Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c2be57a8c0fd76452079fcf2d4dc569819c2ed31.cer
File:                     c2be57a8c0fd76452079fcf2d4dc569819c2ed31.cer (raw, json)
Hash identifier:          B5rIyQb1jdsD22vP3Q6H5syjk/I/8pXuRCNavwNnO+g=
Subject key identifier:   25:E8:84:D7:24:AC:85:71:45:FF:9F:71:0D:06:B9:ED:F5:8E:37:EC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFAE63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4042023c-6d97-47cf-8018-67c5d58add42/c2be57a8c0fd76452079fcf2d4dc569819c2ed31.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4042023c-6d97-47cf-8018-67c5d58add42/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:35 +0000
Certificate not after:    Sat 30 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 27665
                          IP: 131.100.160.0/22
                          IP: 138.59.24.0/22
                          IP: 143.0.172.0/22
                          IP: 161.0.224.0/19
                          IP: 181.188.0.0/17
                          IP: 190.6.224.0/20
                          IP: 190.83.128.0/17
                          IP: 190.213.0.0/16
                          IP: 200.1.104.0/21
                          IP: 2800:e00::/28

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16756323 (0xffae63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:35 2017 GMT
            Not After : Nov 30 14:00:00 2024 GMT
        Subject: CN=c2be57a8c0fd76452079fcf2d4dc569819c2ed31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:f0:00:18:0a:24:8e:86:55:39:e7:92:41:66:
                    78:40:b3:1d:ac:a0:9d:77:ea:ee:76:d6:ef:78:92:
                    94:4b:bf:95:2f:c7:8c:3b:3c:06:43:f9:2c:8a:6d:
                    ea:2a:a9:1f:1f:25:bc:7d:71:26:b1:1c:6d:14:de:
                    8f:5e:5a:cf:c0:5b:38:d6:45:98:4f:c6:62:39:e2:
                    bc:df:63:ac:a6:e2:4b:86:4e:df:45:93:38:a6:39:
                    58:49:ac:38:45:8a:12:f5:87:f3:82:3f:7b:c2:d1:
                    92:10:59:bb:f6:16:d4:fe:00:3f:f7:c5:79:2b:35:
                    26:e2:c2:b1:1e:a1:cb:86:33:16:a2:68:30:4e:67:
                    a5:07:9b:06:bc:7e:cd:2c:13:4c:82:8a:83:08:1b:
                    87:25:af:43:44:b5:9f:fe:ef:88:d3:77:c7:19:8b:
                    9b:81:3e:f6:56:fe:8d:d7:6a:2b:ad:ef:da:97:3a:
                    56:c3:c4:42:96:ad:f6:13:5f:0b:e2:b9:38:3e:d3:
                    b5:05:b1:23:ef:ac:dd:c1:03:20:a2:83:9c:59:eb:
                    ff:34:34:f6:24:14:09:8d:1e:09:79:04:e9:95:37:
                    a6:2b:05:c3:38:88:c2:fd:a6:c1:f1:0d:15:06:f1:
                    90:81:2c:f3:35:2e:78:8c:37:9a:f8:a3:01:96:6e:
                    2e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                25:E8:84:D7:24:AC:85:71:45:FF:9F:71:0D:06:B9:ED:F5:8E:37:EC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4042023c-6d97-47cf-8018-67c5d58add42/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4042023c-6d97-47cf-8018-67c5d58add42/c2be57a8c0fd76452079fcf2d4dc569819c2ed31.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.160.0/22
                  138.59.24.0/22
                  143.0.172.0/22
                  161.0.224.0/19
                  181.188.0.0/17
                  190.6.224.0/20
                  190.83.128.0/17
                  190.213.0.0/16
                  200.1.104.0/21
                IPv6:
                  2800:e00::/28

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27665

    Signature Algorithm: sha256WithRSAEncryption
         b7:fb:4c:4f:9a:ea:b3:f5:7c:e7:99:f1:c9:5b:6f:33:64:75:
         49:3c:6f:88:61:d6:57:eb:eb:1f:32:5c:3f:34:48:5a:ea:a5:
         88:ed:56:57:4d:b8:00:f9:0e:6b:01:27:a6:7f:d5:32:64:5d:
         95:d4:79:8f:4b:29:30:4a:87:78:6a:47:34:17:b1:f5:98:3c:
         39:7b:98:49:03:51:7f:79:71:74:1e:14:2a:dc:53:60:8c:83:
         43:cd:97:0f:53:99:91:08:e5:6f:cc:b9:9d:98:86:bf:5d:f9:
         8e:29:7f:fe:bb:7b:ca:6f:6c:3e:fa:bb:2a:9d:f6:ce:ad:61:
         65:b6:8d:16:a7:1e:5d:e2:be:8a:6f:da:79:48:8c:1f:0c:89:
         b4:31:c9:ce:69:1b:04:04:8b:80:b0:ed:01:e5:cb:ce:64:52:
         fb:d9:b7:e8:97:34:3e:b6:d8:e1:a0:cf:f8:5b:03:59:0a:ac:
         b7:86:19:38:f9:6b:24:9b:c7:1e:10:2d:13:fc:90:f1:5d:83:
         c2:23:a9:00:2c:9b:55:88:e2:55:fa:82:ce:e7:28:41:38:48:
         2e:6e:1a:7c:da:0e:99:46:b6:e3:23:7a:2d:2a:46:71:fb:69:
         05:fe:f1:53:88:cf:5c:dc:a0:75:cc:0f:4a:1c:56:f3:16:d7:
         89:85:32:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:19 2024 by rpki-client on console.sobornost.net