Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer
File:                     ed8fcfa65d8de09a281c9fdf71280ad87f71facb.cer (raw, json)
Hash identifier:          M92QYxfKUmoxVHLDEbeKZOGT9JHeY2Vg/IlCY9qg1pk=
Subject key identifier:   C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC596A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Sat 17 Feb 2024 16:38:14 +0000
Subordinate resources:    AS: 52263
                          AS: 262217
                          IP: 138.118.80.0/22
                          IP: 170.150.56.0/22
                          IP: 170.246.156.0/22
                          IP: 177.93.0.0/19
                          IP: 190.113.96.0/19
                          IP: 190.171.96.0/19
                          IP: 200.105.96.0/21
                          IP: 200.229.0.0/20
                          IP: 2803:1300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14440810 (0xdc596a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Feb 17 16:38:14 2024 GMT
        Subject: CN=ed8fcfa65d8de09a281c9fdf71280ad87f71facb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:c9:ae:50:32:49:17:4c:06:60:bb:99:92:b6:
                    fb:ac:7d:dd:96:64:f5:43:d1:f2:6b:1e:49:80:be:
                    5f:be:a5:2d:59:77:b6:e8:4e:17:48:89:fa:0f:70:
                    c2:38:a2:76:db:3c:4c:93:4e:a0:cd:f2:75:7e:cd:
                    0b:cf:52:22:ec:b2:91:e6:31:fe:22:8b:ef:8c:14:
                    da:0c:95:8c:aa:a4:14:b2:7a:ac:31:8d:f3:aa:a5:
                    eb:69:c0:ba:8e:da:e1:e1:af:86:f4:34:3f:e1:bc:
                    76:93:66:3a:62:88:90:60:64:15:1a:7a:b3:de:27:
                    76:4a:61:78:ff:03:cf:58:b2:5f:04:ad:92:95:d2:
                    76:eb:9b:dc:7f:d0:f7:7a:73:9f:75:8a:b4:95:c4:
                    39:7a:1d:1e:c2:45:a1:b2:68:46:da:72:5e:33:0f:
                    dd:ef:f6:a8:8b:db:93:20:d9:bf:fb:c2:18:fe:de:
                    c5:9c:9b:87:50:09:3f:73:6b:1e:69:87:68:1b:59:
                    a5:0c:30:e0:c7:3c:7a:93:5e:5c:11:93:8c:a6:1b:
                    93:ee:5c:ce:46:65:c5:61:4c:dd:60:e3:e3:07:e6:
                    fa:d1:1f:a7:5c:79:a3:6e:ef:0c:2d:33:bf:42:8f:
                    7f:8e:df:43:fa:10:d2:90:92:2b:2b:26:01:d2:2d:
                    a1:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:BD:27:FE:79:BB:96:F5:3F:FC:66:35:BD:13:88:51:8D:14:98:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9eb83a48-f5ea-4e30-b7f5-488676cc1d5d/ed8fcfa65d8de09a281c9fdf71280ad87f71facb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.80.0/22
                  170.150.56.0/22
                  170.246.156.0/22
                  177.93.0.0/19
                  190.113.96.0/19
                  190.171.96.0/19
                  200.105.96.0/21
                  200.229.0.0/20
                IPv6:
                  2803:1300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52263
                  262217

    Signature Algorithm: sha256WithRSAEncryption
         0c:ae:d9:9a:85:90:a6:ea:84:e0:e9:59:66:f8:d5:d3:79:7c:
         15:ca:78:95:94:09:be:e3:75:01:3d:4d:5f:42:d1:64:04:99:
         42:dd:fe:c8:f5:fd:d4:4a:70:7a:24:23:ec:49:bd:d9:8d:20:
         a2:81:73:a6:3b:69:fc:dd:24:41:13:e0:75:07:ac:52:4c:2b:
         b8:a5:5e:7f:1f:a5:7b:73:98:a2:76:c2:8f:ab:5f:4d:fd:59:
         79:40:c8:2c:5f:77:bc:7d:3c:21:44:2e:c4:3b:83:ac:02:90:
         c1:0b:fe:f2:e5:a7:2a:57:5d:9a:97:54:cd:12:75:4a:de:ae:
         0c:e5:99:f4:67:ad:00:ae:db:d4:05:6a:cf:9d:dc:0b:9d:4c:
         12:1c:60:49:c9:0b:16:5d:e9:09:f7:63:d0:3b:b1:2c:8b:9c:
         f6:1c:34:96:7d:c7:97:b6:8d:c1:20:74:b9:91:01:43:36:2a:
         cf:47:24:e5:58:72:92:be:a3:55:bf:f8:d2:df:1c:bd:32:43:
         4c:72:7c:7a:d5:69:e9:7d:69:48:23:35:0d:1f:75:08:4e:6e:
         f2:78:80:44:3b:99:da:86:72:62:c6:12:5a:ff:0d:5b:9b:90:
         9a:54:df:62:4e:88:b6:8e:ab:e2:0f:27:64:a2:77:33:1a:47:
         d9:38:40:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org