Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4148537b4ccadb260c40d4d3b4a2994c8f2d030.cer
File:                     f4148537b4ccadb260c40d4d3b4a2994c8f2d030.cer (raw, json)
Hash identifier:          e0yImDfd/s5iY1o9pJw5EVMYX7mHwJNJkBgEWKLwwdw=
Subject key identifier:   EC:F1:8E:D6:77:C7:A6:8A:3E:08:79:CB:3E:53:9A:EF:1E:96:8D:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA17F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/526c6004-14a6-4610-9ca8-c15562e6e71a/f4148537b4ccadb260c40d4d3b4a2994c8f2d030.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/526c6004-14a6-4610-9ca8-c15562e6e71a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Jun 2020 22:00:01 +0000
Certificate not after:    Sun 20 Oct 2024 14:00:00 +0000
Subordinate resources:    AS: 16960
                          AS: 28523
                          AS: 270161
                          IP: 177.248.0.0/15
                          IP: 187.254.0.0/16
                          IP: 200.53.240.0/20
                          IP: 200.56.192.0/19
                          IP: 201.130.192.0/18
                          IP: 201.161.128.0/18
                          IP: 201.167.0.0/16
                          IP: 2806:310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16390132 (0xfa17f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  8 22:00:01 2020 GMT
            Not After : Oct 20 14:00:00 2024 GMT
        Subject: CN=f4148537b4ccadb260c40d4d3b4a2994c8f2d030
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:8c:e8:38:ea:fe:28:bb:4f:08:7a:b7:59:6a:
                    40:dc:d6:a2:f2:41:fd:77:4f:b5:cd:27:f4:9a:3b:
                    0b:ff:b3:83:ce:8c:51:14:11:a5:5f:08:a6:52:2d:
                    a6:95:6a:22:25:70:0b:68:fd:b9:de:91:82:12:f8:
                    e5:0a:91:45:d8:93:e9:3b:b7:f0:11:87:0e:61:28:
                    df:65:33:f2:f3:f7:03:ac:bf:47:7d:b5:f2:d6:71:
                    b2:9c:d3:36:45:26:36:77:f3:4d:bf:e3:0d:c0:54:
                    19:1a:3d:f1:71:0c:b4:ac:86:01:5f:21:0a:30:ac:
                    fd:10:ff:51:d8:cb:df:df:c7:44:dd:d6:0b:42:d5:
                    9e:10:56:21:ff:31:d2:2a:8c:11:cd:f5:05:cd:52:
                    16:aa:d5:95:4f:e4:06:90:72:11:b1:35:38:a4:07:
                    ab:a5:70:2f:06:de:27:50:6a:a1:34:3f:45:68:9b:
                    c0:8a:b8:af:69:26:28:3b:33:75:40:3b:e6:8b:5e:
                    2a:94:64:4b:f6:10:23:f3:32:c3:73:85:26:67:a3:
                    18:6c:ec:fe:43:8c:01:09:9b:e7:c1:89:00:68:2f:
                    be:64:46:b3:7b:92:fa:e0:19:9a:13:56:df:cd:1e:
                    3f:63:57:b5:c3:8f:05:47:ad:f3:75:d5:e9:38:55:
                    17:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:F1:8E:D6:77:C7:A6:8A:3E:08:79:CB:3E:53:9A:EF:1E:96:8D:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/526c6004-14a6-4610-9ca8-c15562e6e71a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/526c6004-14a6-4610-9ca8-c15562e6e71a/f4148537b4ccadb260c40d4d3b4a2994c8f2d030.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.248.0.0/15
                  187.254.0.0/16
                  200.53.240.0/20
                  200.56.192.0/19
                  201.130.192.0/18
                  201.161.128.0/18
                  201.167.0.0/16
                IPv6:
                  2806:310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16960
                  28523
                  270161

    Signature Algorithm: sha256WithRSAEncryption
         c0:7f:c7:3c:d9:36:c4:02:7f:8d:09:34:83:54:f4:57:f2:55:
         1c:6d:06:f4:09:c6:1d:5c:a1:70:f1:8b:51:89:a9:72:9e:8b:
         38:34:fd:30:9e:eb:4a:38:03:15:9a:dc:c1:d4:a0:2a:47:88:
         71:39:e7:e2:78:c3:c4:dd:28:25:0f:52:a4:e3:fc:7f:5f:db:
         af:e5:66:31:03:7a:cc:d9:1a:8f:77:d2:84:41:06:c9:97:e8:
         2f:c6:89:94:41:4d:5b:24:ab:85:27:66:52:71:4c:99:8e:09:
         9c:ea:44:fd:76:15:b4:ee:f6:52:80:9c:33:51:8d:77:cc:cc:
         37:90:4f:4e:c5:e7:99:5a:b9:5f:32:91:54:4c:70:4b:20:a8:
         b1:cd:10:04:b5:0d:2e:50:88:6f:b1:b1:28:ce:98:1d:45:f3:
         a1:8e:f0:a9:85:20:ba:4d:29:47:b8:9a:c5:7f:eb:99:33:8d:
         45:14:4e:4c:fd:d1:95:ed:3a:29:00:b1:e0:fd:53:95:93:2f:
         0e:8f:9d:45:34:80:2e:40:93:d7:a4:b7:ea:2a:6b:91:5f:8f:
         56:6f:e3:64:58:ea:e7:2d:df:26:38:73:c0:9c:77:6e:b0:dc:
         0d:22:7c:5d:6b:ba:7c:39:1a:28:42:f1:43:2b:b6:10:86:48:
         0c:c8:9c:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org