Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f8caf642faab23f93e78dca96f7b8df57ece73a8.cer
File:                     f8caf642faab23f93e78dca96f7b8df57ece73a8.cer (raw, json)
Hash identifier:          z3Qjd9l2ujVdjNzuAfQgimRJZa/XZqPgSJcgw0KMS/Q=
Subject key identifier:   5F:47:E4:E5:C1:1D:A5:88:2A:CE:4D:2E:19:06:23:57:8F:B3:DC:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E31493
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/f8caf642faab23f93e78dca96f7b8df57ece73a8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:43 +0000
Certificate not after:    Thu 02 May 2024 06:00:00 +0000
Subordinate resources:    AS: 25620
                          IP: 190.171.192.0/18
                          IP: 190.180.0.0/17
                          IP: 190.186.0.0/16
                          IP: 192.223.64.0/18
                          IP: 200.58.160.0/19
                          IP: 200.119.192.0/19
                          IP: 201.222.64.0/18
                          IP: 2800:390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14881939 (0xe31493)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:43 2017 GMT
            Not After : May  2 06:00:00 2024 GMT
        Subject: CN=f8caf642faab23f93e78dca96f7b8df57ece73a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1c:61:6e:73:1a:ce:c0:6b:d3:34:bd:40:76:
                    b6:65:6e:e1:3e:2a:06:ba:d5:07:46:b8:b3:32:aa:
                    63:de:0c:fe:2d:20:18:5b:05:12:c5:69:59:43:b2:
                    36:4c:db:81:c7:69:da:e7:e7:e4:22:33:f0:da:04:
                    de:21:0b:88:e9:e3:bc:a6:97:d1:98:e0:a2:4c:52:
                    9f:1c:af:e5:13:b2:ee:9b:37:ab:47:bb:65:87:3c:
                    f9:c4:93:9f:a4:c1:17:b1:7c:7a:3a:07:04:dd:2b:
                    7e:64:0d:69:71:6d:7b:62:b1:37:f5:fb:a8:3d:e3:
                    22:73:08:f7:37:27:77:bf:74:91:fa:ce:1c:6e:24:
                    36:64:6a:17:68:06:79:5b:34:e5:59:ee:74:d0:28:
                    01:33:c3:3b:05:a1:6e:08:31:8f:c8:f6:f3:f1:9b:
                    df:58:3f:26:e0:cf:a5:57:3b:fc:79:de:db:a9:fc:
                    af:c0:6f:f3:06:37:38:7d:f8:eb:df:75:e9:93:40:
                    f7:87:1f:27:05:21:0c:81:39:cb:4b:2b:45:f2:62:
                    57:91:d1:42:70:ed:9d:8e:f7:2c:0c:86:19:50:08:
                    f4:ac:ab:79:d1:a1:68:72:ee:9f:b4:d2:99:de:30:
                    a4:b1:cd:01:2e:fa:8b:dc:2f:de:53:5a:cb:10:40:
                    f9:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:47:E4:E5:C1:1D:A5:88:2A:CE:4D:2E:19:06:23:57:8F:B3:DC:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9756555d-963f-4dd7-beef-ff2e60fe439b/f8caf642faab23f93e78dca96f7b8df57ece73a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.171.192.0/18
                  190.180.0.0/17
                  190.186.0.0/16
                  192.223.64.0/18
                  200.58.160.0/19
                  200.119.192.0/19
                  201.222.64.0/18
                IPv6:
                  2800:390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  25620

    Signature Algorithm: sha256WithRSAEncryption
         0b:62:33:5c:dd:54:5f:a7:98:7e:37:dc:2b:45:f2:04:ba:93:
         2b:56:96:7e:cd:2f:db:0e:36:a1:2a:81:f1:cc:4d:93:5b:a6:
         13:5b:d2:88:3e:79:53:70:28:cd:17:a1:b6:73:5c:9c:66:50:
         04:08:23:a6:99:ea:0f:86:60:77:99:62:06:30:8b:5f:19:52:
         cf:b2:21:58:1d:10:a1:c3:28:57:bf:0c:bb:5e:85:0f:e8:55:
         ca:5f:04:f3:9f:a4:81:8e:a7:57:f5:59:15:e5:35:05:33:84:
         90:66:25:64:76:9d:1e:6b:80:98:48:90:86:fc:1a:94:c9:75:
         06:d2:da:fa:71:8b:af:3a:f5:ef:d3:76:ee:87:9b:6b:e8:24:
         e6:6e:5d:b5:4c:a9:bc:f7:fe:a1:3f:ae:f0:d1:66:09:78:6d:
         5d:70:9e:6a:76:2b:f7:e1:c3:75:4e:e2:59:38:b1:5e:c0:a6:
         6a:69:74:70:67:a6:f7:ae:59:19:d4:3b:d5:c8:ca:fb:3e:e4:
         f3:ec:e1:4a:f0:0c:cf:06:38:27:95:85:ec:7e:43:1b:ed:4c:
         40:07:7e:30:24:2e:6a:b0:5e:ec:77:b5:78:f1:32:36:86:ce:
         58:f4:fe:7c:c6:66:3c:00:fa:66:41:a0:4d:98:e8:b1:77:81:
         d0:a2:3b:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-ams.rpki-client.org