Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0980db64d3aa29b1d50e1e87f5788008443677bd.cer
File:                     0980db64d3aa29b1d50e1e87f5788008443677bd.cer (raw, json)
Hash identifier:          0I07+HgFbrrbOy9lenWKNYmJ9AyTbaAHYanBJdIIpF8=
Subject key identifier:   DA:E2:9A:93:B4:C7:3A:32:5E:40:CE:72:B1:C0:FC:75:83:1A:FD:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB7563
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a1bc43b0-bd5c-4506-bfa0-326fbc87d6aa/0980db64d3aa29b1d50e1e87f5788008443677bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a1bc43b0-bd5c-4506-bfa0-326fbc87d6aa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Dec 2022 18:58:38 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.0.185.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16479587 (0xfb7563)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 26 18:58:38 2022 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=0980db64d3aa29b1d50e1e87f5788008443677bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:46:9d:9f:71:e4:7c:e8:ad:a8:ba:ae:ff:64:
                    93:f5:ac:ad:4d:d1:9d:5f:40:54:f3:56:6b:25:8e:
                    a2:40:a5:af:9a:07:68:02:c7:43:b1:13:1a:21:33:
                    4d:2c:b6:71:d5:21:e4:e6:db:fa:b8:2a:eb:22:4c:
                    14:c2:1d:d1:26:fe:9f:a8:00:98:8a:50:ec:1f:d5:
                    03:49:34:0c:83:4d:8f:3b:d2:2e:ca:d0:b6:19:c5:
                    71:7f:fa:01:6d:72:52:f0:04:bf:d8:c6:68:5b:b5:
                    85:80:9c:e9:fe:cb:0b:9c:e1:b1:2f:45:50:d3:46:
                    f0:df:5d:90:e1:ca:8d:9e:16:bb:ee:ec:c3:4e:d7:
                    13:25:ef:95:50:5a:ea:ae:77:db:61:48:be:54:dc:
                    0b:2c:34:72:d2:c2:2d:e2:1c:78:f0:c4:ff:45:b1:
                    55:a6:a3:81:93:7a:af:be:9f:a1:91:c4:40:12:78:
                    0f:04:db:ac:bf:67:1a:16:bb:0c:69:0e:9e:d6:17:
                    2a:df:33:37:20:3d:7d:97:bf:c3:1b:c7:5e:91:de:
                    81:02:8d:95:bc:08:ef:4c:49:46:f6:20:85:93:b1:
                    6f:c0:f1:45:ec:b3:69:cd:3e:d1:8e:60:97:d8:9c:
                    86:30:9e:db:7f:b8:4b:b7:60:af:fe:7f:0f:71:9b:
                    d3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:E2:9A:93:B4:C7:3A:32:5E:40:CE:72:B1:C0:FC:75:83:1A:FD:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a1bc43b0-bd5c-4506-bfa0-326fbc87d6aa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a1bc43b0-bd5c-4506-bfa0-326fbc87d6aa/0980db64d3aa29b1d50e1e87f5788008443677bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.185.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a8:6e:69:9d:93:3f:e4:a2:ad:9d:d3:4f:06:92:3c:0f:2b:7e:
         9f:5e:14:d1:d4:fd:d1:4a:e0:3c:60:ee:24:d6:d1:ac:6d:ff:
         5f:1f:cc:ee:0a:1b:f7:19:01:2e:19:6d:37:56:08:dc:d6:84:
         c4:ab:9f:31:3f:c8:1a:ce:15:77:f2:86:1f:47:d7:65:05:25:
         ad:b8:12:b7:22:25:ef:2f:e0:3f:4b:8a:9c:f2:cf:ef:e7:f0:
         f0:af:14:68:63:ce:7b:c5:5e:2b:95:0a:03:df:e3:ee:df:68:
         31:73:35:01:de:73:d3:25:e1:c9:6c:ce:cb:14:e2:89:40:d9:
         85:42:28:9b:86:a5:e3:ee:39:a5:8b:3a:7b:0e:d4:8a:fc:60:
         21:07:41:db:51:d4:76:d4:72:58:e7:54:7a:e0:5e:92:42:73:
         72:bb:e5:37:38:ff:26:68:60:83:a0:e2:38:82:84:82:33:77:
         7e:c1:d6:c2:c2:51:5b:39:6e:92:0b:0a:74:01:7e:e7:8b:0e:
         0c:35:71:81:15:69:01:6c:bb:1c:56:b1:27:a7:6e:73:67:1c:
         d6:e8:a0:73:2c:f5:a6:0e:1e:a5:39:06:38:c3:48:3a:0b:b2:
         38:21:3d:81:5b:91:52:34:fa:4b:2b:99:d7:fe:f7:76:95:67:
         ae:a0:7d:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org