMzggEsok3uDxMxv8yBJR6TzoY4cspVl5MXKat7fjtlHpzs86srfMt
sfIjTXIsVT6dQZpg2CRU3YFrt7nONt2EHznpjqA=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org