Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/06253a7b5ae04d12110888f3abf5a654a3022695.cer
File:                     06253a7b5ae04d12110888f3abf5a654a3022695.cer (raw, json)
Hash identifier:          OUVnbxG/AAnOFpBL0PPqOAINv7vizb57VyS/HscuIPA=
Subject key identifier:   7A:26:58:90:C4:C2:83:11:2B:BE:B2:D0:E9:B7:61:3B:7D:4B:A5:33
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F47D72
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/06253a7b5ae04d12110888f3abf5a654a3022695.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16022898 (0xf47d72)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=06253a7b5ae04d12110888f3abf5a654a3022695
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:fd:d3:82:1b:95:3b:c0:d8:a3:22:e7:b3:70:
                    49:85:b0:d6:0f:6f:8d:34:01:dc:9b:ae:01:e6:37:
                    8f:ed:14:0e:bb:4c:fe:ae:d8:f5:4a:5c:54:ed:39:
                    32:55:94:b1:25:ba:54:69:a2:58:ac:1d:ec:8b:da:
                    64:85:c1:73:6b:d6:0d:52:cc:c9:ee:a8:f4:e9:2c:
                    d9:fc:19:00:1e:ac:d9:9a:31:fe:8f:19:df:ec:20:
                    92:d1:8f:05:96:a4:88:72:d0:1f:e5:df:ac:d3:f4:
                    87:8a:29:f8:f1:2e:d5:18:38:1c:b9:97:3a:9c:19:
                    84:0d:e9:31:37:a4:79:57:54:cb:39:91:a0:a4:eb:
                    0f:43:f8:32:97:dd:6a:5d:c7:94:56:32:f1:5b:c7:
                    64:ab:73:ce:ab:c3:3d:f2:04:0e:88:42:ff:0f:e6:
                    49:e0:e8:64:0d:8b:bb:d9:25:ce:3a:99:e4:70:07:
                    05:9d:eb:6f:7e:b0:9c:8d:8a:d4:05:de:37:7b:63:
                    90:d5:12:0c:02:35:20:21:81:de:ae:4f:ff:d0:92:
                    84:bf:e0:2e:e8:9a:a1:d3:e2:ca:ad:d0:ac:f9:a9:
                    f0:7c:72:3f:a7:bf:27:51:42:55:4f:96:08:3a:da:
                    d5:26:af:dc:19:f5:eb:15:9e:a7:31:5d:c9:c3:88:
                    b7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:26:58:90:C4:C2:83:11:2B:BE:B2:D0:E9:B7:61:3B:7D:4B:A5:33
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/06253a7b5ae04d12110888f3abf5a654a3022695.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         3e:b2:6e:9a:8e:9d:08:ff:2b:ad:38:a3:82:17:f3:f6:07:6a:
         19:72:2c:cb:ea:a9:a8:cf:2b:96:0c:c5:e2:94:9e:cb:89:d8:
         72:bf:74:84:4c:11:44:7c:ee:24:4c:1f:77:6e:e0:0f:47:85:
         db:d0:ab:57:ef:bd:f1:39:0c:d0:35:45:66:c0:64:8c:fc:79:
         e7:18:49:f6:9a:24:8f:4a:50:f6:63:23:a6:8c:c2:7d:47:60:
         41:02:f1:a6:36:bd:48:dc:fc:f6:2d:94:f2:4b:83:49:2e:4c:
         b7:be:54:c9:62:05:da:d3:a6:39:44:1f:47:3b:fa:ee:29:41:
         0b:b2:f2:ec:bf:76:20:24:c0:90:ea:a8:a5:42:fb:1e:47:42:
         72:e5:47:f0:a6:48:ab:1e:a0:64:ed:4d:32:89:8e:6c:5a:08:
         0e:f8:b5:fc:7a:ed:45:fd:a8:ef:24:6e:08:90:ac:15:4a:60:
         df:f9:a0:7a:67:6f:9b:52:61:70:b1:47:d2:76:4f:31:77:6b:
         e9:23:b2:47:19:52:cb:b9:ae:c7:00:68:60:63:e8:3e:a7:0b:
         c8:35:7c:10:c0:1e:a5:85:b3:86:6a:c1:7e:86:8a:9b:24:63:
         3f:a8:79:d5:56:d0:3a:35:61:77:a1:a9:a8:32:16:c3:34:88:
         0c:c7:93:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:21 2024 by rpki-client on console-ams.rpki-client.org