Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e804a389c3b0880219ecf5f7a3c62d96a274b592.cer
File:                     e804a389c3b0880219ecf5f7a3c62d96a274b592.cer (raw, json)
Hash identifier:          KtbKeemkt1UzaJ8aLUMUZUGI5ZmquQeDyJwIOdcqfsw=
Subject key identifier:   4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D9C743
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:38 +0000
Certificate not after:    Wed 17 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 8048
                          AS: 10293
                          IP: 161.196.0.0/16
                          IP: 186.88.0.0/13
                          IP: 190.9.128.0/19
                          IP: 190.36.0.0/14
                          IP: 190.72.0.0/13
                          IP: 190.198.0.0 -- 190.207.255.255
                          IP: 200.11.128.0/17
                          IP: 200.44.0.0/16
                          IP: 200.84.0.0/16
                          IP: 200.90.0.0/17
                          IP: 200.93.0.0/17
                          IP: 200.109.0.0/16
                          IP: 201.208.0.0/14
                          IP: 201.242.0.0/15
                          IP: 201.248.0.0/15
                          IP: 2800:1000::/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14272323 (0xd9c743)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:38 2017 GMT
            Not After : Jan 17 05:00:00 2024 GMT
        Subject: CN=e804a389c3b0880219ecf5f7a3c62d96a274b592
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:ea:cc:0a:c7:ac:47:6d:85:7c:98:c6:6d:5e:
                    e9:e9:44:a3:5a:69:98:fc:f0:d5:be:76:77:b6:af:
                    97:18:8b:40:eb:f6:f8:fe:42:a8:c7:45:77:c6:eb:
                    a6:39:64:bb:bc:9a:0b:b8:bc:eb:91:9f:ef:dd:ea:
                    b0:8d:c2:62:1d:ce:96:26:76:91:e1:b0:18:af:e7:
                    68:3e:40:77:4d:4f:d6:2f:1b:57:63:0a:c1:5b:54:
                    9b:47:a9:f2:3b:cd:16:1e:39:f6:85:4e:74:19:71:
                    6c:07:f2:b5:8b:77:5f:ac:20:0a:11:e3:56:e8:d6:
                    63:76:2e:61:34:af:ae:89:8a:f3:d3:49:73:91:92:
                    86:64:b4:5e:f6:ba:94:80:e0:d8:da:60:38:f0:80:
                    89:ca:9c:92:72:4f:58:f4:22:73:04:3c:9b:3e:4a:
                    16:cd:87:ed:46:c4:02:a7:5c:71:c3:d6:7c:75:ec:
                    be:7a:28:84:b8:a8:22:07:c5:f4:fe:38:67:00:fa:
                    d5:1b:ce:7d:36:88:6d:b0:7d:46:42:3e:8c:60:21:
                    2a:6c:a2:f4:bd:18:ec:29:47:34:76:a7:d2:2d:ac:
                    1c:27:b9:54:08:6d:f7:8f:e2:41:7c:83:2b:65:f0:
                    8f:a7:15:a2:85:60:98:df:c7:5a:2d:a8:19:f9:9e:
                    c4:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:B1:1C:CB:1C:D3:F1:33:59:8C:6A:7C:8B:2A:39:9E:D2:9D:E5:E6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/18f9ef39-7199-4bf7-b2b1-6b30a01b84dc/e804a389c3b0880219ecf5f7a3c62d96a274b592.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.196.0.0/16
                  186.88.0.0/13
                  190.9.128.0/19
                  190.36.0.0/14
                  190.72.0.0/13
