Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer
File:                     0cf82f2746d0f60feb6900d06d01749fb9fd33bd.cer (raw, json)
Hash identifier:          +da8jxBW8UP4X4yGySnvgTdczBEgBgqTN+AgrpD+kiw=
Subject key identifier:   AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C20510
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 08 Mar 2022 14:38:48 +0000
Certificate not after:    Mon 18 Dec 2023 19:54:49 +0000
Subordinate resources:    IP: 181.174.228.0/22
                          IP: 2803:cb10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12715280 (0xc20510)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  8 14:38:48 2022 GMT
            Not After : Dec 18 19:54:49 2023 GMT
        Subject: CN=0cf82f2746d0f60feb6900d06d01749fb9fd33bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:02:13:bd:52:88:e1:6c:1e:a9:1c:a0:81:54:
                    53:96:c0:ac:17:df:16:d6:05:96:01:27:bf:48:38:
                    a3:aa:81:2f:f7:b4:ee:c6:d6:90:03:8f:20:3a:73:
                    8d:a4:38:bb:6d:e9:a4:d2:8a:d5:95:55:de:f8:3f:
                    2b:38:c8:3a:b7:b5:df:73:6a:86:d0:95:4b:0f:fc:
                    8a:1c:22:32:7e:35:47:fa:de:97:17:c3:eb:87:2e:
                    5f:74:d2:84:d5:07:51:06:dd:24:88:90:29:04:3b:
                    ca:c5:32:8c:a8:b9:cd:b1:1b:e0:40:99:2e:84:f7:
                    86:65:47:bb:97:fc:8b:9d:3d:66:48:e3:36:94:ae:
                    ed:94:68:82:71:9d:c0:a3:65:e2:a1:53:07:e6:88:
                    1c:be:cb:09:f7:e6:0d:d2:3b:3c:a8:ef:ae:17:e1:
                    b4:c4:90:26:57:f9:6d:3e:51:b7:6b:6c:b6:a8:8b:
                    38:ee:df:17:7b:14:f3:50:7d:3b:56:1f:23:21:89:
                    ef:56:31:0a:f4:aa:4d:c2:a4:f8:9f:31:d2:09:1a:
                    6e:f6:51:f8:52:7f:32:7a:bb:34:55:64:2d:11:5b:
                    d2:6a:f8:5e:5b:8b:f4:3b:75:ff:ab:ff:d4:34:6c:
                    6b:9e:d4:b9:3f:f1:60:0a:6c:a2:f8:39:c3:aa:22:
                    ce:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:4B:EF:3E:30:17:EC:38:0A:A7:15:00:B5:80:C3:3E:25:EF:76:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f5ad3132-065e-48da-bb1d-cb44d1facf8d/0cf82f2746d0f60feb6900d06d01749fb9fd33bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.174.228.0/22
                IPv6:
                  2803:cb10::/32

    Signature Algorithm: sha256WithRSAEncryption
         49:1a:28:e7:3e:4d:23:c0:58:ee:02:be:d9:30:31:a2:59:6b:
         ea:bc:37:c0:76:3b:c1:b8:94:63:ce:9f:a6:0d:f1:a0:8e:23:
         5e:44:0f:ee:c6:ba:8a:60:31:26:1c:81:4c:c9:dd:66:49:7b:
         9c:f2:51:ff:9d:62:b0:29:72:9e:91:65:2e:9b:b0:f6:cf:16:
         dd:a1:3a:7c:5d:4c:01:35:a6:3c:be:8f:49:68:01:32:6a:76:
         85:fc:10:c8:86:d3:f5:f8:22:98:79:ac:89:6a:1b:f5:29:87:
         e6:be:ec:de:9f:0f:89:3b:ae:e2:0b:b7:c7:27:30:3e:06:98:
         ce:aa:e0:5b:5a:a5:eb:92:74:ab:c4:d5:d8:16:c5:f8:1f:c3:
         f1:98:58:54:15:2c:4a:55:39:e3:60:c3:fa:67:96:49:1c:f0:
         66:0f:76:7b:10:e2:e6:b6:84:7d:eb:db:7d:21:3a:1c:98:18:
         98:f7:c0:4d:7f:e2:a1:5a:3b:59:b8:ac:e7:55:16:3f:d6:b5:
         ea:b4:86:b5:7a:3e:6d:e9:36:33:c2:11:46:79:5f:de:ad:3d:
         07:44:0f:a5:38:5f:d0:d0:b8:1b:3d:80:0a:9d:9d:fc:5c:e0:
         ad:c0:d2:1e:5a:c0:14:47:b5:eb:61:e6:0f:d6:a8:de:38:89:
         e6:ef:72:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org