Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04bae866861241475560f00ddc7509d8d14b854d.cer
File:                     04bae866861241475560f00ddc7509d8d14b854d.cer (raw, json)
Hash identifier:          sDARxO6C+jQG83nMvOl6jwJhS9WKYduqecEsXEuLIAM=
Subject key identifier:   34:E5:05:36:0F:9A:7A:6A:7C:A5:66:52:AA:85:83:AD:3A:0D:37:F0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8A9AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/864d151a-2280-401d-be77-1bcfa78ab85f/04bae866861241475560f00ddc7509d8d14b854d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/864d151a-2280-401d-be77-1bcfa78ab85f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Sep 2023 15:42:58 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.0.169.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16296362 (0xf8a9aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  7 15:42:58 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=04bae866861241475560f00ddc7509d8d14b854d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:79:6e:45:69:0f:8e:14:f4:91:39:60:e8:37:
                    fe:99:f3:24:15:28:a8:36:b3:0a:9b:85:7f:09:58:
                    77:59:7a:62:78:6d:b3:c8:8c:66:a8:ac:db:54:e0:
                    78:f8:dc:e4:cd:07:16:bb:94:61:9b:ba:7a:0b:83:
                    42:23:31:ac:be:5b:0b:6b:2d:11:a3:90:5f:0c:92:
                    6f:68:64:24:04:ec:c7:26:5d:0e:ec:22:5e:64:99:
                    1a:8e:e5:15:5d:4a:54:4f:29:6f:65:74:2f:b0:54:
                    0b:d7:4e:d7:90:59:35:fa:9b:dd:17:30:3c:f9:3a:
                    75:40:35:c0:67:a3:72:4b:c0:6c:51:dc:6e:2d:aa:
                    a2:a5:58:23:0c:27:c6:f5:bb:df:b5:de:d4:00:8c:
                    a0:9c:20:a0:85:da:c3:06:d0:ba:09:d2:bf:38:c1:
                    fc:ba:41:03:6c:f1:04:fe:b1:c0:9e:ad:5a:3a:06:
                    55:8f:98:d5:99:68:8d:88:59:22:21:3d:be:25:f2:
                    f1:31:82:31:b2:6d:27:e0:42:49:84:62:9e:4e:c9:
                    0f:72:8e:2c:db:36:cf:71:d4:78:45:52:8d:96:45:
                    f8:e4:27:bc:ee:88:e3:ec:23:15:b9:17:06:f2:e6:
                    3c:8d:90:e5:29:bb:25:2d:75:f4:1a:3b:6f:f6:44:
                    20:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:E5:05:36:0F:9A:7A:6A:7C:A5:66:52:AA:85:83:AD:3A:0D:37:F0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/864d151a-2280-401d-be77-1bcfa78ab85f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/864d151a-2280-401d-be77-1bcfa78ab85f/04bae866861241475560f00ddc7509d8d14b854d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.169.0/24

    Signature Algorithm: sha256WithRSAEncryption
         7f:32:43:ad:43:56:48:2b:5d:d6:2f:44:4f:5f:85:94:d7:4d:
         d0:c8:db:a9:35:e6:6f:80:1d:61:ab:d4:2a:83:0d:2b:f5:22:
         42:2b:70:8a:ae:34:16:e9:1c:37:0f:81:02:ec:c7:4a:70:de:
         91:85:98:8f:ee:e4:81:c6:40:a8:d1:83:fe:66:ed:db:a8:4b:
         61:66:ce:d4:96:13:cd:ff:3a:4a:00:bd:27:bc:f6:6e:1f:36:
         cd:11:e5:02:ef:2a:98:0e:49:82:7f:29:d3:bd:b5:b7:2d:67:
         65:af:2f:90:08:08:37:d8:3d:72:ee:cb:43:8c:2b:80:9e:75:
         0a:b2:b3:76:ac:a4:f7:90:af:78:a6:90:d5:7f:87:ce:b6:26:
         77:39:5d:b4:51:cc:6d:04:f9:82:bd:6d:ac:ef:08:55:88:51:
         79:e5:fc:ed:b1:67:a9:be:65:d9:42:f4:91:c3:ec:7b:c6:23:
         7b:2d:00:53:83:16:15:c4:16:4c:fe:22:83:77:ed:7e:dd:41:
         5e:e3:8a:3d:f1:71:11:b7:1e:ea:05:c4:4e:d4:92:f5:5e:c6:
         4c:ea:2b:a8:71:a5:4e:19:b2:ad:35:9d:b1:f2:74:e1:b6:29:
         5f:dd:8d:25:63:77:a5:41:cc:f6:61:c3:27:cc:ea:84:bf:af:
         f8:98:02:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:31 2024 by rpki-client on console-fra.rpki-client.org