Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1bbb16373f011fb2a6d0686c8e6a0569b6ed452b.cer
File:                     1bbb16373f011fb2a6d0686c8e6a0569b6ed452b.cer (raw, json)
Hash identifier:          okUIWaaiTnpxSJefa55bPzATBzY7JRhtgcgeKZmxeRQ=
Subject key identifier:   07:81:89:B3:78:B0:66:9B:AB:2E:26:B0:A1:59:12:17:0A:81:96:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9519B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e5687640-d3bb-4b29-8ab7-938683d074d1/1bbb16373f011fb2a6d0686c8e6a0569b6ed452b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e5687640-d3bb-4b29-8ab7-938683d074d1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 20:09:39 +0000
Certificate not after:    Tue 23 Jul 2024 21:46:40 +0000
Subordinate resources:    IP: 2801:1b:5800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15290779 (0xe9519b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 20:09:39 2023 GMT
            Not After : Jul 23 21:46:40 2024 GMT
        Subject: CN=1bbb16373f011fb2a6d0686c8e6a0569b6ed452b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:e6:f5:36:16:92:d5:13:bb:b4:b0:84:e7:c9:
                    69:ea:d1:34:b2:b4:fd:91:41:dc:ab:2f:73:6e:17:
                    7b:8b:ab:63:15:53:92:b2:ec:d8:64:47:85:e2:a9:
                    36:e7:cb:ca:27:fc:f6:30:62:2e:ca:c7:b8:f7:22:
                    63:d9:f2:35:fb:3e:45:da:1f:48:7c:c6:99:e5:0b:
                    01:4a:28:d7:25:82:cf:62:fd:f0:db:70:62:ae:26:
                    70:94:e2:e9:9c:fe:55:e7:5f:20:3f:fa:d1:55:b8:
                    a3:f8:3b:de:56:e6:33:ca:31:53:ee:90:e8:33:43:
                    36:0f:6a:f7:a9:62:cc:c5:1d:47:0a:86:b9:1c:8b:
                    d0:0c:cc:43:d6:26:8c:4a:51:c1:59:dc:7a:b8:67:
                    6d:d5:2b:ea:0d:ef:85:7d:6c:5f:2e:51:b5:f6:ec:
                    0c:51:ee:77:3e:c7:98:08:a3:18:f0:09:77:36:b9:
                    ba:6e:a5:0e:80:1d:c3:64:80:93:8a:1b:73:2f:44:
                    0e:5c:ee:c8:c2:9b:2b:41:af:64:88:00:50:36:da:
                    60:1e:c3:9c:20:98:22:0e:8e:eb:96:04:50:8f:2e:
                    1e:8d:0c:11:b8:0a:01:36:68:5a:da:3d:ea:c9:d4:
                    da:17:45:54:5a:a5:d9:c0:fa:21:94:e2:cb:56:74:
                    4e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:81:89:B3:78:B0:66:9B:AB:2E:26:B0:A1:59:12:17:0A:81:96:11
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e5687640-d3bb-4b29-8ab7-938683d074d1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e5687640-d3bb-4b29-8ab7-938683d074d1/1bbb16373f011fb2a6d0686c8e6a0569b6ed452b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         4e:41:e3:76:7e:6b:2e:eb:56:f8:a4:c6:f3:a8:9f:7e:02:26:
         e0:4a:7d:57:8c:0b:fb:00:d3:8c:10:56:6b:ce:03:ae:a3:02:
         59:b8:69:34:83:42:f5:42:eb:fa:a1:9b:96:ba:5a:3e:81:f3:
         15:f3:3f:49:f9:4b:76:02:28:36:37:10:d0:aa:fd:4d:0f:57:
         b1:a2:90:01:f4:a0:f8:3d:03:d0:43:c4:36:69:05:94:c3:68:
         05:3c:ab:3d:f8:7f:2a:e4:c4:82:63:06:d7:ad:85:3e:20:a4:
         a7:8d:6c:70:46:17:d3:4c:4d:e5:9c:4d:ab:23:21:01:19:68:
         da:1d:33:1a:9c:02:e2:57:d1:f5:e3:f0:b9:74:df:4b:6c:a5:
         87:6d:19:b1:bf:21:9e:b3:b3:fd:bd:06:da:81:95:9b:24:2b:
         fa:a0:86:d9:ae:ee:74:0b:99:96:a3:fd:23:02:f0:81:39:a6:
         fe:50:e9:26:da:6c:59:ea:5b:20:e3:98:44:e4:f4:6a:f6:7c:
         41:8b:90:91:bb:a4:27:99:34:1b:35:f7:5e:98:22:4f:de:2e:
         c8:e1:0b:a5:36:59:5c:7e:20:a2:24:35:ec:53:3d:85:d4:d4:
         9e:3c:66:f5:53:d0:13:08:6d:5f:58:c0:62:45:e3:23:e9:31:
         57:a9:20:45
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAOlRmzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUxMDIwMDkzOVoXDTI0MDcyMzIxNDY0
MFowMzExMC8GA1UEAxMoMWJiYjE2MzczZjAxMWZiMmE2ZDA2ODZjOGU2YTA1Njli
NmVkNDUyYjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMPm9TYWktUT
u7SwhOfJaerRNLK0/ZFB3Ksvc24Xe4urYxVTkrLs2GRHheKpNufLyif89jBiLsrH
uPciY9nyNfs+RdofSHzGmeULAUoo1yWCz2L98NtwYq4mcJTi6Zz+VedfID/60VW4
o/g73lbmM8oxU+6Q6DNDNg9q96lizMUdRwqGuRyL0AzMQ9YmjEpRwVncerhnbdUr
6g3vhX1sXy5RtfbsDFHudz7HmAijGPAJdza5um6lDoAdw2SAk4obcy9EDlzuyMKb
K0GvZIgAUDbaYB7DnCCYIg6O65YEUI8uHo0MEbgKATZoWto96snU2hdFVFql2cD6
IZTiy1Z0TpcCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBQHgYmzeLBmm6suJrChWRIX
CoGWETAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lNTY4NzY0MC1kM2Ji
LTRiMjktOGFiNy05Mzg2ODNkMDc0ZDEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTU2ODc2NDAtZDNiYi00
YjI5LThhYjctOTM4NjgzZDA3NGQxLzFiYmIxNjM3M2YwMTFmYjJhNmQwNjg2Yzhl
NmEwNTY5YjZlZDQ1MmIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHACgBABtYADANBgkqhkiG9w0BAQsF
AAOCAQEATkHjdn5rLutW+KTG86iffgIm4Ep9V4wL+wDTjBBWa84DrqMCWbhpNINC
9ULr+qGblrpaPoHzFfM/SflLdgIoNjcQ0Kr9TQ9XsaKQAfSg+D0D0EPENmkFlMNo
BTyrPfh/KuTEgmMG162FPiCkp41scEYX00xN5ZxNqyMhARlo2h0zGpwC4lfR9ePw
uXTfS2ylh20Zsb8hnrOz/b0G2oGVmyQr+qCG2a7udAuZlqP9IwLwgTmm/lDpJtps
WepbIOOYROT0avZ8QYuQkbukJ5k0GzX3XpgiT94uyOELpTZZXH4goiQ17FM9hdTU
njxm9VPQEwhtX1jAYkXjI+kxV6kgRQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:22 2024 by rpki-client on console-ams.rpki-client.org