Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/28e42b5b0a799c736d280e782b2ee7257f9d45ae.cer
File:                     28e42b5b0a799c736d280e782b2ee7257f9d45ae.cer (raw, json)
Hash identifier:          XD8ZpTRz75jSgIbaai/gImUH8YoRHWgQZvzKX5k1/+g=
Subject key identifier:   76:0E:26:C9:E7:FD:E5:3A:29:DC:60:20:01:1A:1B:B5:63:EE:A2:CF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010987B2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e53105bd-3e3e-4bff-b720-d812a6491cd7/28e42b5b0a799c736d280e782b2ee7257f9d45ae.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e53105bd-3e3e-4bff-b720-d812a6491cd7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Feb 2024 18:59:32 +0000
Certificate not after:    Fri 28 Feb 2025 06:00:00 +0000
Subordinate resources:    AS: 27677
                          IP: 200.1.115.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17401778 (0x10987b2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  6 18:59:32 2024 GMT
            Not After : Feb 28 06:00:00 2025 GMT
        Subject: CN=28e42b5b0a799c736d280e782b2ee7257f9d45ae
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:af:ea:c0:8f:14:8a:05:2b:5c:61:bf:a5:bf:
                    4f:a0:9e:01:15:69:6e:ee:a2:84:77:d9:23:ce:d2:
                    c2:c1:ef:42:91:33:d5:bb:29:61:68:5d:a7:ba:8c:
                    22:bd:41:26:f7:58:c4:60:9b:1e:8b:33:b6:35:a7:
                    5c:fe:99:74:af:e1:57:12:13:75:80:d2:67:64:01:
                    d6:30:36:a2:ba:04:96:b8:3e:16:e0:49:e4:52:1f:
                    1f:d1:30:08:bd:61:25:32:a8:6e:12:05:6f:f1:e9:
                    41:e5:31:8a:14:67:ac:25:0c:39:7d:86:29:a9:cb:
                    58:33:b2:1f:2c:f9:69:dc:02:a3:b0:4a:17:26:4b:
                    40:5a:7a:e3:20:18:b4:ed:df:8d:ec:29:72:27:f2:
                    eb:fc:3c:66:b3:44:e3:9d:a4:77:e3:c1:01:a1:fd:
                    ac:6f:25:ba:db:80:e8:ba:b4:57:ef:60:ce:f4:5f:
                    1c:bc:96:60:f1:95:c6:4f:f2:f1:17:73:6c:89:67:
                    97:48:be:5e:da:b2:f0:68:a4:c7:e1:95:3c:2d:bf:
                    ea:2e:f1:a1:8a:3b:c3:ce:a2:63:0f:55:e0:36:39:
                    7c:3d:6c:b6:55:b5:4f:24:a3:a6:de:ec:77:ea:cb:
                    8b:06:8f:81:4a:f0:04:ed:ab:7d:73:72:a9:ef:a2:
                    12:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:0E:26:C9:E7:FD:E5:3A:29:DC:60:20:01:1A:1B:B5:63:EE:A2:CF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e53105bd-3e3e-4bff-b720-d812a6491cd7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e53105bd-3e3e-4bff-b720-d812a6491cd7/28e42b5b0a799c736d280e782b2ee7257f9d45ae.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.115.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27677

    Signature Algorithm: sha256WithRSAEncryption
         43:fb:55:81:53:88:3c:ff:9e:c0:80:7b:58:32:20:ae:57:2f:
         b4:88:3b:35:ae:43:c0:0e:ab:1c:1e:18:3d:93:9f:2a:fb:7f:
         ae:4a:be:26:ff:aa:ed:47:3f:00:5e:81:68:5b:a4:d1:31:f0:
         30:23:52:6f:ad:56:22:e3:0a:0d:a9:90:24:81:42:38:53:16:
         16:a0:9c:5e:41:7c:56:f2:20:bd:74:d1:f1:e7:ac:6f:67:6b:
         33:4d:77:fc:31:9f:b0:d7:54:2f:89:97:a1:60:ae:14:e5:88:
         b4:09:10:31:75:9d:23:b8:91:7b:a2:18:db:2e:d3:20:23:1b:
         06:c8:4b:ac:6e:99:bd:53:86:22:ff:13:ba:e5:bb:f6:c0:74:
         05:ee:fd:ef:ac:09:49:b7:42:95:3e:1f:ee:5d:65:65:33:5e:
         fb:12:96:d9:20:83:60:b6:d2:95:8b:5f:79:b2:ab:5c:73:34:
         31:c5:8c:5b:3f:d9:8e:ae:f9:95:fb:dd:83:91:ac:ce:52:e3:
         15:0e:bf:be:29:2d:d4:cf:14:5e:c3:5a:f7:26:31:74:98:73:
         2b:a6:5c:8b:ed:8d:a3:f8:22:8f:4d:10:45:b0:b1:ce:30:84:
         6d:b1:ad:7f:e1:6e:e4:f9:6d:81:10:87:0c:c3:96:a5:82:df:
         7a:83:7d:d7
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAQmHsjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIwNjE4NTkzMloXDTI1MDIyODA2MDAw
MFowMzExMC8GA1UEAxMoMjhlNDJiNWIwYTc5OWM3MzZkMjgwZTc4MmIyZWU3MjU3
ZjlkNDVhZTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ2v6sCPFIoF
K1xhv6W/T6CeARVpbu6ihHfZI87SwsHvQpEz1bspYWhdp7qMIr1BJvdYxGCbHosz
tjWnXP6ZdK/hVxITdYDSZ2QB1jA2oroElrg+FuBJ5FIfH9EwCL1hJTKobhIFb/Hp
QeUxihRnrCUMOX2GKanLWDOyHyz5adwCo7BKFyZLQFp64yAYtO3fjewpcify6/w8
ZrNE452kd+PBAaH9rG8lutuA6Lq0V+9gzvRfHLyWYPGVxk/y8RdzbIlnl0i+Xtqy
8Gikx+GVPC2/6i7xoYo7w86iYw9V4DY5fD1stlW1TySjpt7sd+rLiwaPgUrwBO2r
fXNyqe+iEgECAwEAAaOCAvkwggL1MB0GA1UdDgQWBBR2DibJ5/3lOincYCABGhu1
Y+6izzAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lNTMxMDViZC0zZTNl
LTRiZmYtYjcyMC1kODEyYTY0OTFjZDcvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTUzMTA1YmQtM2UzZS00
YmZmLWI3MjAtZDgxMmE2NDkxY2Q3LzI4ZTQyYjViMGE3OTljNzM2ZDI4MGU3ODJi
MmVlNzI1N2Y5ZDQ1YWUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgBczAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJsHTANBgkqhkiG9w0BAQsFAAOCAQEAQ/tVgVOIPP+ewIB7WDIgrlcv
tIg7Na5DwA6rHB4YPZOfKvt/rkq+Jv+q7Uc/AF6BaFuk0THwMCNSb61WIuMKDamQ
JIFCOFMWFqCcXkF8VvIgvXTR8eesb2drM013/DGfsNdUL4mXoWCuFOWItAkQMXWd
I7iRe6IY2y7TICMbBshLrG6ZvVOGIv8TuuW79sB0Be7976wJSbdClT4f7l1lZTNe
+xKW2SCDYLbSlYtfebKrXHM0McWMWz/Zjq75lfvdg5GszlLjFQ6/vikt1M8UXsNa
9yYxdJhzK6Zci+2No/gij00QRbCxzjCEbbGtf+Fu5PltgRCHDMOWpYLfeoN91w==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:24 2024 by rpki-client on console-ams.rpki-client.org