Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8c9dca33c362bedd76cf28490675e1556f7d1835.cer
File:                     8c9dca33c362bedd76cf28490675e1556f7d1835.cer (raw, json)
Hash identifier:          hwJbrBIOGa/lsDD340HAJ7NAPtczSu5X4xzBXsQDf+M=
Subject key identifier:   0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01042E3B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Oct 2020 01:45:51 +0000
Certificate not after:    Fri 17 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 28110
                          AS: 28317
                          AS: 263796
                          AS: 265766
                          IP: 131.196.32.0/22
                          IP: 138.59.132.0/22
                          IP: 138.121.140.0/22
                          IP: 138.122.244.0/22
                          IP: 170.81.32.0/22
                          IP: 181.174.168.0/22
                          IP: 190.124.248.0/22
                          IP: 190.184.196.0/22
                          IP: 191.102.56.0/22
                          IP: 2800:c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17051195 (0x1042e3b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 21 01:45:51 2020 GMT
            Not After : Jan 17 05:00:00 2025 GMT
        Subject: CN=8c9dca33c362bedd76cf28490675e1556f7d1835
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:4a:14:5f:0f:8e:4f:a0:f0:45:4b:74:c9:30:
                    c8:28:42:bf:e4:f8:8e:ba:be:1b:32:ad:17:91:9b:
                    26:ad:f9:bf:6f:c6:15:a4:32:15:23:dc:52:d3:a1:
                    4f:d2:37:f7:72:07:22:22:76:2a:b6:b6:ee:f3:7b:
                    81:39:7f:ad:cb:3e:94:ab:47:4f:bb:f5:96:f2:53:
                    6d:0e:d1:de:54:88:db:64:11:e0:96:81:ec:08:d1:
                    05:85:57:a0:7e:ec:83:0f:dc:e9:73:c2:27:ac:48:
                    06:c5:c1:f7:60:81:d0:a3:74:c5:ba:83:c1:b1:a1:
                    bb:5d:f6:47:39:08:43:38:68:16:86:6c:e7:d1:cf:
                    5e:aa:ab:dd:bb:f1:44:1d:0a:a5:43:98:02:70:d5:
                    94:f4:44:98:2f:e7:30:1f:49:e8:8b:cf:af:be:aa:
                    4b:88:c1:bb:9d:e0:b8:c0:74:a8:34:4e:fb:cb:1b:
                    7a:3f:05:41:c9:65:91:57:9c:70:cb:d6:2f:79:cf:
                    95:e9:b2:1c:6c:29:8e:fe:56:f6:79:98:fe:38:1a:
                    db:45:f1:7d:d8:66:d6:11:7c:03:72:54:32:fa:23:
                    03:30:c5:e2:17:84:13:90:78:51:7b:ed:78:32:7f:
                    51:e6:02:b4:61:1f:28:a6:cb:d2:f6:b2:97:5c:06:
                    ec:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0B:65:D6:F1:39:62:7C:B5:85:61:74:05:E5:1A:BD:96:59:F4:DC:A8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b8e0bee-15bc-4aa3-8f6b-90f61035c414/8c9dca33c362bedd76cf28490675e1556f7d1835.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.196.32.0/22
                  138.59.132.0/22
                  138.121.140.0/22
                  138.122.244.0/22
                  170.81.32.0/22
                  181.174.168.0/22
                  190.124.248.0/22
                  190.184.196.0/22
                  191.102.56.0/22
                IPv6:
                  2800:c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28110
                  28317
                  263796
                  265766

    Signature Algorithm: sha256WithRSAEncryption
         42:de:65:6f:78:21:83:88:85:4a:a5:f3:85:b3:c7:5e:3d:c3:
         0e:c4:40:ab:39:0d:6e:6c:b8:ca:8f:d1:b8:55:ae:87:8a:45:
         ef:83:06:57:5c:8c:55:34:20:ef:a8:4c:c9:38:a4:47:9d:f2:
         52:d4:41:16:98:63:49:5b:ca:04:80:f9:18:cc:c4:2b:e1:f1:
         aa:7a:07:1a:83:51:06:3a:d5:d1:19:70:97:e6:70:d0:2a:58:
         e1:53:5c:cd:38:f3:24:44:98:52:03:0f:53:9d:23:d0:98:04:
         35:bc:49:52:4e:44:11:cc:c9:45:8d:61:4e:6d:ff:38:c5:fa:
         0d:17:91:77:f2:8f:d0:af:92:83:38:85:ee:6b:d9:a6:43:14:
         0f:7f:7b:6f:29:9c:f0:53:a1:a2:bf:d8:89:48:4c:7f:50:86:
         aa:b9:97:75:b0:3f:cc:63:30:52:95:5d:81:40:1b:6b:4d:8e:
         b1:00:57:0c:08:9d:15:a7:69:29:b6:55:3d:7b:30:25:84:8b:
         aa:4e:62:a5:28:db:fd:14:c5:30:af:6c:48:23:56:59:19:fe:
         8d:43:c3:f6:60:69:a0:fc:0e:42:6a:8b:d4:8d:86:98:d5:d9:
         fc:ef:d3:f2:93:1f:53:0f:5f:f6:9a:11:53:55:73:56:6a:18:
         82:93:13:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:17 2024 by rpki-client on console.sobornost.net