Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/20a4f8024d30d149b503bcc12662aa0f1013c397.cer
File:                     20a4f8024d30d149b503bcc12662aa0f1013c397.cer (raw, json)
Hash identifier:          rTPXdpRQLkOrhzVqr4np6iSRUVa+g9ZnWOe/Lsizyco=
Subject key identifier:   34:27:B2:4F:CC:AF:A7:C2:EC:78:F6:66:91:58:15:D3:4C:A3:A1:50
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F67129
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/20a4f8024d30d149b503bcc12662aa0f1013c397.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16150825 (0xf67129)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=20a4f8024d30d149b503bcc12662aa0f1013c397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:57:d7:9e:d1:71:b5:da:8a:b5:cd:c0:47:b4:
                    a6:80:aa:61:40:81:1e:0b:69:3e:b7:4e:3e:cd:6b:
                    f2:a1:d3:c0:85:38:0d:04:fc:58:45:b6:2a:3c:42:
                    a8:aa:a6:2c:13:b2:12:41:9c:a9:fd:ca:9e:14:ea:
                    5b:40:3c:46:47:fa:5c:90:64:9b:62:ab:9d:b5:51:
                    54:de:c5:ce:ac:91:3c:c3:78:42:0e:d6:4d:df:a1:
                    91:36:dd:13:76:48:c6:18:ed:e9:7c:6c:0e:c5:04:
                    88:a0:f1:17:67:ed:8c:09:31:03:c7:19:d7:63:51:
                    05:c7:77:cf:31:ad:ef:e6:a5:83:cf:f3:2b:4c:bd:
                    72:68:8f:63:fd:f5:d3:28:6d:f3:5f:ca:fa:c9:a1:
                    b7:8b:04:17:fb:59:63:92:f2:b5:d9:d4:c6:0d:ef:
                    8c:bd:7d:64:80:02:75:be:1b:99:f5:c0:3d:13:cd:
                    80:d4:76:bc:64:2e:0f:f2:86:99:5e:e3:3f:a9:33:
                    91:f0:37:c0:8a:7a:8d:c7:c4:c2:e1:02:a7:2a:c4:
                    3a:be:c8:c7:36:bc:3b:47:de:78:5a:7e:fa:bf:6f:
                    2e:75:6d:58:ac:94:8a:28:1e:9d:11:32:6a:ed:19:
                    db:40:55:a4:92:88:8b:63:1a:38:61:8e:af:64:25:
                    4e:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:27:B2:4F:CC:AF:A7:C2:EC:78:F6:66:91:58:15:D3:4C:A3:A1:50
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/20a4f8024d30d149b503bcc12662aa0f1013c397.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         36:94:25:18:ab:42:99:e1:62:c9:c4:c7:b5:a7:86:06:cf:06:
         24:3d:66:59:5c:f1:b1:9b:3d:d3:74:46:8c:a2:09:a5:2b:cc:
         6e:e1:90:91:ab:3d:d5:64:22:ac:71:2f:23:33:36:cd:15:7d:
         cd:69:15:cb:be:2f:85:d0:37:34:74:6d:27:dd:f4:5f:96:05:
         5c:bf:b6:09:61:18:e7:72:e7:1f:94:cd:1b:e4:cb:18:49:f2:
         21:6e:3f:1e:b0:bf:e0:23:15:50:1c:85:40:32:be:8a:44:c3:
         ce:85:2b:5a:80:7e:27:87:9f:45:da:21:65:9c:dc:27:d9:44:
         e9:2c:d7:ba:0a:1b:25:a5:c3:23:1e:b4:e0:5e:e5:bb:b6:82:
         29:ba:9a:d9:02:c6:9c:e8:31:da:08:56:d0:94:39:ac:40:96:
         57:fb:27:72:c6:f2:2a:a3:fd:93:86:95:e7:64:73:21:29:62:
         34:03:da:94:5d:2d:57:f8:d7:5f:d8:b4:d5:ac:4e:cc:2c:0b:
         8e:86:b3:81:2f:e3:34:8c:48:ac:f3:7e:4a:e8:ca:2a:d6:d8:
         d2:b5:da:41:a3:af:de:7d:f4:c0:b8:15:fe:6e:a7:00:86:b6:
         74:ef:55:df:cb:a8:97:ec:6e:9f:e0:5e:e8:a5:e7:34:41:cf:
         5b:ea:74:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:32 2024 by rpki-client on console-fra.rpki-client.org