Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e37ba61cda2665349146e3f47d9626599bc42f0.cer
File:                     6e37ba61cda2665349146e3f47d9626599bc42f0.cer (raw, json)
Hash identifier:          2ZP8vCvuiOhjJ5ppol4LFnasc4NZprP4K6QDNxujMWM=
Subject key identifier:   95:AE:CE:6D:67:BE:1D:4E:2D:8F:34:DB:70:3E:01:B2:11:53:03:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF2124
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/6e37ba61cda2665349146e3f47d9626599bc42f0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Thu 28 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 6057
                          AS: 7167
                          AS: 267718
                          IP: 167.56.0.0/13
                          IP: 167.108.0.0/16
                          IP: 167.116.0.0/16
                          IP: 179.24.0.0/13
                          IP: 186.48.0.0/13
                          IP: 190.0.128.0/19
                          IP: 190.64.0.0/16
                          IP: 190.132.0.0/14
                          IP: 200.2.32.0/19
                          IP: 200.40.0.0/16
                          IP: 200.125.0.0/18
                          IP: 201.217.128.0/18
                          IP: 201.221.32.0/19
                          IP: 2800:a0::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16720164 (0xff2124)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Nov 28 04:00:00 2024 GMT
        Subject: CN=6e37ba61cda2665349146e3f47d9626599bc42f0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:69:3a:6d:6e:3e:24:48:b8:eb:5f:7c:98:61:
                    8a:e4:66:d8:91:df:dc:4f:d7:1d:d2:9f:95:a2:1a:
                    1a:5d:77:cd:68:72:2d:c7:e1:2a:91:62:4f:60:4d:
                    af:dc:b9:4e:90:d6:6a:d2:8b:47:56:8b:e8:c1:46:
                    14:8c:1f:e3:20:f8:c4:d3:13:26:56:07:33:b5:9b:
                    45:62:0d:4d:75:14:b8:51:b5:9e:20:61:8b:65:5f:
                    1d:a3:c0:57:fa:81:20:e1:67:de:8d:d4:47:d0:86:
                    6b:1c:0d:bb:39:d1:e8:bb:ba:4b:3a:f0:1d:41:a4:
                    7e:f4:4f:4b:26:af:60:0a:24:9f:28:55:58:2e:6a:
                    e9:3f:c5:b0:aa:b6:1a:f1:1e:f0:df:70:10:c6:2d:
                    78:02:44:aa:15:4d:40:c0:dd:0b:0e:61:93:99:80:
                    4c:05:aa:6f:00:24:f7:83:fb:00:c5:6a:3f:8b:30:
                    1f:d9:bc:20:48:47:69:af:b4:11:c8:8d:8d:56:b1:
                    ac:91:b3:54:e6:e2:16:f7:35:25:1b:5c:56:b4:ca:
                    09:3b:2a:64:50:b2:0f:d6:73:fb:e7:3a:f9:c1:a6:
                    2a:b9:2a:98:ea:8e:aa:1a:32:95:e5:78:60:36:83:
                    24:11:cd:b8:29:f3:aa:08:3b:6e:7f:8b:39:55:ff:
                    dd:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:AE:CE:6D:67:BE:1D:4E:2D:8F:34:DB:70:3E:01:B2:11:53:03:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fe91a7aa-2d10-478d-abc0-c38f604f3488/6e37ba61cda2665349146e3f47d9626599bc42f0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.56.0.0/13
                  167.108.0.0/16
                  167.116.0.0/16
                  179.24.0.0/13
                  186.48.0.0/13
                  190.0.128.0/19
                  190.64.0.0/16
                  190.132.0.0/14
                  200.2.32.0/19
                  200.40.0.0/16
                  200.125.0.0/18
                  201.217.128.0/18
                  201.221.32.0/19
                IPv6:
                  2800:a0::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  6057
                  7167
                  267718

    Signature Algorithm: sha256WithRSAEncryption
         46:bf:c5:e4:7c:09:a7:df:a1:8c:bb:03:0d:e4:59:8b:c0:d0:
         42:b4:85:09:5c:eb:91:70:2a:78:4a:b5:03:56:9a:2d:29:a6:
         d6:55:d7:48:5b:4c:26:e0:33:02:d2:5b:22:43:4d:91:d5:4d:
         7c:67:ab:ff:25:44:96:c2:59:b9:51:33:8d:6c:f6:18:40:95:
         1a:53:9c:c7:6a:fc:6c:8d:ed:41:6f:56:2a:49:96:4f:62:b2:
         31:9a:33:da:c1:9c:2b:3b:51:2d:67:95:81:1c:8c:a0:ab:f7:
         14:a2:6d:aa:4d:f1:6b:c8:91:d3:69:f5:cb:49:37:33:06:0f:
         24:ae:ac:c2:dd:89:35:65:03:49:c4:c8:09:57:86:7a:a7:68:
         5e:41:c3:ef:79:83:78:5b:2a:bb:5a:43:94:13:65:1c:b5:cd:
         08:72:b3:be:d4:4c:0a:4a:4b:bf:2b:09:a6:83:2d:44:c8:1a:
         30:02:24:98:8f:f2:90:24:df:46:65:88:50:ad:f8:53:4d:c2:
         bd:2f:1a:82:ac:95:dc:22:3a:0d:cf:68:bf:e8:bc:df:58:fc:
         fc:80:bc:60:71:df:43:f4:78:cb:fc:b8:9c:cb:41:aa:ec:9d:
         37:a7:f4:83:19:e4:c7:21:2e:aa:7a:5d:6e:4b:2e:bc:76:12:
         b0:49:1e:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:15 2024 by rpki-client on console.sobornost.net