Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b69e69ceb1f6f6fcb96144250ab30c947457b4e.cer
File:                     0b69e69ceb1f6f6fcb96144250ab30c947457b4e.cer (raw, json)
Hash identifier:          v4+3yFZhSJt+d76XkHptd4MAo+54YG04j76E2uvGGNc=
Subject key identifier:   2A:7F:33:35:EF:DA:0E:3D:94:E2:A9:59:ED:27:4C:A3:42:86:49:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010514BF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6b52de2b-da3e-4e66-a04c-4b900984e7f0/0b69e69ceb1f6f6fcb96144250ab30c947457b4e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6b52de2b-da3e-4e66-a04c-4b900984e7f0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Dec 2023 12:45:32 +0000
Certificate not after:    Wed 27 Aug 2025 06:00:00 +0000
Subordinate resources:    IP: 2801:1c:9000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17110207 (0x10514bf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 27 12:45:32 2023 GMT
            Not After : Aug 27 06:00:00 2025 GMT
        Subject: CN=0b69e69ceb1f6f6fcb96144250ab30c947457b4e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:df:0f:7a:10:6c:3e:70:f3:72:89:41:3e:eb:
                    b3:fb:e9:fc:54:57:3a:41:de:c9:a4:36:cd:a2:6f:
                    d6:f5:03:1b:0f:ed:82:7f:1f:47:3d:c2:82:62:f3:
                    d0:23:6b:32:02:d6:0a:7e:4c:24:94:66:07:c2:39:
                    a8:4b:bc:a2:d9:a6:13:75:86:c1:5e:f5:9f:11:a4:
                    f4:a6:7a:a8:6c:97:42:4a:cb:1f:c2:03:46:45:94:
                    46:35:5e:05:73:31:6d:2b:43:2c:e8:93:ab:e2:12:
                    90:0c:5b:ce:28:b4:98:95:12:f0:3f:0f:98:a6:bb:
                    d2:c2:01:b4:1a:05:3d:af:83:10:ff:ba:6f:9a:0c:
                    6d:6c:fb:ac:27:a3:55:54:25:82:7c:ad:99:41:e4:
                    e0:52:89:3f:c0:1b:a5:a0:d9:82:58:74:82:93:25:
                    60:5e:70:1c:1e:d2:c1:28:72:d7:0d:01:9f:c0:64:
                    73:b9:48:a5:bd:fc:ae:db:bf:82:5e:6c:d0:21:29:
                    1b:7c:19:4b:e6:4d:71:41:43:42:87:9a:10:c7:6e:
                    20:8f:ea:a0:81:35:1a:7c:8c:8c:c2:3c:de:86:f5:
                    44:e0:d7:8c:f6:3d:13:ee:e0:9d:c4:92:99:18:a9:
                    a1:d4:0f:9b:66:5a:45:d3:cd:37:87:63:2e:21:d9:
                    b6:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:7F:33:35:EF:DA:0E:3D:94:E2:A9:59:ED:27:4C:A3:42:86:49:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6b52de2b-da3e-4e66-a04c-4b900984e7f0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6b52de2b-da3e-4e66-a04c-4b900984e7f0/0b69e69ceb1f6f6fcb96144250ab30c947457b4e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         6a:21:0b:a0:f7:1f:1b:b9:d8:12:aa:3d:7b:98:54:9d:4a:b7:
         61:c1:b1:68:5f:52:39:0d:14:33:54:83:96:e2:63:db:7f:da:
         0f:0d:ba:b0:df:fc:fe:01:08:cb:e0:72:1f:dc:a3:28:b6:6b:
         9c:8c:23:bb:3b:eb:db:6b:60:49:5b:e5:fc:fb:5a:82:b1:fa:
         2a:27:42:96:f0:77:a9:c0:eb:5b:5d:2e:37:a7:e8:fa:eb:53:
         3e:03:65:51:d8:85:75:23:46:e6:bf:47:f6:bd:a5:1c:79:d9:
         bb:b1:42:02:8b:88:12:a5:4b:7a:98:e8:17:bf:5f:d8:c9:2a:
         07:31:97:d7:d0:cf:de:00:63:13:66:52:4f:bb:00:35:38:28:
         8d:2b:4d:42:75:cd:82:85:15:d8:9f:bf:94:57:25:20:6f:c8:
         2e:62:e6:53:45:bf:55:cf:f0:44:73:dc:18:07:e6:7c:73:10:
         30:55:43:0f:bb:04:fb:d1:1d:19:d6:0c:93:73:41:2c:2b:3a:
         54:e6:10:19:79:60:90:7c:a4:eb:db:55:9b:b2:c2:7b:1b:89:
         c2:63:e7:91:eb:4f:c8:d9:b9:3b:c0:c7:b4:95:e7:f6:8d:58:
         b5:a7:df:06:71:c1:8c:df:52:1d:36:33:94:ee:76:2e:34:c5:
         3d:e9:3e:c6
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAQUUvzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMTIyNzEyNDUzMloXDTI1MDgyNzA2MDAw
MFowMzExMC8GA1UEAxMoMGI2OWU2OWNlYjFmNmY2ZmNiOTYxNDQyNTBhYjMwYzk0
NzQ1N2I0ZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIzfD3oQbD5w
83KJQT7rs/vp/FRXOkHeyaQ2zaJv1vUDGw/tgn8fRz3CgmLz0CNrMgLWCn5MJJRm
B8I5qEu8otmmE3WGwV71nxGk9KZ6qGyXQkrLH8IDRkWURjVeBXMxbStDLOiTq+IS
kAxbzii0mJUS8D8PmKa70sIBtBoFPa+DEP+6b5oMbWz7rCejVVQlgnytmUHk4FKJ
P8AbpaDZglh0gpMlYF5wHB7SwShy1w0Bn8Bkc7lIpb38rtu/gl5s0CEpG3wZS+ZN
cUFDQoeaEMduII/qoIE1GnyMjMI83ob1RODXjPY9E+7gncSSmRipodQPm2ZaRdPN
N4djLiHZttMCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQqfzM179oOPZTiqVntJ0yj
QoZJsDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82YjUyZGUyYi1kYTNl
LTRlNjYtYTA0Yy00YjkwMDk4NGU3ZjAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNmI1MmRlMmItZGEzZS00
ZTY2LWEwNGMtNGI5MDA5ODRlN2YwLzBiNjllNjljZWIxZjZmNmZjYjk2MTQ0MjUw
YWIzMGM5NDc0NTdiNGUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBAByQADANBgkqhkiG9w0BAQsF
AAOCAQEAaiELoPcfG7nYEqo9e5hUnUq3YcGxaF9SOQ0UM1SDluJj23/aDw26sN/8
/gEIy+ByH9yjKLZrnIwjuzvr22tgSVvl/PtagrH6KidClvB3qcDrW10uN6fo+utT
PgNlUdiFdSNG5r9H9r2lHHnZu7FCAouIEqVLepjoF79f2MkqBzGX19DP3gBjE2ZS
T7sANTgojStNQnXNgoUV2J+/lFclIG/ILmLmU0W/Vc/wRHPcGAfmfHMQMFVDD7sE
+9EdGdYMk3NBLCs6VOYQGXlgkHyk69tVm7LCexuJwmPnketPyNm5O8DHtJXn9o1Y
taffBnHBjN9SHTYzlO52LjTFPek+xg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org