Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2.cer
File:                     0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2.cer (raw, json)
Hash identifier:          3EmweN0fFLWIsqaOAxO3lVqo5tHyUCm9e4RUUZExyGE=
Subject key identifier:   23:0C:88:03:8A:F4:DE:38:2C:6C:59:D6:5B:FE:FF:E0:74:3D:73:8C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBD0FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2af7cee6-f2a7-4137-8cf1-f51c58e4d7d6/0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2af7cee6-f2a7-4137-8cf1-f51c58e4d7d6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 30 Jun 2021 17:44:21 +0000
Certificate not after:    Sun 03 Nov 2024 16:22:21 +0000
Subordinate resources:    AS: 52449
                          IP: 138.97.156.0/22
                          IP: 167.249.200.0/22
                          IP: 168.195.76.0/22
                          IP: 170.247.220.0/22
                          IP: 181.177.64.0/18
                          IP: 2803:3d00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16503034 (0xfbd0fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 30 17:44:21 2021 GMT
            Not After : Nov  3 16:22:21 2024 GMT
        Subject: CN=0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:26:9e:59:1a:b3:f7:01:8f:1a:22:c0:1f:21:
                    8d:ff:90:f7:37:bf:09:12:9e:22:cd:47:09:dd:80:
                    45:f5:b9:e2:da:bb:d9:6a:f7:88:82:cd:e0:38:c5:
                    b4:e6:af:bc:9a:b2:3a:73:b1:aa:68:45:ad:a4:d8:
                    85:f2:2b:fe:96:3f:45:12:18:5d:fe:95:a2:36:ef:
                    78:71:0b:80:24:00:81:e5:75:19:ea:f1:eb:f5:3a:
                    5f:a4:76:73:94:ae:67:f7:5e:10:66:82:27:e0:b7:
                    33:f2:af:9a:6c:33:95:45:55:e3:cf:b5:2f:a7:53:
                    41:99:01:7b:be:e7:80:b1:32:e1:11:5e:52:72:03:
                    72:d9:ff:41:e6:1e:9f:d9:78:56:2a:60:55:b6:b9:
                    5a:8d:b3:cb:be:39:93:c8:5b:90:b8:04:b3:e6:68:
                    7f:a8:af:0d:9d:14:bd:20:b6:e3:af:2c:77:90:c5:
                    b6:36:35:b0:04:e5:35:fb:6c:5e:86:65:94:1f:df:
                    7a:fe:32:7f:f0:1d:9e:ca:b3:7d:be:67:d6:c6:cd:
                    aa:32:90:de:4e:61:1f:bb:c4:48:58:b8:81:59:36:
                    b9:b1:70:3b:c3:14:c1:6f:1a:88:4d:35:15:93:d1:
                    0b:52:ea:6d:ce:77:64:69:d8:06:d5:29:af:c2:65:
                    7d:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:0C:88:03:8A:F4:DE:38:2C:6C:59:D6:5B:FE:FF:E0:74:3D:73:8C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2af7cee6-f2a7-4137-8cf1-f51c58e4d7d6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2af7cee6-f2a7-4137-8cf1-f51c58e4d7d6/0d3fd40f1570dd6e7ef4b855d45ec68703ec8cb2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.156.0/22
                  167.249.200.0/22
                  168.195.76.0/22
                  170.247.220.0/22
                  181.177.64.0/18
                IPv6:
                  2803:3d00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52449

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:d3:24:e2:5a:07:81:62:1d:7f:a9:64:76:9a:cd:06:a4:
         30:3a:a3:f6:f1:ab:14:8a:5a:09:ad:7f:ae:4f:1d:f3:4b:b1:
         54:7b:ac:13:1a:c8:c5:d7:a3:28:7a:eb:62:c2:a2:9f:12:fe:
         3e:27:72:36:86:0f:26:41:b7:dd:00:77:84:b9:98:3f:a0:26:
         10:0f:db:f4:a1:82:d0:21:0f:96:f5:28:a3:1a:44:e0:e4:c5:
         d5:22:d8:b6:7e:a6:31:e2:b7:d1:f7:12:05:c0:04:11:29:2b:
         03:03:da:d5:b6:4e:35:88:f9:60:14:71:05:ec:4c:c8:1c:6a:
         18:9f:25:d5:24:73:f3:20:b0:aa:17:49:b8:da:67:86:de:4b:
         06:7d:68:ec:ed:58:ad:c7:21:f2:23:45:88:6d:8d:d0:4c:87:
         c2:4d:4a:d5:32:53:88:ca:81:2f:1e:aa:6c:c7:a2:39:70:8b:
         a7:14:57:b5:ec:d2:6f:44:07:08:6e:c0:be:85:d5:99:21:42:
         d9:3e:7e:e6:51:ac:0d:be:1d:1e:cb:38:cf:a9:b3:5f:2a:d6:
         42:86:ad:aa:42:1b:e1:9d:ef:d4:c1:e7:fb:75:2b:af:2b:43:
         35:74:04:02:98:18:c3:5b:9d:c5:30:8c:2f:cd:02:80:68:c8:
         4e:68:44:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org