Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/04cf48c50f2aff50085182e0b99155d76a37887f.cer
File:                     04cf48c50f2aff50085182e0b99155d76a37887f.cer (raw, json)
Hash identifier:          M6NUSL5tI8FFdVi4o7OqhaBxTBCUcs85XNfxnND55e4=
Subject key identifier:   D0:5A:DA:6E:39:0E:2F:9B:BE:91:9B:98:35:FE:1A:DC:89:E0:DF:04
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F72067
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/30722e4a-376c-4013-a5ea-6102ba18a924/04cf48c50f2aff50085182e0b99155d76a37887f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/30722e4a-376c-4013-a5ea-6102ba18a924/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 15:59:11 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.160.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16195687 (0xf72067)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 15:59:11 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=04cf48c50f2aff50085182e0b99155d76a37887f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:9d:31:d7:5d:d3:21:9c:91:1e:90:66:29:0b:
                    09:ba:98:da:95:a4:fc:e6:50:ab:5a:27:0e:34:d6:
                    bc:68:31:2a:82:d6:f7:80:5c:bf:77:96:cf:b9:f7:
                    5e:8f:e7:70:a4:bb:aa:26:7d:94:e2:1f:29:2c:be:
                    62:19:0a:61:95:f1:9d:20:86:94:ff:25:03:5f:15:
                    4a:52:98:a9:dd:17:8f:f0:7f:b4:0c:31:db:81:5f:
                    6f:f1:00:0a:f0:79:89:b1:35:6f:f5:f5:d7:55:68:
                    b4:61:66:f6:45:b3:48:41:e8:97:6b:32:4a:a1:e9:
                    08:18:83:4c:ce:e9:ed:54:e2:bb:f5:4b:84:63:51:
                    fe:87:48:17:9d:bf:8a:9d:d0:91:98:19:24:e1:6d:
                    06:32:a6:99:fd:91:6f:cd:6b:d4:63:c6:b0:81:7d:
                    74:7b:b6:bf:85:38:b4:ad:05:ef:0b:78:e6:ab:4a:
                    6f:49:f5:8b:9b:5d:4b:1d:7d:5b:1e:f2:c5:8d:41:
                    77:0b:0d:48:e8:a7:33:1f:5e:e3:b4:11:f1:e0:39:
                    06:58:74:2b:c6:5e:84:48:59:16:4c:db:ed:e0:e7:
                    ca:6d:0b:66:09:11:cb:3a:4b:10:f7:e3:36:c8:0f:
                    da:89:f7:20:b1:e5:01:46:32:d4:83:ce:62:e2:3e:
                    8f:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:5A:DA:6E:39:0E:2F:9B:BE:91:9B:98:35:FE:1A:DC:89:E0:DF:04
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/30722e4a-376c-4013-a5ea-6102ba18a924/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/30722e4a-376c-4013-a5ea-6102ba18a924/04cf48c50f2aff50085182e0b99155d76a37887f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.160.0/24

    Signature Algorithm: sha256WithRSAEncryption
         3d:36:d1:b9:0e:5d:27:b4:7c:e2:0b:30:a1:88:dc:48:fe:86:
         cd:e4:bf:2c:02:cb:29:f2:27:5e:ca:bd:27:3c:9f:09:88:66:
         df:93:07:a9:01:7e:5a:b6:ff:23:ad:fc:64:1b:b6:a4:38:65:
         b6:3a:b8:6b:05:b4:9f:14:75:6c:f1:94:24:2e:39:76:40:77:
         32:7d:4f:99:c4:09:60:23:fd:08:d9:b4:f8:bc:6e:b1:94:40:
         5b:13:c5:36:46:29:5a:da:3c:eb:a8:dd:11:3f:be:bf:d5:cf:
         5b:f2:6e:d3:f8:93:e7:1a:9b:63:35:3f:34:b1:22:0c:5b:db:
         63:86:a8:a7:14:d5:17:16:f2:a3:47:e0:92:e3:96:7a:bd:47:
         ca:58:2d:93:f1:bd:83:e6:08:ef:fb:7d:49:49:eb:55:39:51:
         ee:f7:64:91:8d:6e:d6:72:a2:38:e3:a8:a6:a9:ff:87:e9:7b:
         a2:67:42:71:cf:e2:26:53:de:c5:24:1f:c7:84:c7:78:53:83:
         08:0d:f3:0b:30:a2:20:e3:72:f7:65:7c:39:9b:af:e6:43:55:
         f3:ba:53:2c:a8:e9:19:8b:76:4a:10:f2:5d:ba:0a:ad:c8:54:
         e5:9c:c7:92:59:87:c8:b6:91:18:28:32:89:24:d4:35:bc:bb:
         ba:9b:70:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org