Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8174f9e0234527f23fb0bcfd7cea896897ec3191.cer
File:                     8174f9e0234527f23fb0bcfd7cea896897ec3191.cer (raw, json)
Hash identifier:          SrqKQl5kjn+0AF8SUEqu2gn9Pf5yq1E303wHhmqbaVM=
Subject key identifier:   FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103E3AD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 04 Feb 2022 16:53:56 +0000
Certificate not after:    Tue 14 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 7908
                          AS: 17399
                          AS: 27917
                          AS: 52333
                          IP: 200.3.116.0/22
                          IP: 200.47.0.0 -- 200.47.171.255
                          IP: 200.47.176.0 -- 200.47.215.255
                          IP: 200.47.220.0 -- 200.47.255.255
                          IP: 200.85.64.0/20
                          IP: 200.110.240.0/20
                          IP: 2001:1350::/32
                          IP: 2800:20::/28
                          IP: 2800:170::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17032109 (0x103e3ad)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  4 16:53:56 2022 GMT
            Not After : Jan 14 05:00:00 2025 GMT
        Subject: CN=8174f9e0234527f23fb0bcfd7cea896897ec3191
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:8c:f9:24:9e:08:84:c9:e6:8b:64:61:5d:f8:
                    bb:cc:f7:0b:a8:57:04:ff:e5:cb:5d:90:19:98:fa:
                    95:a1:dd:d7:9b:35:36:a5:d4:61:a3:2f:e3:71:81:
                    04:c5:1e:1d:50:34:d5:1a:68:61:a6:7a:c7:4e:f2:
                    88:f5:e4:f9:e3:ab:33:17:da:30:bb:56:33:1b:fa:
                    cc:b8:84:cd:e1:07:5a:7c:84:e3:ef:89:6a:c6:22:
                    f2:82:3f:76:1d:4a:65:a3:79:15:d3:0c:ac:6e:55:
                    f9:cc:7f:6f:41:13:36:b9:49:32:6f:60:1c:d5:80:
                    8c:0e:f0:41:d9:e3:ee:17:dc:cb:b7:c2:cd:77:e7:
                    2c:8d:97:6d:24:10:79:65:93:10:7d:4e:ee:85:37:
                    00:ba:0c:27:14:46:e4:ba:41:52:1e:97:14:c3:a8:
                    ee:8a:7d:a8:17:da:51:32:70:d8:ed:31:a1:54:e7:
                    74:ed:8d:66:87:1b:82:77:b7:10:16:10:95:c2:0d:
                    ef:df:dc:90:c1:ab:22:a1:79:8b:36:8c:6a:f0:b7:
                    27:a2:59:29:40:8e:c5:07:33:33:f4:43:18:01:e2:
                    f6:86:77:d6:95:80:27:75:5c:45:f6:5f:ca:58:72:
                    6d:7f:76:2f:5e:b8:a2:91:a4:e3:3f:42:ce:79:36:
                    6b:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:9C:B9:83:74:37:2D:36:5A:88:25:24:4D:C8:2A:CE:E1:EE:26:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e292cf36-d052-443b-ac4b-7b4ba73bc218/8174f9e0234527f23fb0bcfd7cea896897ec3191.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.3.116.0/22
                  200.47.0.0-200.47.171.255
                  200.47.176.0-200.47.215.255
                  200.47.220.0-200.47.255.255
                  200.85.64.0/20
                  200.110.240.0/20
                IPv6:
                  2001:1350::/32
                  2800:20::/28
                  2800:170::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7908
                  17399
                  27917
                  52333

    Signature Algorithm: sha256WithRSAEncryption
         57:96:a9:7a:95:e5:a9:c8:ea:b4:dc:91:79:ff:a5:31:c8:f1:
         43:9f:fc:dc:9c:de:be:1c:a8:4b:bc:3d:ba:17:bf:f4:4d:45:
         32:c5:7d:7b:eb:fb:4c:72:0e:d4:7d:0a:d3:26:d9:8f:8d:49:
         04:ed:a1:92:c2:ab:60:8a:5b:3f:1e:01:28:4f:22:e5:2e:6b:
         56:c8:5c:9c:dd:09:ca:01:5a:b9:5c:e0:7c:c9:95:f8:f9:8d:
         1c:17:7e:9b:30:b9:a2:b5:e0:b8:b7:a6:08:5a:91:bf:89:a2:
         8b:11:e9:39:27:42:89:b3:ca:70:c6:e2:58:dd:0a:ff:61:16:
         0b:c1:8b:ce:9b:4f:bf:40:2d:b6:b5:4b:05:f9:18:f5:f6:1d:
         ca:f8:f6:c0:b6:7a:a1:5f:83:86:03:2c:5f:f8:7f:22:1d:29:
         c0:9b:02:3b:88:74:1d:ef:8c:57:b9:4a:bb:02:45:2e:52:4a:
         bf:81:ab:17:57:3f:7b:a6:24:2e:b2:08:24:f2:4e:4d:b2:8c:
         00:36:dc:dc:c6:1b:15:09:7d:e8:da:80:26:16:27:6c:39:43:
         a3:89:31:59:fc:e5:e2:43:20:62:29:38:36:64:00:9d:b6:ad:
         37:ec:d7:c0:e5:e7:ba:f0:aa:ac:0c:21:8e:bf:0b:89:3b:ef:
         f1:01:ae:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:16 2024 by rpki-client on console.sobornost.net