Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer
File:                     21124edeafd78a1e2f1ca38bd489cef8bd20ae73.cer (raw, json)
Hash identifier:          fjbhoFpdjmcFPasXWSkqJe85c9uxGpmRb2MvKhNiSXw=
Subject key identifier:   F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0104E2D7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 May 2018 19:56:38 +0000
Certificate not after:    Sat 25 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 11058
                          AS: 52294
                          AS: 52324
                          AS: 52332
                          AS: 52359 -- 52360
                          AS: 52370
                          AS: 52374 -- 52376
                          AS: 52403 -- 52404
                          AS: 52500
                          AS: 52508 -- 52509
                          AS: 61441
                          AS: 61494 -- 61495
                          AS: 61504 -- 61505
                          AS: 61520 -- 61521
                          AS: 61552 -- 61555
                          AS: 64103 -- 64106
                          AS: 64118
                          IP: 45.68.8.0/21
                          IP: 138.204.244.0 -- 138.204.255.255
                          IP: 138.219.0.0/22
                          IP: 200.0.17.0/24
                          IP: 200.0.19.0/24
                          IP: 200.9.157.0/24
                          IP: 200.13.83.0/24
                          IP: 200.14.37.0 -- 200.14.39.255
                          IP: 200.14.74.0/23
                          IP: 200.115.80.0/20
                          IP: 201.182.128.0/20
                          IP: 2001:13c7:6001::/48
                          IP: 2001:13c7:6007:: -- 2001:13c7:600e:ffff:ffff:ffff:ffff:ffff
                          IP: 2001:13c7:6010::/44
                          IP: 2801:168::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17097431 (0x104e2d7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 30 19:56:38 2018 GMT
            Not After : Jan 25 05:00:00 2025 GMT
        Subject: CN=21124edeafd78a1e2f1ca38bd489cef8bd20ae73
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:e5:69:11:d7:c6:1e:e3:a6:61:43:34:b5:0f:
                    07:cc:3c:d1:70:dd:c5:dc:e1:b5:4f:6e:88:e7:2d:
                    79:69:a2:cf:7f:09:29:82:21:ec:5d:62:56:f6:98:
                    4f:d2:74:bd:f3:16:e5:09:4d:1b:08:e2:6d:de:6f:
                    91:f3:bc:ee:4f:0e:0f:58:0d:6a:a8:01:a3:14:b5:
                    46:05:42:e3:48:c6:31:93:3a:e2:4a:c6:f1:8b:8c:
                    21:d8:b8:dd:7c:0c:ed:f7:1b:25:7e:6a:2c:b9:7d:
                    e6:a4:7c:8a:a9:de:05:de:08:78:5d:8a:35:89:e3:
                    56:13:a7:46:0b:87:e0:51:39:30:ac:20:b1:9f:78:
                    c9:44:cc:04:86:8f:c8:cd:47:ca:e9:9a:57:ee:4c:
                    7a:ac:37:1e:13:4b:e9:9d:f3:a5:39:d3:72:b7:a3:
                    02:2c:c4:6d:f0:fe:0e:1e:a7:74:f4:96:eb:8e:0b:
                    42:18:6a:6a:0b:b2:59:5b:ea:0c:f0:67:b3:8b:0f:
                    a7:c4:6f:39:56:1a:ee:13:3a:7c:38:3a:c4:59:f1:
                    a2:ac:de:cf:31:a9:03:90:7a:b1:f8:7e:49:de:a1:
                    dd:33:4c:d2:5c:6d:3f:db:94:01:92:86:15:13:3d:
                    e6:c1:68:a9:9f:51:3f:93:bb:8f:c1:12:80:ae:42:
                    52:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:FE:73:47:5C:7B:C8:14:48:1C:6C:FF:BD:F1:19:77:7E:0B:D9:5E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6550ae40-8f8d-4779-9e27-83b1bd3026e1/21124edeafd78a1e2f1ca38bd489cef8bd20ae73.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.8.0/21
                  138.204.244.0-138.204.255.255
                  138.219.0.0/22
                  200.0.17.0/24
                  200.0.19.0/24
                  200.9.157.0/24
