Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8263f0ea1b563289205ad0264530f8e6c30e569.cer
File:                     f8263f0ea1b563289205ad0264530f8e6c30e569.cer (raw, json)
Hash identifier:          dDv1rldb1al62P402n7hpaMA1qi39HbEkT8T9dSM1bU=
Subject key identifier:   C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010317CD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:38 +0000
Certificate not after:    Thu 25 Sep 2025 05:00:00 +0000
Subordinate resources:    AS: 7303
                          AS: 7934
                          AS: 10318
                          AS: 10481
                          AS: 10895
                          AS: 10983
                          AS: 11356
                          AS: 12264
                          AS: 21590
                          AS: 26608
                          AS: 27871
                          IP: 24.232.0.0/16
                          IP: 66.60.0.0/18
                          IP: 152.168.0.0/14
                          IP: 170.150.196.0/22
                          IP: 170.231.136.0/22
                          IP: 181.0.0.0 -- 181.1.151.255
                          IP: 181.1.156.0 -- 181.15.255.255
                          IP: 181.28.0.0/14
                          IP: 181.80.0.0 -- 181.85.207.255
                          IP: 181.85.216.0 -- 181.91.83.255
                          IP: 181.91.88.0 -- 181.94.196.255
                          IP: 181.94.198.0 -- 181.94.207.255
                          IP: 181.94.211.0/24
                          IP: 181.94.239.0 -- 181.94.240.255
                          IP: 181.94.251.0 -- 181.111.255.255
                          IP: 181.164.0.0 -- 181.171.255.255
                          IP: 181.228.0.0/14
                          IP: 186.108.0.0/14
                          IP: 186.124.0.0/14
                          IP: 186.136.0.0/14
                          IP: 186.152.0.0/15
                          IP: 190.16.0.0/14
                          IP: 190.30.0.0/15
                          IP: 190.136.0.0/14
                          IP: 190.188.0.0 -- 190.195.255.255
                          IP: 190.224.0.0/13
                          IP: 190.244.0.0/14
                          IP: 191.97.128.0/17
                          IP: 196.32.64.0/19
                          IP: 200.3.32.0 -- 200.3.95.255
                          IP: 200.32.0.0/19
                          IP: 200.42.0.0 -- 200.42.159.255
                          IP: 200.43.0.0/16
                          IP: 200.45.0.0/16
                          IP: 200.49.96.0/20
                          IP: 200.49.128.0/19
                          IP: 200.55.64.0/18
                          IP: 200.61.192.0/19
                          IP: 200.63.0.0/19
                          IP: 200.71.224.0/20
                          IP: 200.73.128.0/18
                          IP: 200.80.64.0/20
                          IP: 200.82.0.0/17
                          IP: 200.89.128.0/18
                          IP: 200.105.0.0 -- 200.105.95.255
                          IP: 200.110.224.0/21
                          IP: 200.114.128.0/17
                          IP: 200.117.0.0/16
                          IP: 200.122.0.0/17
                          IP: 200.126.128.0 -- 200.127.255.255
                          IP: 201.212.0.0/15
                          IP: 201.231.0.0/16
                          IP: 201.235.0.0/16
                          IP: 201.252.0.0/15
                          IP: 2001:13d0::/29
                          IP: 2800:2000::/20
                          IP: 2800:b000::/32
                          IP: 2803:da80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16979917 (0x10317cd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:38 2017 GMT
            Not After : Sep 25 05:00:00 2025 GMT
        Subject: CN=f8263f0ea1b563289205ad0264530f8e6c30e569
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:0c:25:e0:4d:22:a2:3c:75:0a:1f:5b:04:69:
                    48:37:0b:4f:b4:89:3f:88:ed:84:6b:32:cd:7a:1a:
                    58:22:38:90:64:11:73:af:54:c9:31:f1:7d:33:1a:
                    f1:bf:b7:0e:8c:69:22:9f:1a:8f:f3:17:44:52:42:
                    2c:72:9e:16:e4:ce:7f:a6:ab:7b:7c:c8:02:45:7a:
                    ff:1d:a7:0a:ab:35:f3:56:76:df:84:eb:25:96:32:
                    85:bb:a8:cd:46:65:e3:d5:3a:81:f3:42:e9:60:f1:
