Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e73cc0fbe1c31f92722c09a915ee5d0c3f392d1.cer
File:                     1e73cc0fbe1c31f92722c09a915ee5d0c3f392d1.cer (raw, json)
Hash identifier:          aTVMkij11kvjTGCa74lsinm+oafuq6Y+gnZY+Bst2QE=
Subject key identifier:   12:3D:2A:37:31:6B:0B:C1:D2:FC:3C:93:AE:07:99:48:E0:F3:A5:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F72678
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c20db7a0-9d40-40b1-be1a-a228715f57f8/1e73cc0fbe1c31f92722c09a915ee5d0c3f392d1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c20db7a0-9d40-40b1-be1a-a228715f57f8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 15:59:24 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.207.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16197240 (0xf72678)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 15:59:24 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=1e73cc0fbe1c31f92722c09a915ee5d0c3f392d1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:e4:6d:ca:a8:94:71:4e:18:32:54:da:58:09:
                    ab:64:98:34:9a:17:3b:bd:34:f5:a4:cf:d8:97:60:
                    dd:63:09:83:88:b1:22:65:d9:5e:3a:06:93:dd:d7:
                    13:49:07:25:df:77:f5:73:0b:ca:1f:21:f2:a4:17:
                    62:64:ac:df:11:df:52:ba:75:4d:d8:be:39:dd:a3:
                    00:b7:d5:41:84:43:5c:ed:ea:2b:9d:80:55:1b:ab:
                    bf:16:0a:b3:27:18:2b:c8:eb:c0:15:90:de:0a:dc:
                    15:1d:db:ff:37:e7:8e:1c:84:29:53:b8:39:04:7a:
                    46:da:16:d4:ae:ba:6f:bc:7f:fc:15:8a:cf:c1:c9:
                    b4:0d:75:db:15:bb:f3:3f:bf:b8:05:2b:af:2a:c6:
                    e0:e6:5a:96:fc:0f:38:ff:e5:31:a3:42:f4:29:d4:
                    1c:61:ac:5c:b9:63:54:3a:b0:9f:e8:cc:6c:b4:15:
                    8e:e8:84:0d:2c:b7:43:a5:d2:04:f6:b0:8e:d5:83:
                    45:b3:e4:44:72:ab:a1:ed:cb:1e:a1:f8:ee:7b:16:
                    55:7e:72:b3:6a:f2:6e:8c:32:0b:12:ce:fa:6f:51:
                    57:d1:65:b4:69:ac:a7:89:d9:68:33:81:65:5a:89:
                    c7:ea:98:d9:66:c8:9c:68:f1:ef:36:d7:d9:dd:c5:
                    52:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:3D:2A:37:31:6B:0B:C1:D2:FC:3C:93:AE:07:99:48:E0:F3:A5:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c20db7a0-9d40-40b1-be1a-a228715f57f8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c20db7a0-9d40-40b1-be1a-a228715f57f8/1e73cc0fbe1c31f92722c09a915ee5d0c3f392d1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.207.0/24

    Signature Algorithm: sha256WithRSAEncryption
         24:e6:03:0f:85:8d:56:97:0e:d0:0b:c6:09:5f:e2:0f:70:62:
         ff:da:0b:0c:c2:3e:a7:7d:5f:12:64:2c:97:46:03:da:97:2a:
         90:c5:7b:e3:9b:d2:45:35:b9:fb:7f:c0:57:52:32:50:1a:e6:
         68:9b:1b:38:a6:0a:ef:61:3a:a8:22:16:27:ba:6d:26:6d:a5:
         55:99:22:a3:59:de:f9:95:5b:e2:6c:30:2c:ad:ef:58:8c:0b:
         0a:2c:a5:c4:84:67:da:1f:34:29:80:79:a0:76:51:3b:c0:41:
         b4:91:f8:8a:77:db:e7:b0:87:a7:b4:8b:25:3a:71:34:de:ba:
         90:df:46:10:14:05:86:6f:4e:ed:a8:7c:08:9d:55:5a:da:86:
         b3:a9:d2:44:96:5c:ba:5a:a4:32:a3:d1:38:06:7f:c5:2b:62:
         4a:d1:5a:9f:03:c5:e6:b7:c1:e8:63:95:ec:86:43:56:3c:1e:
         dd:95:bc:9d:7c:ec:67:ea:e1:c5:cc:9b:8e:1c:3d:03:94:d8:
         a4:55:02:5c:77:1d:b6:d7:4a:84:fa:7e:fd:dd:45:85:86:d6:
         8f:4f:c0:dd:90:78:53:3e:de:b1:db:b0:82:8d:ee:99:af:12:
         65:2a:17:ee:b1:fa:3c:59:1d:e1:31:f8:13:85:92:52:27:a2:
         96:cb:98:1a
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAPcmeDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyOTE1NTkyNFoXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoMWU3M2NjMGZiZTFjMzFmOTI3MjJjMDlhOTE1ZWU1ZDBj
M2YzOTJkMTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKHkbcqolHFO
GDJU2lgJq2SYNJoXO7009aTP2Jdg3WMJg4ixImXZXjoGk93XE0kHJd939XMLyh8h
8qQXYmSs3xHfUrp1Tdi+Od2jALfVQYRDXO3qK52AVRurvxYKsycYK8jrwBWQ3grc
FR3b/zfnjhyEKVO4OQR6RtoW1K66b7x//BWKz8HJtA112xW78z+/uAUrryrG4OZa
lvwPOP/lMaNC9CnUHGGsXLljVDqwn+jMbLQVjuiEDSy3Q6XSBPawjtWDRbPkRHKr
oe3LHqH47nsWVX5ys2rybowyCxLO+m9RV9FltGmsp4nZaDOBZVqJx+qY2WbInGjx
7zbX2d3FUvsCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBQSPSo3MWsLwdL8PJOuB5lI
4POl7jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9jMjBkYjdhMC05ZDQw
LTQwYjEtYmUxYS1hMjI4NzE1ZjU3ZjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYzIwZGI3YTAtOWQ0MC00
MGIxLWJlMWEtYTIyODcxNWY1N2Y4LzFlNzNjYzBmYmUxYzMxZjkyNzIyYzA5YTkx
NWVlNWQwYzNmMzkyZDEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBkzzANBgkqhkiG9w0BAQsFAAOC
AQEAJOYDD4WNVpcO0AvGCV/iD3Bi/9oLDMI+p31fEmQsl0YD2pcqkMV745vSRTW5
+3/AV1IyUBrmaJsbOKYK72E6qCIWJ7ptJm2lVZkio1ne+ZVb4mwwLK3vWIwLCiyl
xIRn2h80KYB5oHZRO8BBtJH4infb57CHp7SLJTpxNN66kN9GEBQFhm9O7ah8CJ1V
WtqGs6nSRJZculqkMqPROAZ/xStiStFanwPF5rfB6GOV7IZDVjwe3ZW8nXzsZ+rh
xcybjhw9A5TYpFUCXHcdttdKhPp+/d1FhYbWj0/A3ZB4Uz7esduwgo3uma8SZSoX
7rH6PFkd4TH4E4WSUieilsuYGg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:06 2024 by rpki-client on console-fra.rpki-client.org