Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04b3dbee60e37b0042239871ac1becd14c99b374.cer
File:                     04b3dbee60e37b0042239871ac1becd14c99b374.cer (raw, json)
Hash identifier:          Y2DJknhbYJypZdviD2VG7gHzPX6Kixaw1bcjGv1yH5w=
Subject key identifier:   A2:D3:CA:FB:BA:EA:5E:4B:C6:01:AF:41:D5:8D:FE:E1:6B:D0:04:9C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA1613
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/078ca69a-b379-4a74-8f36-9777547424d0/04b3dbee60e37b0042239871ac1becd14c99b374.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/078ca69a-b379-4a74-8f36-9777547424d0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Sep 2023 13:15:16 +0000
Certificate not after:    Sat 05 Jul 2025 15:00:00 +0000
Subordinate resources:    AS: 22313
                          IP: 190.103.32.0/19
                          IP: 190.123.160.0/19
                          IP: 200.35.192.0/18
                          IP: 2803:b400::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16389651 (0xfa1613)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 19 13:15:16 2023 GMT
            Not After : Jul  5 15:00:00 2025 GMT
        Subject: CN=04b3dbee60e37b0042239871ac1becd14c99b374
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:bc:c1:4f:f6:48:17:af:9d:75:6e:ee:8a:12:
                    0c:80:08:d2:73:81:38:0c:70:2c:8c:29:f6:09:9d:
                    88:b2:8a:d1:19:2d:68:1e:8f:81:44:32:99:18:05:
                    b6:54:e9:37:c2:2a:03:48:b8:e0:35:90:10:51:55:
                    08:fc:30:7c:95:a5:84:15:b8:e0:22:f3:d7:1d:dc:
                    37:84:e8:be:5f:45:1f:fb:d1:a5:23:0e:47:7e:1b:
                    70:8b:e7:1c:b6:d8:cc:90:2c:b6:cb:8c:84:44:a9:
                    59:ce:4c:a2:11:07:ed:c6:01:f8:2b:61:6c:8f:7e:
                    51:6c:bc:99:94:0a:a2:97:99:48:8a:50:62:2e:fc:
                    f2:fd:81:e0:37:6e:5c:b0:df:9e:1c:69:76:a3:f9:
                    58:0f:95:e1:59:69:21:09:25:1e:39:2a:f2:67:ea:
                    c5:a0:e9:1b:e6:72:10:97:94:af:be:34:70:e1:d4:
                    31:1a:12:49:1e:1f:a1:95:d8:aa:02:c3:d4:26:5d:
                    02:93:ce:f2:44:00:31:ef:be:00:e1:df:4f:a3:75:
                    8f:1a:16:32:e9:8c:f9:47:44:c5:0d:dc:e0:e5:5a:
                    b4:7f:8d:71:cf:ec:47:8f:c4:32:4b:3f:2e:f9:d8:
                    9d:56:42:c4:5d:95:79:93:88:07:ad:0f:ed:78:1b:
                    b7:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:D3:CA:FB:BA:EA:5E:4B:C6:01:AF:41:D5:8D:FE:E1:6B:D0:04:9C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/078ca69a-b379-4a74-8f36-9777547424d0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/078ca69a-b379-4a74-8f36-9777547424d0/04b3dbee60e37b0042239871ac1becd14c99b374.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.103.32.0/19
