Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2b0a2637cf393ed22212bacb1b0d230501daf43.cer
File:                     e2b0a2637cf393ed22212bacb1b0d230501daf43.cer (raw, json)
Hash identifier:          N0jcaiXywEluROg8m7RC+dDUFZTclmefIMD6g4r4F1M=
Subject key identifier:   FF:85:63:A5:E2:8B:3E:6B:97:29:4F:1F:34:15:71:81:34:B1:B9:4C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEA5B5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ba9e184e-313e-4a1e-b63a-488fcd463908/e2b0a2637cf393ed22212bacb1b0d230501daf43.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ba9e184e-313e-4a1e-b63a-488fcd463908/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:04:51 +0000
Certificate not after:    Thu 01 May 2025 15:07:19 +0000
Subordinate resources:    AS: 25933
                          AS: 28226
                          AS: 28250
                          IP: 167.249.152.0/22
                          IP: 167.249.232.0/22
                          IP: 168.205.156.0/22
                          IP: 170.78.76.0/22
                          IP: 177.101.192.0/18
                          IP: 177.107.128.0/19
                          IP: 177.220.192.0/18
                          IP: 179.107.96.0/20
                          IP: 186.249.0.0/20
                          IP: 187.1.80.0/20
                          IP: 187.33.32.0/20
                          IP: 187.84.192.0/19
                          IP: 189.45.32.0/19
                          IP: 189.126.192.0/20
                          IP: 189.201.200.0/21
                          IP: 200.49.32.0/19
                          IP: 200.152.240.0/20
                          IP: 2001:128c::/32
                          IP: 2804:27c::/32
                          IP: 2804:438::/32
                          IP: 2804:eec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16688565 (0xfea5b5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:04:51 2023 GMT
            Not After : May  1 15:07:19 2025 GMT
        Subject: CN=e2b0a2637cf393ed22212bacb1b0d230501daf43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:5c:e8:5c:18:75:03:45:d1:80:1e:fa:88:b3:
                    e4:de:7a:91:aa:f3:72:20:a0:68:ca:fa:e4:77:12:
                    14:7c:97:5b:83:c4:79:a9:1a:71:70:1d:fd:fa:49:
                    fb:6a:ba:1d:9a:c3:9e:79:b9:f3:b2:ec:fc:99:c4:
                    98:51:33:0a:7a:7e:c3:d2:eb:33:76:24:91:14:b3:
                    f1:48:71:7b:10:8f:7f:8a:6e:c7:80:27:a7:51:80:
                    a9:ab:96:32:c9:ef:5a:e0:ea:ec:54:04:da:65:9a:
                    66:f6:7b:12:8a:9d:88:d8:f7:60:3d:69:1c:bc:4b:
                    3f:e9:03:1a:db:24:5a:f8:3f:f2:ae:14:c5:d4:29:
                    27:68:18:ec:42:d8:66:86:d9:dd:84:25:22:01:a4:
                    08:81:ae:95:9b:af:65:15:13:66:8d:34:92:11:3b:
                    00:05:5c:fd:be:2a:2d:8f:52:29:c6:63:c3:83:2e:
                    ce:70:77:bb:02:3f:29:c6:e9:28:da:06:2f:b8:d5:
                    01:c1:c6:66:c4:2b:98:af:e1:ca:92:2e:d6:c9:cf:
                    80:79:af:8f:3c:3e:97:f1:48:9a:96:97:3c:75:fe:
                    94:59:d4:c1:6a:d3:3a:74:a2:a8:2d:dc:00:ba:06:
                    e2:d4:0f:0c:ef:b1:c0:25:b2:e2:21:fc:19:76:94:
                    0c:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:85:63:A5:E2:8B:3E:6B:97:29:4F:1F:34:15:71:81:34:B1:B9:4C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9e184e-313e-4a1e-b63a-488fcd463908/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ba9e184e-313e-4a1e-b63a-488fcd463908/e2b0a2637cf393ed22212bacb1b0d230501daf43.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.249.152.0/22
                  167.249.232.0/22
                  168.205.156.0/22
                  170.78.76.0/22
                  177.101.192.0/18
                  177.107.128.0/19
                  177.220.192.0/18
                  179.107.96.0/20
                  186.249.0.0/20
                  187.1.80.0/20
                  187.33.32.0/20
                  187.84.192.0/19
                  189.45.32.0/19
                  189.126.192.0/20
                  189.201.200.0/21
                  200.49.32.0/19
                  200.152.240.0/20
                IPv6:
                  2001:128c::/32
                  2804:27c::/32
                  2804:438::/32
                  2804:eec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25933
                  28226
                  28250

    Signature Algorithm: sha256WithRSAEncryption
         86:07:63:18:21:0b:e7:b9:e2:39:ae:97:83:8b:67:98:f9:54:
         2e:74:4b:b4:38:05:09:56:c2:21:ea:6d:d7:cd:79:b3:83:e9:
         a3:a0:42:ee:98:9c:43:8d:10:4b:11:c7:af:23:a2:91:4d:66:
         85:a7:fa:13:cb:f5:27:08:4b:b3:5b:46:a2:82:8b:79:dc:b8:
         79:ef:bf:70:8b:d5:59:ef:7b:64:10:0c:cf:c6:b5:11:3a:4b:
         c4:4d:62:d8:96:09:a7:d1:d2:8d:1d:a5:f5:e9:d9:ba:b3:03:
         38:7e:2b:8c:f5:69:d1:7f:8b:ae:1e:ef:81:bf:28:d0:26:10:
         c1:aa:61:ab:96:d2:f9:80:8f:58:35:69:76:1f:be:df:68:db:
         51:3a:3b:de:6e:a1:8f:45:b6:bb:19:03:3d:88:da:d9:b9:5a:
         84:05:86:27:53:b6:57:59:5e:46:8c:06:76:70:49:eb:8c:85:
         4b:81:c1:c5:1c:38:e8:6f:17:4e:d8:9e:28:9e:6d:f6:67:a6:
         59:af:dc:32:30:70:9f:81:ae:a6:ad:1e:9c:fe:0b:f2:1c:55:
         ad:4b:f0:84:86:8e:c5:d6:a0:26:88:b9:ab:b3:1e:4b:50:28:
         82:19:f0:d0:bc:e1:35:9c:72:bd:d3:71:f2:75:90:82:25:95:
         a8:67:26:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org