Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2131a7ac0138ac6f8396bc7666d43183313d0b50.cer
File:                     2131a7ac0138ac6f8396bc7666d43183313d0b50.cer (raw, json)
Hash identifier:          bZLpAGIcGN/CLWLFpJyp5PrdgobRP5CauIfCJvWpK4U=
Subject key identifier:   E9:87:F4:C1:2B:72:79:99:70:23:4F:20:A3:7C:2E:99:5F:91:C1:10
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F74068
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3423d2c1-42d6-4788-a98e-fcbc1104a455/2131a7ac0138ac6f8396bc7666d43183313d0b50.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3423d2c1-42d6-4788-a98e-fcbc1104a455/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:01:01 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.231.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16203880 (0xf74068)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:01:01 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=2131a7ac0138ac6f8396bc7666d43183313d0b50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:b5:da:b5:d1:f6:99:4e:2a:aa:d7:ee:da:b0:
                    f0:9e:55:49:4e:d0:6d:a4:a9:f3:ff:2c:bb:ad:dc:
                    73:62:34:f2:e0:cb:eb:50:c4:46:74:0c:f9:22:ba:
                    f9:30:75:1b:cd:2b:4c:80:12:52:72:9d:56:1f:16:
                    03:24:f2:64:81:4d:1b:6e:10:2c:ee:5e:1f:1c:f8:
                    70:cf:15:25:94:b4:20:17:19:4d:2d:b4:e7:e0:1a:
                    57:be:b1:1c:a6:e2:65:31:51:a7:0f:e5:aa:48:c4:
                    ab:8d:9b:af:81:01:34:23:35:cd:03:84:92:be:19:
                    61:32:53:10:69:93:9c:97:db:28:52:5c:77:c2:c5:
                    c8:a4:46:85:1f:3b:36:05:61:bc:5c:3b:77:a0:78:
                    cd:e0:89:00:a8:4f:4d:89:13:13:33:1f:fb:0c:a9:
                    a4:18:a7:be:9e:4b:88:66:90:e3:e0:c1:ec:bd:5b:
                    3a:42:00:49:dc:29:a6:b3:72:2f:ec:38:96:0a:8c:
                    26:ba:95:c6:bf:27:0b:2d:12:21:cc:8d:49:63:9b:
                    e3:b3:0e:c4:b0:68:86:31:50:a2:88:9a:e4:51:f7:
                    21:1e:f1:b3:43:b8:0d:fd:e2:99:24:da:98:27:a2:
                    9d:ed:c5:57:ca:86:f9:56:30:36:2d:32:a9:13:27:
                    a6:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:87:F4:C1:2B:72:79:99:70:23:4F:20:A3:7C:2E:99:5F:91:C1:10
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3423d2c1-42d6-4788-a98e-fcbc1104a455/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3423d2c1-42d6-4788-a98e-fcbc1104a455/2131a7ac0138ac6f8396bc7666d43183313d0b50.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.231.0/24

    Signature Algorithm: sha256WithRSAEncryption
         41:54:30:16:61:cc:af:38:a1:94:67:26:35:5e:68:ed:90:46:
         26:18:87:0e:78:eb:cb:92:68:9d:d3:bb:76:8d:6d:ed:00:f2:
         27:a3:f4:6d:11:2e:53:bd:8e:f7:a4:45:78:25:bf:a0:66:fe:
         f9:63:16:3b:c6:da:1b:ce:33:ad:b0:e7:bb:02:aa:b8:b2:71:
         32:ac:d4:67:83:48:a3:a1:94:da:1b:6c:19:c1:51:3c:0c:a7:
         e1:4f:f8:85:dc:03:0d:3b:2b:e8:72:92:53:55:6c:85:02:fb:
         bb:c5:27:4e:91:ad:1d:a4:34:ac:ea:70:b1:dd:6d:4d:f2:1e:
         5e:08:03:f6:24:b1:0b:76:44:73:80:fe:45:89:9f:15:e7:55:
         de:e8:69:d3:e1:34:8d:84:92:3d:a0:f4:a0:b6:e8:37:e9:c0:
         05:9e:6c:0e:ab:ab:6a:39:27:a9:29:46:03:19:8d:7b:b7:94:
         68:a0:72:23:d1:0c:d8:b8:b1:71:e0:ef:30:16:d5:01:8e:17:
         25:a3:98:48:fb:3d:13:bb:3a:ab:5e:cd:05:55:c2:62:1d:ad:
         7a:b3:ef:c1:09:78:e1:4a:6b:19:13:80:74:b6:b2:3b:12:31:
         0c:49:17:fc:31:5f:f5:83:f3:9a:3e:5a:c8:19:25:fb:09:33:
         99:19:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:10 2024 by rpki-client on console-fra.rpki-client.org