Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13f3b0f17cad9bd6ee1f1a48f32050546222a4a1.cer
File:                     13f3b0f17cad9bd6ee1f1a48f32050546222a4a1.cer (raw, json)
Hash identifier:          ZR6DgrnSLis0kxPwktmghC+LYzQEj7RdouEQguSMPdQ=
Subject key identifier:   CC:51:69:2D:5C:4C:DF:A2:1C:70:4E:09:8C:40:F8:D5:0C:32:BA:14
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF6AB1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9d6d18a9-4585-406e-80c2-525b96fb9204/13f3b0f17cad9bd6ee1f1a48f32050546222a4a1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9d6d18a9-4585-406e-80c2-525b96fb9204/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:21:49 +0000
Certificate not after:    Tue 05 Aug 2025 15:24:04 +0000
Subordinate resources:    AS: 52807
                          IP: 138.36.28.0/22
                          IP: 167.250.12.0/22
                          IP: 170.79.24.0/22
                          IP: 177.53.40.0/21
                          IP: 2804:2198::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16738993 (0xff6ab1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:21:49 2023 GMT
            Not After : Aug  5 15:24:04 2025 GMT
        Subject: CN=13f3b0f17cad9bd6ee1f1a48f32050546222a4a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:8f:61:81:38:59:73:9c:01:f0:42:c4:1b:ad:
                    a7:28:81:75:d8:3a:bd:28:ad:80:ef:b0:67:22:bf:
                    61:ec:ac:1a:f4:35:35:c6:d8:4f:c9:d6:62:f7:8d:
                    ac:ec:5f:ed:bc:61:8a:fd:62:f3:3b:a9:88:65:55:
                    76:81:58:4c:fa:0a:a5:b1:6f:92:9f:8f:be:75:da:
                    a6:12:3a:66:33:a3:6b:e9:f6:62:cc:14:f6:b1:61:
                    22:13:81:76:3e:84:e2:0a:9a:b3:3f:ab:c9:9c:4b:
                    17:d9:88:8a:e4:7c:a4:44:1d:7a:b0:97:3b:6e:72:
                    20:a1:83:03:f0:57:86:59:3f:14:75:81:67:7a:6b:
                    af:70:9e:2e:7f:2b:14:00:cd:2e:39:85:13:4a:9a:
                    5a:d5:ec:3a:9b:33:30:e4:4b:a2:0b:0f:6c:af:70:
                    f3:09:bb:8d:a9:ab:0e:cd:bd:1c:af:70:26:f3:d2:
                    b0:d4:79:14:78:3d:59:a1:94:4e:58:a5:ea:cb:5e:
                    4c:5f:3a:b7:9e:91:e1:6c:db:5d:32:88:0d:69:60:
                    cb:59:a2:ca:87:ab:ac:bb:74:4a:ff:74:38:d6:77:
                    1e:81:83:02:0b:41:23:e6:69:bf:94:45:aa:e6:a2:
                    07:79:68:01:79:4d:d0:d6:dc:8b:07:84:9d:90:20:
                    71:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:51:69:2D:5C:4C:DF:A2:1C:70:4E:09:8C:40:F8:D5:0C:32:BA:14
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9d6d18a9-4585-406e-80c2-525b96fb9204/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9d6d18a9-4585-406e-80c2-525b96fb9204/13f3b0f17cad9bd6ee1f1a48f32050546222a4a1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.28.0/22
                  167.250.12.0/22
                  170.79.24.0/22
                  177.53.40.0/21
                IPv6:
                  2804:2198::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52807

    Signature Algorithm: sha256WithRSAEncryption
         a7:01:76:27:2a:bd:91:01:27:5e:8e:5f:7a:32:5f:7d:c3:93:
         35:5a:33:f0:12:40:26:85:81:8d:9f:02:a8:a1:90:5d:24:f8:
         2a:bf:4d:6e:5d:c8:40:0b:bd:6e:19:57:f5:38:ca:93:4c:70:
         dd:4f:63:08:c3:4e:a8:9c:0a:32:4a:17:b2:ab:29:dd:4e:5d:
         d7:da:53:0d:2a:01:27:64:da:02:4e:3a:c7:85:5e:9c:06:39:
         ce:a1:2d:1f:3d:35:9e:ac:d2:db:5e:54:36:f8:91:2c:fa:04:
         83:be:1d:1a:fd:03:a2:0c:62:88:8a:c2:22:ee:da:8e:d9:26:
         fc:19:50:4f:93:ec:0a:8e:fe:7a:b0:80:5b:dc:37:4d:91:b1:
         be:bc:e5:a1:92:6f:b1:de:70:5c:ee:53:95:a1:bb:47:a5:28:
         1a:97:86:f4:b2:c5:1e:4c:3c:b0:a3:82:ae:82:d8:c6:cd:f5:
         8c:6c:69:19:b8:8e:58:45:e2:bc:a5:34:fd:79:c9:d8:4f:df:
         6e:f9:dc:96:6e:98:14:21:14:63:6f:3d:e1:15:af:ab:f5:a2:
         08:a5:49:05:13:41:d8:f6:84:b9:20:ae:48:c7:a0:df:4b:35:
         69:09:23:70:39:5d:dd:57:ea:bb:d4:f2:c8:99:11:4e:5f:90:
         e2:2a:80:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org