Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1d425e0701077d9b4ed04e706fd74259f8427776.cer
File:                     1d425e0701077d9b4ed04e706fd74259f8427776.cer (raw, json)
Hash identifier:          Z1t2o2Zcg7iwITHYcpbFjFicjta/VVcg7zR5wVixxoc=
Subject key identifier:   EE:3A:B8:1F:3C:A7:02:64:5E:C4:73:74:7E:A0:F4:B3:9E:7C:FB:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01036563
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/1d425e0701077d9b4ed04e706fd74259f8427776.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 May 2022 15:01:09 +0000
Certificate not after:    Fri 10 Jan 2025 19:29:51 +0000
Subordinate resources:    AS: 263735
                          IP: 138.59.204.0/22
                          IP: 138.219.172.0/22
                          IP: 168.227.140.0/22
                          IP: 170.83.232.0/22
                          IP: 2803:9f80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16999779 (0x1036563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 15:01:09 2022 GMT
            Not After : Jan 10 19:29:51 2025 GMT
        Subject: CN=1d425e0701077d9b4ed04e706fd74259f8427776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d9:ae:9d:2c:17:d4:70:e1:02:f4:fd:23:15:
                    81:17:07:3e:37:35:d4:66:9e:c1:15:bf:63:fb:5e:
                    e9:0d:b9:92:58:50:ef:95:d2:63:c4:9a:1a:46:e9:
                    5d:d1:74:44:24:4b:ce:42:60:31:8a:93:53:aa:23:
                    ec:84:08:a3:1a:17:9a:9a:ff:ff:a0:7a:f6:aa:1a:
                    3d:15:29:28:9e:cd:0b:f1:96:3d:86:10:2a:32:06:
                    3d:f2:69:7c:8d:b4:33:01:0c:cb:fe:83:26:78:88:
                    b5:46:c3:a5:13:89:ca:d7:4b:79:3c:49:ec:6c:95:
                    74:25:b5:06:21:d2:ce:b0:af:96:c2:b1:c1:72:6a:
                    74:3c:0a:eb:00:21:e5:86:10:73:e9:3c:f2:17:a8:
                    39:46:25:ee:1e:fb:2d:88:9e:7b:70:31:64:2f:9d:
                    1d:25:94:6c:65:19:d3:84:21:8a:26:65:f7:06:d5:
                    84:ff:3c:1e:b5:ea:e1:08:57:9f:f9:5d:5f:96:e3:
                    c6:da:64:c8:41:9c:9f:14:ba:18:67:98:f2:5e:ab:
                    ba:6c:4f:3b:f9:a7:c3:ee:42:32:a1:8a:b3:eb:4c:
                    7e:02:3a:b2:97:6c:93:40:22:3d:3b:a9:c7:de:a5:
                    95:3d:94:86:ee:49:da:2b:1f:bb:83:12:bc:1c:7c:
                    78:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:3A:B8:1F:3C:A7:02:64:5E:C4:73:74:7E:A0:F4:B3:9E:7C:FB:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/937b2471-6f6f-4d9d-8cf3-952b6ce657f1/1d425e0701077d9b4ed04e706fd74259f8427776.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.59.204.0/22
                  138.219.172.0/22
                  168.227.140.0/22
                  170.83.232.0/22
                IPv6:
                  2803:9f80::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263735

    Signature Algorithm: sha256WithRSAEncryption
         81:6e:0e:3b:20:62:cb:7e:e7:28:df:63:02:2c:f0:79:92:be:
         c7:8b:35:2b:22:25:7a:35:86:7e:85:2f:25:31:8d:46:5b:aa:
         58:35:0f:2c:5b:35:21:2f:4e:9d:d8:ba:ee:62:92:13:48:ff:
         f5:38:ee:62:5f:ff:57:f1:ca:18:40:c0:60:c3:a5:f9:5d:ab:
         72:99:53:08:c1:5b:01:17:55:b9:af:41:ee:1b:61:c4:28:96:
         e1:e6:1c:1c:51:a6:7e:5a:21:5f:2f:80:55:08:ce:db:1a:fa:
         71:a3:57:4f:ed:8b:ce:54:73:90:11:78:be:c1:a4:9b:40:45:
         ed:e5:56:80:5e:35:81:77:9f:65:cd:f9:ab:6e:af:1a:d5:ed:
         ff:cb:5b:72:3c:6f:23:65:90:88:96:d3:d3:9e:d0:f2:50:88:
         95:7f:b9:c4:4c:19:6e:51:8d:99:71:4c:e0:ff:19:a7:17:2c:
         b6:5f:94:28:3a:d5:01:12:42:58:c0:55:9b:e0:38:ea:b3:95:
         08:8c:1b:e2:d8:b5:7a:f7:5b:9c:83:09:55:99:34:bb:ac:0c:
         07:33:7f:90:af:bf:44:d2:00:00:6a:33:4b:c2:97:20:70:d9:
         11:69:00:a0:c6:b7:d1:f5:86:de:9d:60:88:2f:c4:6c:97:5b:
         e3:43:0c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:06 2024 by rpki-client on console.sobornost.net