Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34eab819a0f53f7358f062ae9c8233b8d66c55de.cer
File:                     34eab819a0f53f7358f062ae9c8233b8d66c55de.cer (raw, json)
Hash identifier:          D8XweFEbedErmyK9n647bEadxpIpTKTvxMiEiSInF9c=
Subject key identifier:   50:0F:AC:5C:67:2A:FE:D3:2D:91:3C:BC:69:0C:6F:70:52:75:53:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB8197
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a0312904-de20-48ca-90aa-6d5046efdf81/34eab819a0f53f7358f062ae9c8233b8d66c55de.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a0312904-de20-48ca-90aa-6d5046efdf81/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 18 Feb 2019 17:52:36 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.6.17.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16482711 (0xfb8197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 18 17:52:36 2019 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=34eab819a0f53f7358f062ae9c8233b8d66c55de
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:62:97:18:bc:24:07:70:0e:69:1f:ee:6a:0c:
                    50:a0:19:2a:64:2b:cb:29:fe:f6:c3:45:00:cc:c6:
                    3c:45:ff:98:cb:43:1c:aa:df:cd:ee:b4:65:db:3b:
                    63:94:99:d5:60:19:64:39:fb:c3:a2:0d:93:0c:83:
                    9f:1d:4a:cc:ea:a9:40:aa:45:86:af:d1:95:3c:8d:
                    72:7e:88:75:2e:18:41:eb:6d:9a:d8:b4:cc:59:e9:
                    71:da:66:a7:97:8e:b6:49:16:d3:cd:34:fb:c4:61:
                    5f:a8:3a:36:b4:49:c5:1d:18:1b:d1:3f:a4:5c:9f:
                    3e:60:17:39:ef:1e:b7:19:49:de:6f:aa:8a:b1:84:
                    6d:d2:24:a5:fb:9d:ad:28:fe:72:b9:62:bb:a1:05:
                    43:b5:73:21:aa:41:f1:2d:bc:8c:73:0c:e4:68:f9:
                    88:42:42:a1:44:bd:53:7f:56:21:9b:63:41:dc:b3:
                    a9:50:67:03:f5:e6:1d:1c:99:15:29:50:e3:97:6c:
                    ad:77:c2:25:b8:d9:db:0a:f1:0f:59:90:b6:cb:18:
                    9b:fe:dc:97:da:38:24:9b:55:c7:4a:41:34:ab:60:
                    ae:a6:7e:2d:10:6c:5a:17:b8:8f:9c:39:7a:9e:64:
                    96:4f:f6:4a:ea:e9:98:d3:9b:ec:4b:c5:69:49:c8:
                    3c:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:0F:AC:5C:67:2A:FE:D3:2D:91:3C:BC:69:0C:6F:70:52:75:53:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a0312904-de20-48ca-90aa-6d5046efdf81/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a0312904-de20-48ca-90aa-6d5046efdf81/34eab819a0f53f7358f062ae9c8233b8d66c55de.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.17.0/24

    Signature Algorithm: sha256WithRSAEncryption
         31:af:5e:7f:e0:9d:36:aa:5b:2b:1b:55:1e:88:23:af:7f:40:
         e9:f0:bc:bd:04:d5:2b:c0:8e:28:bd:2f:04:b1:ef:04:e8:73:
         3e:08:f3:c4:32:b7:51:3f:c6:a7:fd:42:a5:c5:74:59:32:36:
         7a:52:8f:d8:3b:96:9c:9b:c5:53:a7:cb:c8:a0:68:65:d7:21:
         55:e9:c9:f7:80:17:77:ba:1c:84:c3:51:63:b6:8a:ee:6e:c6:
         04:7e:e0:03:62:de:7c:1a:9c:0a:f8:70:ae:a1:0f:73:be:40:
         6a:aa:ff:c3:8c:0f:b9:af:bf:81:30:df:e7:53:a8:80:b9:b1:
         06:3d:6d:79:fd:98:91:2d:f8:5c:be:78:3f:4c:80:b4:e0:dd:
         41:ca:ab:b3:ae:99:4e:52:c9:b7:bd:65:a9:a3:88:5b:7d:49:
         02:2c:f1:fc:af:a4:21:27:60:10:37:c0:6b:2f:d5:bc:30:37:
         03:d8:54:8a:80:08:35:d4:a5:ff:3d:52:7a:73:f9:9f:ee:60:
         f9:1a:f6:db:19:54:85:30:38:b6:c6:f5:6d:62:7c:03:23:b6:
         2c:a7:fd:63:7d:58:e1:4b:c3:03:03:66:20:40:3f:23:2e:7c:
         b2:fc:3c:f7:8f:1a:18:8e:67:43:e9:e3:2b:92:00:70:0f:a7:
         f1:90:10:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org