Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0ebc32ee0b6d9488db9e6cc679c96f373cb5ebe3.cer
File:                     0ebc32ee0b6d9488db9e6cc679c96f373cb5ebe3.cer (raw, json)
Hash identifier:          U5QMdt/oNBoup7pIfNvDeiMNT6EmR86ltRk2jV8O/QY=
Subject key identifier:   8A:D4:3A:72:6C:5F:B6:D8:D2:17:0F:B4:5A:68:62:02:32:D6:E7:EB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E39311
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6b4072be-6675-4b1c-a59a-c9008b4d0834/0ebc32ee0b6d9488db9e6cc679c96f373cb5ebe3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6b4072be-6675-4b1c-a59a-c9008b4d0834/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 15:59:31 +0000
Certificate not after:    Mon 03 Jun 2024 19:09:51 +0000
Subordinate resources:    AS: 272836
                          IP: 2803:ec90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14914321 (0xe39311)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 15:59:31 2023 GMT
            Not After : Jun  3 19:09:51 2024 GMT
        Subject: CN=0ebc32ee0b6d9488db9e6cc679c96f373cb5ebe3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:5c:ae:7e:2a:88:58:2d:f0:9a:e5:a0:7c:5a:
                    d5:b2:d6:e4:ff:ec:b1:30:81:f0:2b:d6:eb:95:90:
                    2b:81:e0:f2:62:ec:ae:90:b0:66:9f:59:4e:b8:41:
                    69:fc:2d:ca:5e:c7:69:29:49:cf:ec:ce:e6:cb:40:
                    b8:7b:ad:19:61:bb:4b:a3:19:4f:5c:2e:78:03:db:
                    93:3b:4a:71:b8:a2:85:8d:a4:41:c8:c5:06:b2:c9:
                    c0:a9:b4:0c:89:d9:58:27:6d:5c:ef:5d:b9:1a:f7:
                    d5:cf:27:3e:34:71:cd:7b:9f:56:4b:5c:dd:fe:7e:
                    44:8c:ff:37:2c:e1:ae:61:f5:b0:2c:f9:fc:40:13:
                    f6:79:69:f4:91:34:68:9c:d3:1e:55:0e:4b:7f:7d:
                    d7:2c:c7:28:6a:33:04:63:c0:52:bc:e2:93:36:c7:
                    de:8b:fa:57:ec:b8:e1:b8:4a:39:a4:3d:a9:47:00:
                    30:23:18:a1:4b:40:36:1e:12:48:a3:35:76:13:4f:
                    41:0a:f3:57:44:ae:a0:27:7e:f9:fc:0c:5d:4b:e4:
                    8c:81:a4:44:06:c7:69:ba:66:df:16:dc:25:1f:f2:
                    7c:ff:42:aa:d6:68:57:e0:b3:b3:2d:6e:12:bf:31:
                    17:25:ba:be:bc:ae:dd:5f:33:15:fb:91:35:ae:b6:
                    c2:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:D4:3A:72:6C:5F:B6:D8:D2:17:0F:B4:5A:68:62:02:32:D6:E7:EB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6b4072be-6675-4b1c-a59a-c9008b4d0834/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6b4072be-6675-4b1c-a59a-c9008b4d0834/0ebc32ee0b6d9488db9e6cc679c96f373cb5ebe3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ec90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272836

    Signature Algorithm: sha256WithRSAEncryption
         58:62:1b:9e:8d:15:6c:61:93:1a:ab:82:c6:f5:a9:39:a3:28:
         10:9d:3a:c6:3c:8f:29:36:69:ac:19:95:8e:4b:fb:8a:2e:87:
         1e:3d:d4:2c:99:31:24:fa:cf:a4:d6:93:7a:a1:ec:04:7b:ed:
         ff:f8:11:fb:a4:f6:28:49:d7:0c:0d:a2:5b:9f:25:82:5a:fb:
         ea:79:07:88:b0:11:08:31:c1:d9:37:d0:e1:19:8f:49:10:1d:
         a4:b3:52:7b:32:d5:c3:7e:63:26:f6:32:89:d4:32:fd:06:86:
         40:db:ba:e9:dc:fb:04:44:35:35:33:55:f7:5c:20:da:0b:a9:
         e5:5d:31:55:9b:53:a9:96:cf:35:58:d6:38:00:a4:92:1e:7e:
         23:d9:07:df:8c:31:7e:d4:53:a8:f7:99:1e:4c:2b:88:93:0e:
         5b:7a:da:6e:48:76:a8:73:2b:85:bf:0f:46:a1:7c:83:b8:47:
         72:91:d0:58:a3:af:94:e5:35:58:c6:25:1e:d5:b4:c9:db:9a:
         12:b5:71:7d:dc:b1:37:de:cc:84:e0:77:db:1f:6e:49:b0:dc:
         3e:d1:54:af:ad:c4:6e:14:cc:de:8d:ec:24:fc:d2:e2:94:e0:
         a7:03:4f:12:a4:ce:70:6d:a3:85:bb:af:1a:db:c4:ee:09:7f:
         bd:59:15:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org