Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa5e174e29ba1e04c41bc1ff4539944b2bd6cbd1.cer
File:                     fa5e174e29ba1e04c41bc1ff4539944b2bd6cbd1.cer (raw, json)
Hash identifier:          MWITqpUvAdMiCLYbpaoBJ0jkbhYcSj7DK4t0Duz+LD4=
Subject key identifier:   5B:CD:8E:9F:0E:3C:38:7E:14:85:BF:64:32:DC:75:14:B4:00:1D:6A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E05AFD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bb01cf08-6411-4846-8ae8-6fe6d94dee30/fa5e174e29ba1e04c41bc1ff4539944b2bd6cbd1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bb01cf08-6411-4846-8ae8-6fe6d94dee30/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:29 +0000
Certificate not after:    Wed 03 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 27972
                          IP: 200.0.178.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14703357 (0xe05afd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:29 2017 GMT
            Not After : Apr  3 06:00:00 2024 GMT
        Subject: CN=fa5e174e29ba1e04c41bc1ff4539944b2bd6cbd1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:a5:c2:87:eb:c2:7b:b6:d4:15:40:43:b0:55:
                    50:24:4c:26:c2:08:6c:ee:f9:2b:0e:c6:a5:49:e5:
                    9b:1b:19:16:07:e1:05:3e:0c:9d:8e:2b:0f:6d:53:
                    b5:97:f8:82:d8:0e:26:b0:63:81:d1:21:35:a7:9c:
                    02:4c:4c:76:57:03:80:a6:4e:e1:e6:6f:d2:3d:0e:
                    26:76:bc:04:07:f6:bc:5a:8e:1e:75:7e:cf:f2:5c:
                    65:d7:a7:2f:7d:68:6e:d1:60:21:35:92:c4:a4:c2:
                    45:ae:8a:87:d6:84:bd:95:dd:b8:3b:71:c9:03:c2:
                    89:43:59:24:52:27:99:8f:b8:ad:58:a3:16:51:e5:
                    ca:a1:c5:a5:e5:49:bb:3e:8a:ab:ba:d9:d4:28:68:
                    72:a0:7c:a9:ad:22:7e:98:00:40:ed:a6:8c:d4:bd:
                    89:8b:0d:bb:21:77:b9:9d:95:98:58:f2:87:c5:b6:
                    6a:a6:a9:20:40:e9:c1:e2:7e:e2:ac:9e:e7:21:09:
                    f0:e5:d0:95:37:c7:3b:a3:f1:ed:63:20:4c:d8:3e:
                    de:de:51:d2:78:61:d6:12:fe:4b:32:d1:f3:10:89:
                    9a:9a:50:25:1f:99:a8:4a:08:fa:f0:30:8a:c6:a3:
                    48:75:15:e7:22:3f:f4:7c:8c:c5:aa:68:e6:44:78:
                    fb:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:CD:8E:9F:0E:3C:38:7E:14:85:BF:64:32:DC:75:14:B4:00:1D:6A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bb01cf08-6411-4846-8ae8-6fe6d94dee30/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bb01cf08-6411-4846-8ae8-6fe6d94dee30/fa5e174e29ba1e04c41bc1ff4539944b2bd6cbd1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.178.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27972

    Signature Algorithm: sha256WithRSAEncryption
         51:eb:c5:97:d3:59:aa:c5:9e:a0:63:c6:33:13:da:08:e4:7e:
         97:40:5e:18:77:f5:f6:96:50:4a:18:73:d8:e4:cf:0f:1b:13:
         26:51:c1:a6:06:18:f4:1b:c8:1c:76:bc:e0:10:5a:27:36:02:
         af:e8:84:1d:76:eb:d6:5e:16:54:fc:e9:a0:12:db:ec:94:24:
         ad:8e:4f:3d:bc:25:7e:74:89:28:bf:7d:4a:78:48:1d:24:e3:
         b9:91:5f:26:d4:94:1f:f8:94:8b:56:38:4c:e1:cf:41:06:aa:
         39:2b:1f:4e:bf:fe:a2:51:6e:18:13:0e:7a:b8:62:6c:a1:40:
         40:d2:68:cb:2b:f3:ad:1c:fe:6e:cd:ed:eb:a4:c9:f3:38:46:
         14:00:de:f9:99:10:93:34:1d:ba:51:66:8e:b0:0e:de:dd:62:
         62:94:b0:47:f0:dc:a8:fd:f9:5a:c9:67:39:52:c6:b0:62:33:
         d6:de:44:b9:f3:62:d5:e5:54:4a:80:69:88:50:bb:95:28:2c:
         9f:35:98:0a:ac:fb:9b:8b:9c:1a:b7:8f:11:8b:31:d1:50:da:
         f6:b2:b5:74:3e:28:99:3a:0e:1a:32:5c:1f:4b:95:df:1f:f3:
         b6:03:0b:45:72:c2:b6:3f:23:7f:e0:ac:27:e6:2f:c0:e4:eb:
         90:49:c2:5b
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAOBa/TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE3MTExNzE4MzcyOVoXDTI0MDQwMzA2MDAw
MFowMzExMC8GA1UEAxMoZmE1ZTE3NGUyOWJhMWUwNGM0MWJjMWZmNDUzOTk0NGIy
YmQ2Y2JkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIClwofrwnu2
1BVAQ7BVUCRMJsIIbO75Kw7GpUnlmxsZFgfhBT4MnY4rD21TtZf4gtgOJrBjgdEh
NaecAkxMdlcDgKZO4eZv0j0OJna8BAf2vFqOHnV+z/JcZdenL31obtFgITWSxKTC
Ra6Kh9aEvZXduDtxyQPCiUNZJFInmY+4rVijFlHlyqHFpeVJuz6Kq7rZ1ChocqB8
qa0ifpgAQO2mjNS9iYsNuyF3uZ2VmFjyh8W2aqapIEDpweJ+4qye5yEJ8OXQlTfH
O6Px7WMgTNg+3t5R0nhh1hL+SzLR8xCJmppQJR+ZqEoI+vAwisajSHUV5yI/9HyM
xapo5kR4+/ECAwEAAaOCAvkwggL1MB0GA1UdDgQWBBRbzY6fDjw4fhSFv2Qy3HUU
tAAdajAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iYjAxY2YwOC02NDEx
LTQ4NDYtOGFlOC02ZmU2ZDk0ZGVlMzAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYmIwMWNmMDgtNjQxMS00
ODQ2LThhZTgtNmZlNmQ5NGRlZTMwL2ZhNWUxNzRlMjliYTFlMDRjNDFiYzFmZjQ1
Mzk5NDRiMmJkNmNiZDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgAsjAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJtRDANBgkqhkiG9w0BAQsFAAOCAQEAUevFl9NZqsWeoGPGMxPaCOR+
l0BeGHf19pZQShhz2OTPDxsTJlHBpgYY9BvIHHa84BBaJzYCr+iEHXbr1l4WVPzp
oBLb7JQkrY5PPbwlfnSJKL99SnhIHSTjuZFfJtSUH/iUi1Y4TOHPQQaqOSsfTr/+
olFuGBMOerhibKFAQNJoyyvzrRz+bs3t66TJ8zhGFADe+ZkQkzQdulFmjrAO3t1i
YpSwR/DcqP35WslnOVLGsGIz1t5EufNi1eVUSoBpiFC7lSgsnzWYCqz7m4ucGreP
EYsx0VDa9rK1dD4omToOGjJcH0uV3x/ztgMLRXLCtj8jf+CsJ+YvwOTrkEnCWw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-ams.rpki-client.org