Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32582a9a43c1bb8f66046cc95a7cfac78873ee3b.cer
File:                     32582a9a43c1bb8f66046cc95a7cfac78873ee3b.cer (raw, json)
Hash identifier:          RTlLCATXroz2Sa7kZQckU5FcOjDsIRCIPiaA13uAkAE=
Subject key identifier:   64:AA:EF:AB:A0:FE:66:24:BB:A2:47:A4:36:5F:5B:72:71:2E:0F:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F24B05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e71706e7-432a-47e2-8dac-e91f251f3242/32582a9a43c1bb8f66046cc95a7cfac78873ee3b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e71706e7-432a-47e2-8dac-e91f251f3242/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Jul 2023 16:53:59 +0000
Certificate not after:    Sat 01 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 16471
                          IP: 186.65.72.0/21
                          IP: 200.10.234.0/24
                          IP: 200.10.236.0/23
                          IP: 2800:1f0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15878917 (0xf24b05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 19 16:53:59 2023 GMT
            Not After : Mar  1 06:00:00 2025 GMT
        Subject: CN=32582a9a43c1bb8f66046cc95a7cfac78873ee3b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:87:e3:6a:b9:05:b2:df:eb:ec:fb:18:80:62:
                    d3:72:2b:7e:04:68:c5:5c:ce:d3:4e:70:42:53:89:
                    da:4c:f8:ee:77:63:6d:fa:4e:82:4a:93:1f:50:10:
                    47:6e:50:6a:2b:80:31:07:f4:b7:ea:fb:1f:59:78:
                    bb:1c:34:79:0c:54:df:3d:02:73:10:fa:92:7f:b7:
                    d5:bf:40:f7:02:73:ec:7b:0a:77:ea:bb:29:29:db:
                    ee:5d:8a:64:4a:9d:15:12:6b:c6:f1:23:79:5a:6f:
                    17:be:8c:e0:68:86:02:83:c9:8c:b6:6a:06:70:cd:
                    9c:b0:9e:37:0d:91:bc:4f:e4:4c:b1:6e:c8:28:9f:
                    19:c5:1d:e3:fb:68:98:87:c8:cb:7e:d3:0f:aa:28:
                    25:c9:28:6c:68:0e:47:72:dd:00:4f:1c:89:8a:cf:
                    2b:15:5c:25:5b:4c:96:90:43:b7:56:4e:d1:0d:c8:
                    77:b4:85:3c:18:56:09:80:bb:1b:41:f7:65:ec:0c:
                    b2:c0:b3:66:99:e1:ef:8a:a8:25:1e:f4:38:ba:3c:
                    5a:c9:bd:2d:c9:fe:ab:72:4a:3d:60:9b:b8:47:24:
                    01:67:c0:15:f4:d9:7b:af:ca:9e:31:4f:b4:c7:3e:
                    45:a2:86:68:e2:01:1e:37:49:b3:b6:1a:41:c4:c5:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:AA:EF:AB:A0:FE:66:24:BB:A2:47:A4:36:5F:5B:72:71:2E:0F:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e71706e7-432a-47e2-8dac-e91f251f3242/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e71706e7-432a-47e2-8dac-e91f251f3242/32582a9a43c1bb8f66046cc95a7cfac78873ee3b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.72.0/21
                  200.10.234.0/24
                  200.10.236.0/23
                IPv6:
                  2800:1f0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16471

    Signature Algorithm: sha256WithRSAEncryption
         7e:ff:85:9e:c0:a2:e0:ea:7d:c8:5d:7d:5b:d1:05:ae:aa:30:
         1e:6d:d3:31:74:5e:f0:8a:e4:1e:01:22:60:dd:fb:ba:69:a1:
         8f:ed:a5:5e:cc:32:75:17:2f:1a:37:b6:bb:f7:86:95:99:41:
         c9:cb:6e:21:f6:9f:ae:8c:a3:31:74:14:3b:a5:ef:d9:38:9c:
         b5:c4:a9:db:46:bf:14:dd:64:9d:b4:4e:a9:af:ab:a8:1f:78:
         19:ce:0a:f9:96:31:0f:2d:68:18:22:50:7a:6f:01:74:1c:98:
         1f:be:ce:a5:e6:6a:e5:79:e4:dd:8b:8b:35:d5:aa:6f:eb:69:
         a0:4f:f4:36:fd:13:9c:87:59:d8:a2:12:cc:31:51:cf:0e:1e:
         c2:cc:4d:8a:b7:ee:5f:5b:b5:df:06:50:ab:99:d3:71:7d:52:
         cb:7f:a8:cb:08:9b:b9:22:b8:b3:7b:fd:16:1d:46:ff:49:46:
         05:96:31:09:8f:0d:e0:40:cf:de:b8:0d:c8:14:a8:37:05:98:
         f4:ed:64:a0:5d:54:ae:7d:bf:86:3c:aa:c8:c3:f4:b1:72:c2:
         86:75:d3:74:e0:b0:6b:4f:5b:48:3f:68:a2:b7:d0:57:eb:0c:
         34:d3:53:ef:a5:05:aa:2a:53:b2:d4:db:2e:8e:c3:b5:80:ce:
         2f:19:1a:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org