Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e52511a6fbf27f120e7aeaef8d7184c5ee282b6d.cer
File:                     e52511a6fbf27f120e7aeaef8d7184c5ee282b6d.cer (raw, json)
Hash identifier:          TIExuv3d/mpzjyeGNim1IR1CUZy5KZ+IYFqbXXtSAlQ=
Subject key identifier:   3A:69:77:58:9C:40:58:2B:76:F3:53:8A:07:98:E3:60:6D:48:C4:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEF4DE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/50943423-ff38-4a5d-afc4-ef7956939c53/e52511a6fbf27f120e7aeaef8d7184c5ee282b6d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/50943423-ff38-4a5d-afc4-ef7956939c53/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:49:34 +0000
Certificate not after:    Sat 04 Jan 2025 18:36:43 +0000
Subordinate resources:    AS: 52974
                          IP: 45.227.236.0/22
                          IP: 45.234.200.0/22
                          IP: 131.0.88.0/22
                          IP: 131.72.196.0/22
                          IP: 143.202.172.0/22
                          IP: 167.249.188.0/22
                          IP: 168.194.76.0/22
                          IP: 168.196.48.0/22
                          IP: 170.84.224.0/22
                          IP: 170.246.196.0/22
                          IP: 177.38.240.0/21
                          IP: 177.70.240.0/22
                          IP: 179.106.168.0/21
                          IP: 181.233.172.0/22
                          IP: 192.140.72.0/22
                          IP: 2804:1b94::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16708830 (0xfef4de)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:49:34 2023 GMT
            Not After : Jan  4 18:36:43 2025 GMT
        Subject: CN=e52511a6fbf27f120e7aeaef8d7184c5ee282b6d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:ec:67:a5:7a:e0:21:70:99:f9:0f:40:18:63:
                    7c:31:12:fa:a2:a8:60:d9:ba:8b:f2:51:c5:c0:f5:
                    cb:74:93:9f:8f:88:13:da:fa:38:84:98:15:d4:00:
                    1b:f2:07:7c:29:ff:52:db:5b:f2:9b:a2:e6:01:99:
                    fd:e1:10:74:e0:da:9d:78:b7:51:0e:e0:8e:ec:7a:
                    a8:f3:cb:1f:a3:94:5a:eb:39:a6:c5:09:23:3d:43:
                    39:e3:68:a0:bb:03:9c:93:26:ac:dd:a2:d6:6b:bc:
                    12:af:ea:70:fa:3f:6e:69:6e:27:31:df:79:e4:06:
                    1c:22:0a:e4:8d:08:4c:f2:31:f0:56:8d:9d:73:d3:
                    02:46:42:15:cb:f6:db:d7:26:04:ce:d8:f8:d4:aa:
                    ef:29:fc:d0:aa:82:79:7e:11:1a:12:51:5d:be:cc:
                    44:22:8e:da:a0:35:10:cd:75:f9:c5:47:ba:f5:1f:
                    ba:4f:08:d1:2b:25:da:11:b5:51:89:7f:3a:4a:ed:
                    4d:16:be:63:02:e4:42:8e:c9:07:8b:fb:2e:e9:ca:
                    e1:46:94:97:d9:7b:3c:a7:92:36:ed:34:b8:cb:5b:
                    b1:d7:24:d5:32:f9:a6:ea:d3:8d:de:d1:74:f1:78:
                    dd:6d:dc:ea:74:3b:5b:ab:3d:35:92:ca:a7:f9:1f:
                    0d:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:69:77:58:9C:40:58:2B:76:F3:53:8A:07:98:E3:60:6D:48:C4:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/50943423-ff38-4a5d-afc4-ef7956939c53/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/50943423-ff38-4a5d-afc4-ef7956939c53/e52511a6fbf27f120e7aeaef8d7184c5ee282b6d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.236.0/22
                  45.234.200.0/22
                  131.0.88.0/22
                  131.72.196.0/22
                  143.202.172.0/22
                  167.249.188.0/22
                  168.194.76.0/22
                  168.196.48.0/22
                  170.84.224.0/22
                  170.246.196.0/22
                  177.38.240.0/21
                  177.70.240.0/22
                  179.106.168.0/21
                  181.233.172.0/22
                  192.140.72.0/22
                IPv6:
                  2804:1b94::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52974

    Signature Algorithm: sha256WithRSAEncryption
         05:66:fd:6a:7e:b2:2b:37:9c:95:82:a8:bc:a2:e3:df:fd:83:
         a6:68:e7:0f:9c:4f:1e:1e:95:cc:8a:55:21:50:d3:6d:72:07:
         32:a6:f2:83:9b:5b:be:33:a3:49:65:62:53:9d:fb:9d:1c:d3:
         d1:01:f0:11:b5:c0:8a:0c:b8:dd:ba:ef:07:21:14:97:c4:4a:
         1a:76:60:e3:d7:94:91:2c:c1:02:f9:26:f5:01:2e:13:04:6e:
         a7:81:b1:7c:54:f5:fe:fe:12:e5:3d:99:86:dd:54:ca:33:cf:
         62:08:6e:eb:df:a9:99:f4:7f:8d:03:51:bd:c3:6b:36:c8:b5:
         f5:6c:8c:b7:9e:e5:78:ce:0f:20:c4:97:fd:64:75:40:f0:d1:
         d1:02:89:43:40:9b:ee:49:c6:a2:c4:38:20:19:62:28:50:d6:
         4f:2d:dc:d0:67:1a:19:38:4c:15:79:e4:47:8c:c0:03:ee:5c:
         13:6a:9f:0d:32:f2:57:d1:dc:95:33:dc:e0:d3:c5:2a:cc:aa:
         06:8b:3d:1d:2d:b8:8f:e8:4b:79:e7:8f:35:90:c1:3d:c5:ec:
         5a:66:68:5f:a8:66:49:1d:f2:1e:ee:bc:0b:b6:85:91:0c:4d:
         77:e8:f4:91:bb:d8:85:d8:3e:59:21:1b:fa:a4:1d:8b:36:13:
         d9:e2:b2:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org