                  200.13.83.0/24
                  200.14.37.0-200.14.39.255
                  200.14.74.0/23
                  200.115.80.0/20
                  201.182.128.0/20
                IPv6:
                  2001:13c7:6001::/48
                  2001:13c7:6007::-2001:13c7:600e:ffff:ffff:ffff:ffff:ffff
                  2001:13c7:6010::/44
                  2801:168::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11058
                  52294
                  52324
                  52332
                  52359-52360
                  52370
                  52374-52376
                  52403-52404
                  52500
                  52508-52509
                  61441
                  61494-61495
                  61504-61505
                  61520-61521
                  61552-61555
                  64103-64106
                  64118

    Signature Algorithm: sha256WithRSAEncryption
         6c:53:8f:65:88:72:7f:4a:b1:61:7d:0c:18:eb:c9:89:f3:37:
         7e:5e:c0:41:5f:9e:51:2a:5e:f2:95:a4:49:c9:83:3e:f4:83:
         5f:e9:af:61:50:01:b1:20:f1:33:e3:c0:d5:20:e7:33:8b:e9:
         24:3f:bf:c1:45:34:e2:5c:5f:83:e8:b8:0d:65:39:29:cd:fa:
         fa:48:19:e7:44:c0:c8:e4:ae:c8:dd:32:82:a7:35:ed:12:22:
         6a:09:cc:62:bc:44:53:e1:c8:f5:79:b0:e7:18:1c:06:c6:5f:
         e4:85:6c:6b:08:cc:2d:6f:3f:e5:71:2b:de:03:47:2f:e1:da:
         1c:1a:a3:95:51:2c:af:15:42:42:27:78:44:c6:21:20:07:e0:
         f9:9a:b2:2b:ab:7f:c0:9b:59:56:f1:31:71:d6:f5:84:54:46:
         58:68:88:1d:a5:85:27:88:d1:b0:3d:20:ea:7d:ed:13:79:03:
         41:2b:ec:a9:cc:5f:45:e3:f3:3b:54:31:78:e5:1a:30:44:a4:
         36:c8:a8:0a:dd:4a:16:6e:cf:0c:17:6b:39:f9:69:d9:06:a8:
         4f:07:16:db:e6:bd:93:3c:36:55:91:9a:03:b9:ab:ef:14:f2:
         df:be:8b:c6:7d:af:c0:14:66:45:29:05:af:fa:98:93:c8:da:
         e4:20:7c:36
-----BEGIN CERTIFICATE-----
MIIG4jCCBcqgAwIBAgIEAQTi1zANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDUzMDE5NTYzOFoXDTI1MDEyNTA1MDAw
MFowMzExMC8GA1UEAxMoMjExMjRlZGVhZmQ3OGExZTJmMWNhMzhiZDQ4OWNlZjhi
ZDIwYWU3MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJLlaRHXxh7j
pmFDNLUPB8w80XDdxdzhtU9uiOcteWmiz38JKYIh7F1iVvaYT9J0vfMW5QlNGwji
bd5vkfO87k8OD1gNaqgBoxS1RgVC40jGMZM64krG8YuMIdi43XwM7fcbJX5qLLl9
5qR8iqneBd4IeF2KNYnjVhOnRguH4FE5MKwgsZ94yUTMBIaPyM1HyumaV+5Meqw3
HhNL6Z3zpTnTcrejAizEbfD+Dh6ndPSW644LQhhqaguyWVvqDPBns4sPp8RvOVYa
7hM6fDg6xFnxoqzezzGpA5B6sfh+Sd6h3TNM0lxtP9uUAZKGFRM95sFoqZ9RP5O7
j8ESgK5CUnMCAwEAAaOCBBEwggQNMB0GA1UdDgQWBBT4/nNHXHvIFEgcbP+98Rl3
fgvZXjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NTUwYWU0MC04Zjhk
LTQ3NzktOWUyNy04M2IxYmQzMDI2ZTEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjU1MGFlNDAtOGY4ZC00
Nzc5LTllMjctODNiMWJkMzAyNmUxLzIxMTI0ZWRlYWZkNzhhMWUyZjFjYTM4YmQ0
ODljZWY4YmQyMGFlNzMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjCB
ogYIKwYBBQUHAQcBAf8EgZIwgY8wVwQCAAEwUQMEAy1ECDALAwQCisz0AwMAiswD
BAKK2wADBADIABEDBADIABMDBADICZ0DBADIDVMwDAMEAMgOJQMEA8gOIAMEAcgO
SgMEBMhzUAMEBMm2gDA0BAIAAjAuAwcAIAETx2ABMBIDBwAgARPHYAcDBwAgARPH
YA4DBwQgARPHYBADBgAoAQFoADCBrAYIKwYBBQUHAQgBAf8EgZwwgZmggZYwgZMC
AisyAgMAzEYCAwDMZAIDAMxsMAoCAwDMhwIDAMyIAgMAzJIwCgIDAMyWAgMAzJgw
CgIDAMyzAgMAzLQCAwDNFDAKAgMAzRwCAwDNHQIDAPABMAoCAwDwNgIDAPA3MAoC
AwDwQAIDAPBBMAoCAwDwUAIDAPBRMAoCAwDwcAIDAPBzMAoCAwD6ZwIDAPpqAgMA
+nYwDQYJKoZIhvcNAQELBQADggEBAGxTj2WIcn9KsWF9DBjryYnzN35ewEFfnlEq
XvKVpEnJgz70g1/pr2FQAbEg8TPjwNUg5zOL6SQ/v8FFNOJcX4PouA1lOSnN+vpI
GedEwMjkrsjdMoKnNe0SImoJzGK8RFPhyPV5sOcYHAbGX+SFbGsIzC1vP+VxK94D
Ry/h2hwao5VRLK8VQkIneETGISAH4Pmasiurf8CbWVbxMXHW9YRURlhoiB2lhSeI
0bA9IOp97RN5A0Er7KnMX0Xj8ztUMXjlGjBEpDbIqArdShZuzwwXazn5adkGqE8H
FtvmvZM8NlWRmgO5q+8U8t++i8Z9r8AUZkUpBa/6mJPI2uQgfDY=
-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:11 2024 by rpki-client on console.sobornost.net