Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/88d44f0918975636ffb95bc864d2ead8021849e5.cer
File:                     88d44f0918975636ffb95bc864d2ead8021849e5.cer (raw, json)
Hash identifier:          +/l/XS+U1+mkFWAZXe7kBEeKhsdMJHq/7LQFLtFIy64=
Subject key identifier:   60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010417A5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:04 +0000
Certificate not after:    Thu 16 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 262202
                          IP: 170.246.148.0/22
                          IP: 186.96.80.0/20
                          IP: 190.57.48.0/21
                          IP: 200.119.184.0/21
                          IP: 2803:b800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17045413 (0x10417a5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:04 2017 GMT
            Not After : Jan 16 05:00:00 2025 GMT
        Subject: CN=88d44f0918975636ffb95bc864d2ead8021849e5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d7:95:f6:bf:c8:67:45:ca:3e:6e:47:6e:7d:
                    1e:8b:da:bb:52:73:e2:ba:5a:4a:a8:08:0e:42:63:
                    ab:69:7d:f4:a9:96:11:29:48:2a:59:ea:13:ff:6f:
                    ef:ac:13:b7:a1:a2:d6:c1:ec:4d:df:d7:5e:ba:f8:
                    1c:95:6a:48:16:08:6b:80:22:24:3c:9e:16:6e:5a:
                    96:4f:bb:74:e7:17:e3:c0:f1:17:5b:ca:b7:5e:37:
                    3c:36:a5:d2:12:ab:99:27:9d:bb:af:3b:02:f7:dd:
                    91:5c:3d:a4:c0:8b:d9:0f:ea:01:04:da:5e:a2:68:
                    c1:81:b5:1b:b5:1e:6d:f6:e4:49:17:bf:bf:4f:23:
                    e1:1a:90:b4:a5:57:51:14:dd:31:15:08:59:53:77:
                    f2:99:e3:a7:ea:fe:36:39:79:4d:f1:2d:d1:03:be:
                    0e:13:29:f0:e1:ee:b8:da:af:b9:f0:1d:97:67:c2:
                    6b:62:03:f0:2c:2e:38:a6:4b:91:82:b0:3e:72:12:
                    82:a5:36:e3:2f:de:76:59:4e:67:60:18:8c:2e:33:
                    34:25:ba:09:86:4c:84:45:bf:0d:ef:32:a8:8a:9b:
                    6f:d2:f6:a4:72:87:93:12:63:e7:86:b2:94:78:60:
                    6f:a8:92:7b:1c:3e:95:06:ef:6c:ef:56:bf:39:66:
                    71:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:5D:91:FC:06:B0:3E:4C:60:D5:39:0D:5E:08:E0:2A:64:C2:A8:AA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fbd2e10b-5f34-48da-9356-80c88058e02c/88d44f0918975636ffb95bc864d2ead8021849e5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.148.0/22
                  186.96.80.0/20
                  190.57.48.0/21
                  200.119.184.0/21
                IPv6:
                  2803:b800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262202

    Signature Algorithm: sha256WithRSAEncryption
         80:e0:23:4a:3f:a4:24:f8:31:4a:ca:35:9d:99:da:d2:f9:42:
         d7:84:2f:75:74:0a:f9:3a:d5:b4:a7:c2:56:f4:47:ce:56:02:
         aa:7f:08:f0:e3:cf:8a:34:83:43:a2:69:a9:f4:17:90:8a:d7:
         88:e8:18:37:36:70:8e:00:00:47:82:a4:0d:67:28:15:28:09:
         0d:16:1c:8f:c6:cc:f2:bf:c3:d8:06:11:97:91:f3:35:ec:d2:
         f3:c4:01:0d:ea:4e:7e:c8:fb:0f:8c:f6:c5:0f:e0:67:7a:8b:
         f8:5d:8e:2e:03:26:f4:a2:45:58:72:52:c6:38:82:67:19:7e:
         f1:fe:fe:ae:c5:d4:e0:93:fa:ce:be:88:d3:70:40:47:b5:ca:
         1b:fc:a9:a6:72:c3:26:0d:53:5f:5f:c2:19:3f:c5:46:0e:0f:
         f3:41:fd:55:0f:cf:a1:be:f8:b2:24:68:af:f6:85:8b:38:cf:
         6a:06:b5:b8:4a:62:ba:5c:6f:a0:71:a9:eb:75:3c:a0:cf:1a:
         dd:d0:33:22:f9:17:39:53:3b:68:40:73:41:07:fa:29:9f:65:
         a8:f1:f0:ae:ad:a9:3c:7d:f9:d6:87:d8:be:c2:46:7c:d0:4e:
         79:e1:66:68:20:bc:db:c5:56:88:16:c5:4f:b2:8e:11:d9:31:
         3e:60:e4:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:16 2024 by rpki-client on console.sobornost.net