Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/106d55ca19c313f01d291eec87f7cd72f889010e.cer
File:                     106d55ca19c313f01d291eec87f7cd72f889010e.cer (raw, json)
Hash identifier:          MoJqfTGiNA2REUAsUvpBlnR6GQJ1q3qEaqmgJz+s5Gc=
Subject key identifier:   24:01:7E:A5:9F:BB:C2:90:95:0D:4D:7A:F3:8C:86:4B:7D:43:CB:2A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCECA0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/106d55ca19c313f01d291eec87f7cd72f889010e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jun 2020 18:34:06 +0000
Certificate not after:    Sat 16 Nov 2024 15:54:12 +0000
Subordinate resources:    IP: 2801:18a::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16575648 (0xfceca0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  2 18:34:06 2020 GMT
            Not After : Nov 16 15:54:12 2024 GMT
        Subject: CN=106d55ca19c313f01d291eec87f7cd72f889010e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:56:db:56:97:a7:f0:74:46:cf:9f:0e:92:74:
                    00:c4:6a:6a:55:75:96:bb:d7:66:c6:a8:a7:3b:37:
                    36:14:ea:c2:2d:cf:86:4b:4e:91:7d:3a:8c:10:b4:
                    0f:49:0b:91:fd:6a:0b:5b:b4:73:80:43:e6:1e:b6:
                    e6:a5:c8:40:8d:89:07:85:fc:46:29:8f:73:42:8c:
                    a3:f6:da:e8:a6:0f:c7:3c:c2:64:15:7b:62:44:aa:
                    90:70:92:f1:49:e0:8f:c7:b0:98:c6:ae:fc:65:4c:
                    17:b7:65:0c:f2:ec:5a:35:a0:2c:fd:be:aa:be:1c:
                    63:15:fc:d5:a3:50:60:37:9a:d1:fa:7e:20:ab:bb:
                    15:91:02:c2:b1:e5:41:83:db:d0:a6:d6:c7:ba:e5:
                    63:cd:39:96:3f:13:01:70:7a:41:d7:8a:81:44:a1:
                    ef:20:ea:e3:9a:ef:48:41:f6:3c:38:84:72:31:97:
                    99:22:7e:b4:8b:49:dd:0a:4e:4e:f0:f3:61:3c:0c:
                    54:a2:f7:b2:46:39:18:f0:f2:72:1b:d6:2b:5f:30:
                    33:34:92:34:8a:a5:16:1e:6b:99:da:c5:19:27:93:
                    1d:79:98:69:5a:e9:34:32:4c:d3:be:e0:8e:81:5c:
                    8c:93:84:d0:b8:f4:c5:44:3c:76:06:43:19:be:6b:
                    7d:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:01:7E:A5:9F:BB:C2:90:95:0D:4D:7A:F3:8C:86:4B:7D:43:CB:2A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/53c2672f-be63-4844-b22c-2f3ec7ebe019/106d55ca19c313f01d291eec87f7cd72f889010e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18a::/44

    Signature Algorithm: sha256WithRSAEncryption
         6b:58:0f:1d:d2:03:31:e9:48:43:2d:e3:04:c1:fc:9f:4f:7d:
         34:91:8d:52:fe:ff:f2:ff:6d:6d:bf:ad:4d:5b:c3:6d:ca:25:
         77:27:ba:3d:76:c7:37:e8:1c:c7:ee:98:e4:fe:b8:31:7a:aa:
         c9:17:d0:60:ed:03:3b:5f:38:96:87:66:d4:02:49:fd:f1:01:
         e4:23:77:aa:1b:32:ad:bd:5e:de:67:91:21:74:2f:60:fb:e0:
         f2:dc:eb:f7:e5:d5:03:24:b1:24:a2:19:60:04:a3:81:f0:ab:
         18:b5:20:a6:5c:1d:1b:b8:fc:d2:2f:3f:e1:de:d4:29:01:77:
         7e:d0:8a:98:c7:19:8b:bd:e8:c8:f3:fa:09:40:ad:21:34:b2:
         55:c7:55:e0:ca:d5:bb:92:01:e2:cb:db:f8:39:b4:2c:bb:e8:
         4c:2d:2f:8e:3d:d7:08:43:bb:6d:7d:f6:01:f4:04:db:13:0f:
         5e:6e:65:e9:f1:74:ec:6d:c0:da:48:3e:bf:63:e9:46:07:b6:
         bb:d3:ca:e7:c4:ea:96:d3:52:aa:e2:cb:e4:17:07:dd:0e:10:
         57:07:ca:94:7a:19:1f:c4:09:28:cb:4a:ad:7d:34:dc:af:22:
         a7:9e:ce:86:e9:ce:1d:8d:3c:ed:d5:c6:98:c8:de:bc:97:48:
         11:fb:ea:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:32 2024 by rpki-client on console-fra.rpki-client.org