                    0c:db:dd:38:b2:99:a7:36:29:71:3a:ce:35:3c:e0:
                    a4:47:6a:8f:17:f1:02:11:54:8f:9f:73:d2:82:35:
                    24:1b:c4:05:5a:a6:2d:f8:50:b7:33:62:b5:9c:26:
                    dc:ba:89:cc:f5:5c:35:86:e3:ac:7b:7b:e7:78:fb:
                    2c:85:d5:5b:46:53:fb:87:bd:5c:4e:73:5f:5e:74:
                    37:98:19:6e:ad:27:b6:1c:55:ec:d8:1c:b8:76:28:
                    01:cb:f9:87:df:d3:db:b0:40:14:e0:40:4d:53:c3:
                    61:b0:6d:76:48:ec:15:f8:ea:9c:b8:38:65:e7:92:
                    40:8e:e1:5f:66:d7:73:53:2f:3f:8d:ff:7a:a0:3d:
                    94:79:82:e6:b7:8e:31:e4:9d:fd:f7:78:49:c2:57:
                    a4:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F7:11:2F:D7:F6:E3:83:A9:9A:5B:5C:19:E1:4D:AB:FC:03:DC:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/532b2097-ea08-4780-b94f-03c338b5aa57/f8263f0ea1b563289205ad0264530f8e6c30e569.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  24.232.0.0/16
                  66.60.0.0/18
                  152.168.0.0/14
                  170.150.196.0/22
                  170.231.136.0/22
                  181.0.0.0-181.1.151.255
                  181.1.156.0-181.15.255.255
                  181.28.0.0/14
                  181.80.0.0-181.85.207.255
                  181.85.216.0-181.91.83.255
                  181.91.88.0-181.94.196.255
                  181.94.198.0-181.94.207.255
                  181.94.211.0/24
                  181.94.239.0-181.94.240.255
                  181.94.251.0-181.111.255.255
                  181.164.0.0-181.171.255.255
                  181.228.0.0/14
                  186.108.0.0/14
                  186.124.0.0/14
                  186.136.0.0/14
                  186.152.0.0/15
                  190.16.0.0/14
                  190.30.0.0/15
                  190.136.0.0/14
                  190.188.0.0-190.195.255.255
                  190.224.0.0/13
                  190.244.0.0/14
                  191.97.128.0/17
                  196.32.64.0/19
                  200.3.32.0-200.3.95.255
                  200.32.0.0/19
                  200.42.0.0-200.42.159.255
                  200.43.0.0/16
                  200.45.0.0/16
                  200.49.96.0/20
                  200.49.128.0/19
                  200.55.64.0/18
                  200.61.192.0/19
                  200.63.0.0/19
                  200.71.224.0/20
                  200.73.128.0/18
                  200.80.64.0/20
                  200.82.0.0/17
                  200.89.128.0/18
                  200.105.0.0-200.105.95.255
                  200.110.224.0/21
                  200.114.128.0/17
                  200.117.0.0/16
                  200.122.0.0/17
                  200.126.128.0-200.127.255.255
                  201.212.0.0/15
                  201.231.0.0/16
                  201.235.0.0/16
                  201.252.0.0/15
                IPv6:
                  2001:13d0::/29
                  2800:2000::/20
                  2800:b000::/32
                  2803:da80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7303
                  7934
                  10318
                  10481
                  10895
                  10983
                  11356
                  12264
                  21590
                  26608
                  27871

    Signature Algorithm: sha256WithRSAEncryption
         26:47:da:fe:38:3a:8e:ca:06:1a:40:d7:91:a6:56:80:0c:5e:
         db:15:b3:d5:94:a0:90:1a:45:b8:77:b5:23:9f:57:63:13:f6:
         39:78:cd:7b:1c:c6:c7:1c:59:d7:a5:11:9c:57:bd:72:4f:a7:
         92:80:02:71:53:b5:bc:5d:8b:37:52:5b:14:ea:4d:79:e6:bd:
         47:48:95:7e:75:a2:ee:0f:5b:78:03:99:8c:4f:b5:45:79:b2:
         4f:d9:7a:5f:57:c2:9b:3c:10:0d:dc:26:12:47:ab:f0:d9:df:
         f0:d8:53:1a:99:de:3f:22:cb:a3:b9:41:3f:8a:48:f4:03:2f:
         43:b6:4b:74:bb:a3:82:1c:ae:56:a1:43:69:36:47:6a:56:e7:
         c0:3f:45:df:d9:c2:8b:cc:1e:52:fa:75:11:bf:58:f4:a7:b7:
         94:80:e7:d2:f1:86:02:5e:16:7c:9d:f2:f4:ab:83:a1:e6:e0:
         cd:36:30:65:0b:e2:19:c5:65:4d:72:90:ff:ca:8f:e0:2f:2e:
         f1:a0:31:4e:bc:76:ca:a2:23:1e:63:5c:8d:d9:52:44:83:66:
         bd:d7:dc:36:1f:7b:68:77:1b:92:e7:1d:95:7e:f6:d9:7c:59:
         02:3d:5e:0e:23:de:70:5f:19:9b:44:c1:08:60:24:90:a7:ea:
         03:aa:d2:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-ams.rpki-client.org