                  190.123.160.0/19
                  200.35.192.0/18
                IPv6:
                  2803:b400::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  22313

    Signature Algorithm: sha256WithRSAEncryption
         97:6d:ec:92:70:33:43:cc:e5:27:03:d8:5a:a4:3e:bc:1e:f3:
         b1:66:f3:2c:fa:e9:06:61:00:4e:96:4b:da:41:cf:33:c6:cc:
         c8:00:de:90:22:6d:5c:e7:d1:03:0f:66:af:54:e2:fa:39:4f:
         81:27:77:96:64:91:ab:9f:c3:db:07:bb:97:06:ce:12:07:eb:
         6e:89:67:f2:be:2d:f4:73:b4:60:a0:f9:21:40:d8:b2:58:ad:
         ad:a3:62:be:de:8a:52:b0:ac:b6:49:a7:f2:42:db:c9:ad:31:
         ac:40:4d:20:24:03:34:e1:d5:44:73:ec:59:c1:a2:09:c7:10:
         1e:40:58:84:58:35:6e:b0:b5:4a:fc:97:1b:ba:0e:bd:07:5a:
         18:17:f4:a6:4e:15:33:30:02:d6:67:43:fe:f3:26:96:8b:ab:
         e4:7c:b3:54:46:d4:b6:17:01:18:14:66:49:b0:3e:a8:3a:3c:
         44:a7:84:83:20:fa:05:cf:8d:37:27:82:ef:be:d5:8e:7a:d1:
         0f:12:61:85:6f:4f:82:7c:d4:4a:fd:e9:68:e0:00:7b:bb:0c:
         42:46:25:a6:0d:31:21:4b:fb:2b:0a:f3:a8:a0:f0:fc:21:85:
         d3:72:a5:cc:e3:56:5c:45:63:e4:cd:7e:7d:b5:fc:19:cc:b5:
         ea:3e:ad:4c
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIEAPoWEzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDkxOTEzMTUxNloXDTI1MDcwNTE1MDAw
MFowMzExMC8GA1UEAxMoMDRiM2RiZWU2MGUzN2IwMDQyMjM5ODcxYWMxYmVjZDE0
Yzk5YjM3NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKe8wU/2SBev
nXVu7ooSDIAI0nOBOAxwLIwp9gmdiLKK0RktaB6PgUQymRgFtlTpN8IqA0i44DWQ
EFFVCPwwfJWlhBW44CLz1x3cN4Tovl9FH/vRpSMOR34bcIvnHLbYzJAstsuMhESp
Wc5MohEH7cYB+CthbI9+UWy8mZQKopeZSIpQYi788v2B4DduXLDfnhxpdqP5WA+V
4VlpIQklHjkq8mfqxaDpG+ZyEJeUr740cOHUMRoSSR4foZXYqgLD1CZdApPO8kQA
Me++AOHfT6N1jxoWMumM+UdExQ3c4OVatH+Ncc/sR4/EMks/LvnYnVZCxF2VeZOI
B60P7Xgbt+8CAwEAAaOCAxQwggMQMB0GA1UdDgQWBBSi08r7uupeS8YBr0HVjf7h
a9AEnDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wNzhjYTY5YS1iMzc5
LTRhNzQtOGYzNi05Nzc3NTQ3NDI0ZDAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDc4Y2E2OWEtYjM3OS00
YTc0LThmMzYtOTc3NzU0NzQyNGQwLzA0YjNkYmVlNjBlMzdiMDA0MjIzOTg3MWFj
MWJlY2QxNGM5OWIzNzQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEBb5nIAMEBb57oAMEBsgjwDANBAIA
AjAHAwUAKAO0ADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJXKTANBgkqhkiG9w0B
AQsFAAOCAQEAl23sknAzQ8zlJwPYWqQ+vB7zsWbzLPrpBmEATpZL2kHPM8bMyADe
kCJtXOfRAw9mr1Ti+jlPgSd3lmSRq5/D2we7lwbOEgfrboln8r4t9HO0YKD5IUDY
slitraNivt6KUrCstkmn8kLbya0xrEBNICQDNOHVRHPsWcGiCccQHkBYhFg1brC1
SvyXG7oOvQdaGBf0pk4VMzAC1mdD/vMmlour5HyzVEbUthcBGBRmSbA+qDo8RKeE
gyD6Bc+NNyeC777VjnrRDxJhhW9PgnzUSv3paOAAe7sMQkYlpg0xIUv7KwrzqKDw
/CGF03KlzONWXEVj5M1+fbX8Gcy16j6tTA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:21 2024 by rpki-client on console-ams.rpki-client.org