Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdaa0d4204bc0a2fa491ad0ecb0e5df952102819.cer
File:                     fdaa0d4204bc0a2fa491ad0ecb0e5df952102819.cer (raw, json)
Hash identifier:          kTuefzY0IK6XtUKLACRnaJVo2O8UbNlr6STSujTmVHA=
Subject key identifier:   92:CC:DC:29:48:1D:93:EF:C6:BF:A4:45:00:BB:65:56:B1:2A:15:C3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01028A0B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/fdaa0d4204bc0a2fa491ad0ecb0e5df952102819.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 14 Nov 2023 20:40:05 +0000
Certificate not after:    Sun 14 Sep 2025 16:22:24 +0000
Subordinate resources:    IP: 2801:17:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16943627 (0x1028a0b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 14 20:40:05 2023 GMT
            Not After : Sep 14 16:22:24 2025 GMT
        Subject: CN=fdaa0d4204bc0a2fa491ad0ecb0e5df952102819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:89:94:15:eb:15:74:5d:2a:9f:9d:55:16:7f:
                    f6:59:3b:09:4b:a5:9c:7c:2e:bc:33:01:54:e1:53:
                    18:b6:00:aa:43:20:12:53:df:a4:23:46:08:ee:9f:
                    08:57:ef:92:1f:34:42:40:0b:58:44:57:58:f4:cc:
                    6e:99:fa:10:74:62:5f:60:0b:19:ac:30:4c:8e:17:
                    b9:dc:d2:42:58:7c:d5:90:1e:2d:fe:27:63:f4:27:
                    1e:12:59:fb:72:f2:9d:85:5f:a0:fa:ad:39:89:df:
                    db:41:0c:55:2c:71:8a:27:58:0c:45:36:ce:c4:73:
                    d5:b9:e3:96:b7:a2:57:9e:25:a1:25:66:1a:1e:11:
                    24:c2:ce:3d:36:dd:d7:e3:d6:e2:1a:32:b5:fd:07:
                    73:3e:f6:0e:d8:12:d4:9f:3f:ba:39:47:17:26:8c:
                    2b:ab:52:27:bc:62:7f:5f:6b:90:2c:32:d4:0b:8b:
                    d8:4d:bc:c0:a0:8b:30:3e:c5:8f:d3:13:4c:37:c1:
                    db:a4:f1:e8:80:37:fb:2c:9a:68:79:7d:c6:da:d5:
                    67:f8:8d:51:10:d5:be:fd:e6:00:b2:52:7e:fd:02:
                    74:28:c8:34:db:fd:d6:ec:fa:b0:75:aa:6d:01:63:
                    5d:a1:28:bd:3a:5e:50:bb:9f:c8:cc:18:fa:72:a0:
                    2d:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:CC:DC:29:48:1D:93:EF:C6:BF:A4:45:00:BB:65:56:B1:2A:15:C3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7448de20-fdc2-42c4-9760-ec96095f7af8/fdaa0d4204bc0a2fa491ad0ecb0e5df952102819.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:17:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:4c:29:f0:44:52:e0:96:ce:f3:4b:92:c2:7e:14:40:d7:08:
         0e:3a:23:85:98:ce:77:f9:8f:5d:fa:d9:e3:50:9e:0a:a9:9c:
         21:5f:30:c5:93:2f:a0:eb:3a:4b:71:20:ce:c3:35:b8:d5:db:
         bb:f2:de:04:58:23:1e:98:80:9c:48:04:ad:79:43:c2:66:cd:
         d4:d7:3b:6d:4e:46:af:5d:54:7c:69:24:35:21:62:03:5a:f2:
         17:bc:a1:5e:d1:ee:f1:bf:ea:38:29:6f:62:88:28:5f:56:86:
         41:16:74:73:72:63:d0:7d:a3:cd:45:56:69:55:49:2a:96:93:
         63:1c:03:eb:72:3f:6b:d5:15:04:98:fe:b6:e4:11:71:9d:47:
         36:39:4b:06:da:bf:8c:c4:d0:5d:ab:9d:f2:aa:a3:cf:69:fa:
         af:ba:be:05:e7:c1:4f:72:5c:ed:20:d5:bc:0d:00:dc:a7:df:
         5c:ac:b7:bc:5f:88:dd:18:8b:92:5b:4c:cd:86:60:98:d3:85:
         59:4b:08:ad:9e:31:c2:96:76:5a:a8:d6:79:52:d7:6c:45:ab:
         e4:4e:cc:34:13:bc:a0:5d:7d:44:5e:70:9b:36:3c:8b:af:3b:
         e5:7c:71:ee:98:23:5c:9c:ed:cf:2a:d7:4e:53:36:e1:17:ee:
         81:e9:7e:d8
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAQKKCzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTExNDIwNDAwNVoXDTI1MDkxNDE2MjIy
NFowMzExMC8GA1UEAxMoZmRhYTBkNDIwNGJjMGEyZmE0OTFhZDBlY2IwZTVkZjk1
MjEwMjgxOTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALKJlBXrFXRd
Kp+dVRZ/9lk7CUulnHwuvDMBVOFTGLYAqkMgElPfpCNGCO6fCFfvkh80QkALWERX
WPTMbpn6EHRiX2ALGawwTI4XudzSQlh81ZAeLf4nY/QnHhJZ+3LynYVfoPqtOYnf
20EMVSxxiidYDEU2zsRz1bnjlreiV54loSVmGh4RJMLOPTbd1+PW4hoytf0Hcz72
DtgS1J8/ujlHFyaMK6tSJ7xif19rkCwy1AuL2E28wKCLMD7Fj9MTTDfB26Tx6IA3
+yyaaHl9xtrVZ/iNURDVvv3mALJSfv0CdCjINNv91uz6sHWqbQFjXaEovTpeULuf
yMwY+nKgLW0CAwEAAaOCAuEwggLdMB0GA1UdDgQWBBSSzNwpSB2T78a/pEUAu2VW
sSoVwzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83NDQ4ZGUyMC1mZGMy
LTQyYzQtOTc2MC1lYzk2MDk1ZjdhZjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzQ0OGRlMjAtZmRjMi00
MmM0LTk3NjAtZWM5NjA5NWY3YWY4L2ZkYWEwZDQyMDRiYzBhMmZhNDkxYWQwZWNi
MGU1ZGY5NTIxMDI4MTkubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABe4ADANBgkqhkiG9w0BAQsF
AAOCAQEAw0wp8ERS4JbO80uSwn4UQNcIDjojhZjOd/mPXfrZ41CeCqmcIV8wxZMv
oOs6S3EgzsM1uNXbu/LeBFgjHpiAnEgErXlDwmbN1Nc7bU5Gr11UfGkkNSFiA1ry
F7yhXtHu8b/qOClvYogoX1aGQRZ0c3Jj0H2jzUVWaVVJKpaTYxwD63I/a9UVBJj+
tuQRcZ1HNjlLBtq/jMTQXaud8qqjz2n6r7q+BefBT3Jc7SDVvA0A3KffXKy3vF+I
3RiLkltMzYZgmNOFWUsIrZ4xwpZ2WqjWeVLXbEWr5E7MNBO8oF19RF5wmzY8i687
5Xxx7pgjXJztzyrXTlM24Rfugel+2A==
-----END CERTIFICATE-----