Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2bbfcecd23b43d3ac7d7a04a27bc748104331d64.cer
File:                     2bbfcecd23b43d3ac7d7a04a27bc748104331d64.cer (raw, json)
Hash identifier:          cXHdBgF9e8NJh5hCo1vYsRG2+n+2ydGK/PSFVuT7leg=
Subject key identifier:   CC:B9:F2:CA:96:60:25:D0:FA:90:0F:CA:FF:F4:8B:E8:15:20:1B:31
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F72EC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0375da7d-27f5-4602-a662-076ae465f05a/2bbfcecd23b43d3ac7d7a04a27bc748104331d64.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0375da7d-27f5-4602-a662-076ae465f05a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 15:59:45 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.211.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16199364 (0xf72ec4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 15:59:45 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=2bbfcecd23b43d3ac7d7a04a27bc748104331d64
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:7b:09:60:16:ce:4b:eb:4d:f0:74:93:7d:39:
                    1b:33:68:4f:ea:5c:6d:39:0c:13:53:17:5c:6a:d0:
                    33:10:7e:e0:a5:ad:1a:f9:e3:e5:48:98:b5:f7:f3:
                    d0:a8:67:3c:3d:3b:92:7a:e9:61:1b:bf:6d:10:cd:
                    b9:af:32:55:57:93:d9:fe:15:e3:07:87:4a:cb:31:
                    75:05:ad:56:41:b4:9b:5a:02:63:00:40:90:f8:bf:
                    af:44:2b:b5:36:33:b8:f1:11:a5:df:24:8f:ce:c4:
                    52:8d:ca:52:5f:1d:08:a9:3c:53:71:db:fd:3f:fb:
                    c8:9e:03:d4:ee:05:6e:fc:8b:4d:4a:13:e6:ac:82:
                    56:6a:85:24:0c:9a:1c:f2:7c:c9:a1:ef:12:64:ef:
                    c9:0d:b4:14:f6:61:a9:17:61:e6:c8:55:ab:84:86:
                    86:ed:cc:35:c2:fb:d5:68:0f:44:a8:84:63:cc:b1:
                    e4:80:3c:58:1f:9a:58:6b:ee:88:46:37:d9:41:02:
                    21:92:81:48:40:80:15:b3:b3:bc:7f:85:6f:b9:67:
                    45:d1:fe:49:54:b2:5e:be:31:c2:47:7f:21:b5:2e:
                    d0:80:a7:82:86:76:7a:f0:16:2d:f8:9a:df:8a:d9:
                    ae:a4:c7:da:66:d2:84:2f:12:13:96:8a:8a:b9:3f:
                    ca:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:B9:F2:CA:96:60:25:D0:FA:90:0F:CA:FF:F4:8B:E8:15:20:1B:31
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0375da7d-27f5-4602-a662-076ae465f05a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0375da7d-27f5-4602-a662-076ae465f05a/2bbfcecd23b43d3ac7d7a04a27bc748104331d64.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.211.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a5:fa:c1:7a:b2:5a:ba:5f:90:a7:ac:58:13:2e:82:de:4c:c7:
         45:ad:14:ae:8e:d1:02:40:d3:13:dc:dd:89:94:1e:13:85:ac:
         6f:45:5c:37:1f:49:6d:63:c2:a5:06:a5:d5:03:eb:61:3e:01:
         fb:7d:d7:5e:fa:01:cf:ee:78:06:16:04:ff:15:53:e2:c4:27:
         68:04:3d:97:ed:08:9f:e9:72:24:5f:fe:2e:81:b5:ea:38:8f:
         57:21:e6:3c:b0:dc:27:06:f9:ee:cc:c0:63:bb:ee:71:cf:4e:
         15:32:aa:22:b7:52:00:94:a0:f3:6f:51:a1:17:76:2a:f6:cf:
         10:e7:94:06:bf:07:ba:47:8f:f2:c3:48:19:de:e4:99:3f:fa:
         79:df:c2:bb:1d:34:9c:9e:da:71:99:88:27:de:0f:32:c3:4f:
         be:34:4b:08:30:11:61:4b:cd:d0:3a:7c:db:c0:90:39:96:b9:
         d2:32:0c:cb:f8:53:26:26:aa:0c:40:c6:ac:21:23:20:e9:88:
         0c:ab:7a:49:ac:f5:b5:46:30:0b:ca:96:2c:4e:06:4d:52:79:
         ce:df:69:8b:bd:15:1e:29:d3:0b:37:a0:8c:a4:1c:86:8d:45:
         57:c1:29:ed:96:dc:e4:79:5f:68:49:c4:df:35:1e:74:77:21:
         2a:7e:87:5d
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAPcuxDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyOTE1NTk0NVoXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoMmJiZmNlY2QyM2I0M2QzYWM3ZDdhMDRhMjdiYzc0ODEw
NDMzMWQ2NDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAKF7CWAWzkvr
TfB0k305GzNoT+pcbTkME1MXXGrQMxB+4KWtGvnj5UiYtffz0KhnPD07knrpYRu/
bRDNua8yVVeT2f4V4weHSssxdQWtVkG0m1oCYwBAkPi/r0QrtTYzuPERpd8kj87E
Uo3KUl8dCKk8U3Hb/T/7yJ4D1O4FbvyLTUoT5qyCVmqFJAyaHPJ8yaHvEmTvyQ20
FPZhqRdh5shVq4SGhu3MNcL71WgPRKiEY8yx5IA8WB+aWGvuiEY32UECIZKBSECA
FbOzvH+Fb7lnRdH+SVSyXr4xwkd/IbUu0ICngoZ2evAWLfia34rZrqTH2mbShC8S
E5aKirk/ytMCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBTMufLKlmAl0PqQD8r/9Ivo
FSAbMTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8wMzc1ZGE3ZC0yN2Y1
LTQ2MDItYTY2Mi0wNzZhZTQ2NWYwNWEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMDM3NWRhN2QtMjdmNS00
NjAyLWE2NjItMDc2YWU0NjVmMDVhLzJiYmZjZWNkMjNiNDNkM2FjN2Q3YTA0YTI3
YmM3NDgxMDQzMzFkNjQubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBk0zANBgkqhkiG9w0BAQsFAAOC
AQEApfrBerJaul+Qp6xYEy6C3kzHRa0Uro7RAkDTE9zdiZQeE4Wsb0VcNx9JbWPC
pQal1QPrYT4B+33XXvoBz+54BhYE/xVT4sQnaAQ9l+0In+lyJF/+LoG16jiPVyHm
PLDcJwb57szAY7vucc9OFTKqIrdSAJSg829RoRd2KvbPEOeUBr8HukeP8sNIGd7k
mT/6ed/Cux00nJ7acZmIJ94PMsNPvjRLCDARYUvN0Dp828CQOZa50jIMy/hTJiaq
DEDGrCEjIOmIDKt6Saz1tUYwC8qWLE4GTVJ5zt9pi70VHinTCzegjKQcho1FV8Ep
7Zbc5HlfaEnE3zUedHchKn6HXQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:10 2024 by rpki-client on console-fra.rpki-client.org