Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4800572b83ba46368b1e79fa920134cdec01ba1.cer
File:                     f4800572b83ba46368b1e79fa920134cdec01ba1.cer (raw, json)
Hash identifier:          FPa6YNA2mdmolV2/kyYsQB25QM8FoZyaAQ1lFCcoxPQ=
Subject key identifier:   F1:A2:5E:BD:DA:C9:BE:18:DD:CA:44:38:91:4F:57:AA:DE:5A:A5:65
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E35425
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d18ad6d-304f-455b-8115-f9fc7a1ec96c/f4800572b83ba46368b1e79fa920134cdec01ba1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d18ad6d-304f-455b-8115-f9fc7a1ec96c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:25:44 +0000
Certificate not after:    Fri 21 Jun 2024 06:00:00 +0000
Subordinate resources:    AS: 6400
                          IP: 64.32.64.0/18
                          IP: 66.98.0.0 -- 66.98.95.255
                          IP: 148.0.0.0/16
                          IP: 148.101.0.0/16
                          IP: 148.255.0.0/16
                          IP: 152.0.0.0/16
                          IP: 179.52.0.0/15
                          IP: 179.61.16.0/20
                          IP: 186.6.0.0/15
                          IP: 190.12.192.0/19
                          IP: 190.80.128.0/17
                          IP: 190.166.0.0/15
                          IP: 196.3.74.0 -- 196.3.89.255
                          IP: 200.88.0.0/16
                          IP: 201.229.128.0/17
                          IP: 2001:1308::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14898213 (0xe35425)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 17:25:44 2023 GMT
            Not After : Jun 21 06:00:00 2024 GMT
        Subject: CN=f4800572b83ba46368b1e79fa920134cdec01ba1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:b1:9e:b8:f4:53:20:34:7a:96:ef:86:ea:ce:
                    93:05:df:94:b0:b4:56:fc:3c:31:06:af:64:ab:79:
                    fa:9a:94:04:0a:30:60:ff:6b:43:e7:0e:a7:82:40:
                    c5:71:88:84:95:35:ab:c1:ef:7b:3e:eb:74:61:20:
                    27:da:bd:1b:39:d5:87:3b:cb:19:9a:d8:62:93:28:
                    a9:c7:0c:7a:16:b9:41:34:ef:2d:1d:f0:0c:30:9e:
                    52:38:0e:87:4d:3e:e1:82:6c:a1:c4:98:78:65:6a:
                    d4:a8:20:e4:84:22:16:e3:dc:60:13:1c:3b:99:8b:
                    30:7a:02:b1:cd:2b:6a:c5:85:a7:04:d8:92:78:29:
                    14:6f:c7:e1:84:c2:f7:d5:14:65:96:74:a0:73:7a:
                    1c:25:b0:05:30:9d:3f:cc:78:bd:0c:a8:95:3f:a3:
                    6d:0a:1d:46:47:56:b2:5e:5e:fc:8e:70:a0:85:36:
                    fb:21:a8:fb:8a:0a:22:23:1e:be:99:25:88:8e:d5:
                    00:9f:a3:66:a3:69:1c:94:e5:b9:e3:76:c2:54:06:
                    36:5b:3d:20:3b:f7:8c:78:e4:71:fa:fb:ee:76:7d:
                    fe:8b:9f:cc:5e:6d:e4:e6:40:cf:89:6c:e1:68:64:
                    31:cc:99:7e:9b:13:70:c0:d3:b9:57:a2:33:0a:27:
                    e7:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:A2:5E:BD:DA:C9:BE:18:DD:CA:44:38:91:4F:57:AA:DE:5A:A5:65
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d18ad6d-304f-455b-8115-f9fc7a1ec96c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d18ad6d-304f-455b-8115-f9fc7a1ec96c/f4800572b83ba46368b1e79fa920134cdec01ba1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  64.32.64.0/18
                  66.98.0.0-66.98.95.255
                  148.0.0.0/16
                  148.101.0.0/16
                  148.255.0.0/16
                  152.0.0.0/16
                  179.52.0.0/15
                  179.61.16.0/20
                  186.6.0.0/15
                  190.12.192.0/19
                  190.80.128.0/17
                  190.166.0.0/15
                  196.3.74.0-196.3.89.255
                  200.88.0.0/16
                  201.229.128.0/17
                IPv6:
                  2001:1308::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6400

    Signature Algorithm: sha256WithRSAEncryption
         47:83:dc:72:a5:3d:3b:e6:12:dd:cd:44:60:13:03:34:05:91:
         c2:7e:e6:b6:de:95:ca:36:94:2a:70:b6:b6:cc:a8:84:33:92:
         e7:15:74:88:9a:40:1f:35:9a:10:32:c9:7a:7e:d6:45:e1:4f:
         6b:b5:52:89:46:61:60:00:ae:28:93:14:e1:79:a0:72:19:54:
         82:bc:8b:73:05:7f:f4:f8:c4:d2:7d:55:86:02:2b:2b:5f:b5:
         ce:0a:2e:22:6a:0c:6b:c7:59:0e:4b:37:df:ce:f8:1a:53:00:
         0a:d9:ed:6d:f5:0f:84:2b:6a:9b:64:81:08:b0:39:f9:87:9e:
         78:9e:9a:2b:cb:50:63:60:35:5a:b8:0d:78:de:6d:ea:ba:db:
         49:4e:46:d5:14:d1:07:13:65:b3:5c:76:d6:20:56:17:95:25:
         eb:d0:5d:84:be:18:3d:44:59:c6:00:99:86:01:e0:79:16:4b:
         d9:6e:05:f4:07:ba:2f:7f:56:0b:1f:fd:42:ce:9d:f8:6b:cc:
         8a:7d:30:0f:be:a2:9d:92:8a:58:92:75:c3:99:0c:db:2d:ab:
         15:da:ce:01:88:eb:55:e9:55:c0:b8:66:05:f4:57:a1:cc:6a:
         ba:3e:91:8b:9c:26:c3:4d:ec:b7:33:41:f3:f5:d3:18:9c:47:
         d3:70:c0:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:30 2024 by rpki-client on console-ams.rpki-client.org