Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c6e3b4db7692f8a4c84190a908ad0f54daa3721e.cer
File:                     c6e3b4db7692f8a4c84190a908ad0f54daa3721e.cer (raw, json)
Hash identifier:          Tu7a5Rq2MOxhy3vTpSCElQr+MzBTzPe38jxODyHm/bk=
Subject key identifier:   3B:FF:23:E4:05:4E:7B:9A:4A:6B:35:1D:9D:00:EF:18:0C:62:F7:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E929F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/38b525ec-011e-405b-8b6f-bd5311b386dd/c6e3b4db7692f8a4c84190a908ad0f54daa3721e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/38b525ec-011e-405b-8b6f-bd5311b386dd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 12:52:40 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.10.207.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15280628 (0xe929f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 12:52:40 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=c6e3b4db7692f8a4c84190a908ad0f54daa3721e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:a4:49:b0:f0:34:91:21:23:b3:ca:83:cb:9b:
                    79:c0:2b:fb:0a:ca:00:91:10:b9:96:49:b1:71:3c:
                    56:2c:ce:88:0c:bc:54:85:e2:9d:05:04:64:e4:fd:
                    d7:c7:b5:c1:f7:d7:4e:72:33:07:64:95:29:33:2f:
                    1a:2d:ba:af:80:83:df:da:a0:d2:8d:92:47:3b:7d:
                    aa:3d:c0:16:ec:ae:7b:9b:62:64:97:22:5c:1d:35:
                    0e:2b:40:c5:cc:87:32:96:9f:52:1c:d6:b4:31:b8:
                    cf:86:15:30:f6:05:63:40:8b:78:77:60:93:a6:7e:
                    ea:37:cb:da:b1:a9:79:55:2a:2e:a4:c2:09:3f:fa:
                    a5:a0:72:b1:93:8b:0c:58:59:07:38:2b:65:88:46:
                    f8:be:13:c1:7a:ad:46:42:a2:39:34:72:65:3c:2a:
                    ed:31:92:e9:22:e6:79:f7:01:52:d2:37:86:47:c7:
                    69:f6:51:f8:a2:3c:0e:b6:0e:42:82:0f:0a:a9:93:
                    d0:bc:48:b5:79:8e:05:84:3d:c9:d4:70:24:f5:17:
                    c6:66:70:10:00:26:8f:6e:bd:4d:12:da:d3:88:65:
                    d5:0a:d3:1a:72:ae:21:2f:21:2b:d2:65:3f:36:d1:
                    45:99:cf:3c:12:06:24:cd:80:74:a2:31:c2:da:fd:
                    59:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:FF:23:E4:05:4E:7B:9A:4A:6B:35:1D:9D:00:EF:18:0C:62:F7:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/38b525ec-011e-405b-8b6f-bd5311b386dd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/38b525ec-011e-405b-8b6f-bd5311b386dd/c6e3b4db7692f8a4c84190a908ad0f54daa3721e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         1f:b2:27:bc:d7:97:09:8b:d3:49:67:43:25:6c:04:e4:b6:fe:
         e8:43:78:9a:68:00:7e:67:5c:25:38:6e:2f:6f:58:b1:a0:4a:
         e0:b3:33:7f:ba:85:7a:ca:05:55:81:e9:de:2a:c9:ce:9e:0b:
         92:91:17:79:e4:a6:23:42:88:49:bd:79:8b:d6:25:d6:72:ab:
         6b:31:17:86:d7:c1:c1:79:70:74:ff:4d:0a:30:a5:74:07:bd:
         a7:04:df:c2:c5:1c:07:0b:7f:66:72:77:d9:32:d5:a0:34:7d:
         03:e9:91:5f:73:f1:73:90:3a:b5:ae:de:9b:78:00:5e:a8:55:
         30:a1:65:68:25:b3:76:78:19:d8:61:9b:c6:f6:4b:82:ef:58:
         70:d7:c2:cc:99:78:ae:b8:61:2d:e6:11:b9:9a:d3:a6:23:0e:
         b8:11:0d:c3:16:ff:bf:30:3d:72:21:bd:4b:7a:77:e2:dd:8a:
         a1:49:d3:6c:33:f5:1d:fa:55:be:0f:10:3c:48:30:58:dc:be:
         24:72:35:43:b5:bf:fc:71:7b:59:4e:b0:18:5e:53:b0:37:18:
         96:cf:00:77:5c:c7:53:7b:51:60:6d:e0:39:46:a5:b9:df:99:
         cc:5a:0e:9e:10:1e:d1:28:f4:a5:fa:4c:d9:d9:43:ee:ec:2e:
         2e:6e:e2:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:29 2024 by rpki-client on console-ams.rpki-client.org