                  190.198.0.0-190.207.255.255
                  200.11.128.0/17
                  200.44.0.0/16
                  200.84.0.0/16
                  200.90.0.0/17
                  200.93.0.0/17
                  200.109.0.0/16
                  201.208.0.0/14
                  201.242.0.0/15
                  201.248.0.0/15
                IPv6:
                  2800:1000::/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  8048
                  10293

    Signature Algorithm: sha256WithRSAEncryption
         3b:9c:17:a6:55:d1:4c:75:ee:83:c1:9c:61:75:6c:76:d4:c0:
         9e:3a:07:d7:25:36:23:37:a6:fa:4e:5b:db:52:e2:5a:be:20:
         47:ba:0d:18:b9:78:09:33:20:a7:ac:ab:11:a4:b4:e3:ae:41:
         b5:47:30:f8:71:83:ed:ff:09:1e:f8:d0:4f:1a:bb:ad:48:dd:
         44:c4:35:5a:df:c6:e1:81:aa:eb:24:05:f5:f2:5a:48:5f:f8:
         36:5c:ef:78:4d:57:d1:1e:46:f3:32:98:95:fd:a8:25:48:e9:
         20:3c:b4:57:e9:1c:12:26:81:91:13:b8:35:51:6b:be:f9:34:
         32:e0:80:9c:52:52:b8:57:56:72:47:29:6c:03:74:dc:d3:75:
         91:8a:28:a9:2d:2c:1b:9c:c7:e9:31:3a:25:7b:78:c7:bd:63:
         fa:64:a5:39:9b:8e:e0:29:3b:63:34:c5:49:02:e6:7b:40:c6:
         d5:9e:b6:1b:6c:91:49:f3:06:2e:66:e0:30:ae:e2:ad:7e:53:
         b0:cf:69:ba:81:4d:d3:b2:1b:c6:f1:f5:24:d8:4f:82:83:c6:
         52:89:83:0c:9e:d1:ad:8b:85:34:c0:56:0e:59:12:e7:4e:1f:
         f4:7b:39:86:4b:80:59:4f:f8:26:e8:44:24:6b:dc:7b:00:53:
         47:2e:88:03
-----BEGIN CERTIFICATE-----
MIIGLDCCBRSgAwIBAgIEANnHQzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzczOFoXDTI0MDExNzA1MDAw
MFowMzExMC8GA1UEAxMoZTgwNGEzODljM2IwODgwMjE5ZWNmNWY3YTNjNjJkOTZh
Mjc0YjU5MjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIzqzArHrEdt
hXyYxm1e6elEo1ppmPzw1b52d7avlxiLQOv2+P5CqMdFd8brpjlku7yaC7i865Gf
793qsI3CYh3OliZ2keGwGK/naD5Ad01P1i8bV2MKwVtUm0ep8jvNFh459oVOdBlx
bAfytYt3X6wgChHjVujWY3YuYTSvromK89NJc5GShmS0Xva6lIDg2NpgOPCAicqc
knJPWPQicwQ8mz5KFs2H7UbEAqdcccPWfHXsvnoohLioIgfF9P44ZwD61RvOfTaI
bbB9RkI+jGAhKmyi9L0Y7ClHNHan0i2sHCe5VAht94/iQXyDK2Xwj6cVooVgmN/H
Wi2oGfmexD0CAwEAAaOCA1swggNXMB0GA1UdDgQWBBRMsRzLHNPxM1mManyLKjme
0p3l5jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xOGY5ZWYzOS03MTk5
LTRiZjctYjJiMS02YjMwYTAxYjg0ZGMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMThmOWVmMzktNzE5OS00
YmY3LWIyYjEtNmIzMGEwMWI4NGRjL2U4MDRhMzg5YzNiMDg4MDIxOWVjZjVmN2Ez
YzYyZDk2YTI3NGI1OTIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjB9
BggrBgEFBQcBBwEB/wRuMGwwXAQCAAEwVgMDAKHEAwMDulgDBAW+CYADAwK+JAMD
A75IMAoDAwG+xgMDBL7AAwQHyAuAAwMAyCwDAwDIVAMEB8haAAMEB8hdAAMDAMht
AwMCydADAwHJ8gMDAcn4MAwEAgACMAYDBAAoABAwHQYIKwYBBQUHAQgBAf8EDjAM
oAowCAICH3ACAig1MA0GCSqGSIb3DQEBCwUAA4IBAQA7nBemVdFMde6DwZxhdWx2
1MCeOgfXJTYjN6b6TlvbUuJaviBHug0YuXgJMyCnrKsRpLTjrkG1RzD4cYPt/wke
+NBPGrutSN1ExDVa38bhgarrJAX18lpIX/g2XO94TVfRHkbzMpiV/aglSOkgPLRX
6RwSJoGRE7g1UWu++TQy4ICcUlK4V1ZyRylsA3Tc03WRiiipLSwbnMfpMTole3jH
vWP6ZKU5m47gKTtjNMVJAuZ7QMbVnrYbbJFJ8wYuZuAwruKtflOwz2m6gU3TshvG
8fUk2E+Cg8ZSiYMMntGti4U0wFYOWRLnTh/0ezmGS4BZT/gm6EQka9x7AFNHLogD
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:40 2024 by rpki-client on console-fra.rpki-client.org