Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer
File:                     1c730cc4f1140e9c3a243768d1052ae2bf36d279.cer (raw, json)
Hash identifier:          cl5WO5P+zzSbG759iRD9YnzD2so9GKwg6hivxSS7er0=
Subject key identifier:   3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01029DB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:46 +0000
Certificate not after:    Wed 01 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 6535
                          AS: 27978
                          IP: 181.72.0.0/14
                          IP: 186.34.0.0 -- 186.36.255.255
                          IP: 190.54.0.0/16
                          IP: 190.208.0.0/15
                          IP: 200.9.151.0/24
                          IP: 200.29.128.0/18
                          IP: 200.31.32.0/19
                          IP: 200.32.160.0/19
                          IP: 2800:3b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16948662 (0x1029db6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:46 2017 GMT
            Not After : Jan  1 05:00:00 2025 GMT
        Subject: CN=1c730cc4f1140e9c3a243768d1052ae2bf36d279
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:15:38:91:b9:d8:72:c0:c2:7d:7a:70:22:f9:
                    1f:95:81:9e:ae:98:bf:b3:50:9b:e1:bf:12:7e:01:
                    2b:43:b1:31:d6:c3:7a:f3:26:1c:88:dd:35:1a:88:
                    a1:85:a5:28:84:83:5a:0f:3d:f8:15:42:b6:4a:d8:
                    fc:59:6d:ea:6c:da:ed:a9:7a:37:be:fb:5a:a3:fc:
                    fe:ed:20:8a:b7:07:20:22:cc:2e:7a:74:30:fb:90:
                    ba:a2:41:44:cd:5e:1f:82:37:30:18:25:51:85:47:
                    1d:9a:cb:42:51:fc:0e:bc:82:5d:02:49:19:1d:ba:
                    97:60:90:aa:2c:be:2a:ea:62:cd:16:64:e8:a6:3e:
                    5a:09:2d:68:2a:06:e3:a9:a4:e4:0f:08:a8:22:e1:
                    1f:0d:50:06:6b:06:b7:a5:7a:b8:d8:f6:07:9e:67:
                    00:f0:89:a7:a0:f8:d7:50:e8:9a:2c:36:ef:1a:04:
                    76:c3:8e:c5:43:a0:ca:d2:68:aa:54:93:c0:54:e6:
                    1b:97:40:71:39:35:4a:47:b8:e6:8b:ee:85:c0:b8:
                    cc:eb:88:4b:ac:78:0f:41:a5:c5:9c:e9:a4:80:e8:
                    5f:3b:78:bf:58:7c:64:ff:48:48:10:00:7c:6d:0f:
                    21:d8:a8:33:0e:48:ba:89:6e:ad:d6:8d:19:fc:6b:
                    ef:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:A3:67:37:DA:4A:CD:E5:E9:6B:4B:A9:47:08:77:64:8A:B3:25:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91c81eff-a6cd-4319-b3c3-dca83e866d25/1c730cc4f1140e9c3a243768d1052ae2bf36d279.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.72.0.0/14
                  186.34.0.0-186.36.255.255
                  190.54.0.0/16
                  190.208.0.0/15
                  200.9.151.0/24
                  200.29.128.0/18
                  200.31.32.0/19
                  200.32.160.0/19
                IPv6:
                  2800:3b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6535
                  27978

    Signature Algorithm: sha256WithRSAEncryption
         7b:f1:78:f6:8e:6b:32:f7:20:14:a4:9a:4b:1b:ce:af:5e:b4:
         be:06:42:f5:9e:3e:d9:ec:9f:f9:96:6f:0c:51:61:3e:55:71:
         50:bb:6c:85:92:7a:2c:92:03:a1:0e:90:6b:fe:16:3c:24:46:
         de:06:fb:5a:0f:2a:8d:83:da:41:2a:0b:3f:40:db:62:2f:42:
         29:20:e1:25:80:f7:e4:2b:2d:f7:65:4d:24:a8:35:02:14:f6:
         db:91:14:35:d7:eb:4d:1e:1a:67:55:41:b2:39:92:cf:0a:22:
         fb:fb:47:d9:3d:b4:bc:f8:ee:cc:64:76:13:b8:90:dd:46:d0:
         0e:3a:fa:3c:a8:a5:cb:7f:0b:97:ad:81:34:a5:62:ac:f6:53:
         75:ab:34:78:20:85:20:92:ae:48:2b:23:a9:4f:34:a5:e4:30:
         7c:f8:50:ea:c4:57:d4:62:ec:77:51:5d:1b:04:67:2b:12:61:
         ea:15:64:60:c3:1a:d5:ee:1e:f5:57:b2:e7:f5:f5:c3:49:58:
         21:c5:ce:56:96:4c:7d:ca:fa:7c:c9:04:7d:b5:1d:ea:f6:f6:
         f9:18:68:79:22:0f:95:a7:d9:06:c9:73:d2:51:f9:df:f5:e4:
         dc:26:a1:81:be:bd:95:2b:d4:e9:a8:24:e7:31:0b:09:c6:c8:
         92:93:88:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:06 2024 by rpki-client on console.sobornost.net