Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/376df19b74f764e5fefb43d6e846f1402b16113e.cer
File:                     376df19b74f764e5fefb43d6e846f1402b16113e.cer (raw, json)
Hash identifier:          vIphbGwlZBrcBc/NxaEw4eDQ1T8xiST8mN38y4hLyYU=
Subject key identifier:   F1:C3:9F:98:07:FE:B0:7E:19:A8:26:B4:E9:6F:C6:BD:5D:B5:5A:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF560A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fbe46aeb-e718-4fc4-918a-c4aa8379ff16/376df19b74f764e5fefb43d6e846f1402b16113e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fbe46aeb-e718-4fc4-918a-c4aa8379ff16/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:15:23 +0000
Certificate not after:    Mon 23 Dec 2024 13:51:52 +0000
Subordinate resources:    AS: 262394
                          IP: 138.118.76.0/22
                          IP: 168.121.228.0/22
                          IP: 168.197.192.0/22
                          IP: 177.125.152.0/21
                          IP: 177.129.88.0/21
                          IP: 2804:8cc::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16733706 (0xff560a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:15:23 2023 GMT
            Not After : Dec 23 13:51:52 2024 GMT
        Subject: CN=376df19b74f764e5fefb43d6e846f1402b16113e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:89:24:17:24:7a:fc:b6:d7:e2:a4:9b:af:21:
                    f1:55:ea:8d:cc:b8:85:ae:92:3b:45:46:65:bb:2f:
                    77:bb:65:47:37:0f:1f:fc:f2:2e:2a:99:c8:d7:bb:
                    21:c5:db:72:7c:1d:31:28:86:7c:17:f0:be:03:b6:
                    26:33:3e:69:59:48:55:3f:09:22:8f:2f:dd:52:74:
                    02:59:ae:77:ef:ea:cf:40:06:14:ae:0c:07:6a:fb:
                    5a:c3:0f:fe:ac:8d:8b:c2:b9:af:db:c4:8d:ad:fa:
                    9d:23:fe:96:8c:7b:98:4e:a5:fb:24:7d:53:d0:2a:
                    b1:7b:30:78:19:3d:6c:8c:c3:a4:bf:43:06:54:ba:
                    a4:5e:69:d6:a3:10:b1:c5:9b:5a:06:9b:85:fc:8a:
                    d8:88:3e:2e:39:0b:6b:b1:aa:43:f1:d6:85:d2:3f:
                    6f:a3:d5:83:5c:8e:28:ca:1e:b6:c3:f0:2c:d4:61:
                    eb:48:3b:b6:e4:45:d9:78:74:ee:1b:72:b5:dc:e2:
                    d3:9f:91:bb:2c:24:99:9b:27:26:8f:57:12:78:27:
                    66:de:13:30:ed:ad:69:34:37:f4:f4:b0:6d:3f:8b:
                    e3:ee:01:1e:bc:4f:70:54:8d:ba:aa:83:f4:af:b1:
                    f7:dc:84:1e:c5:ea:04:f4:bb:2c:d3:95:76:0e:d6:
                    6b:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:C3:9F:98:07:FE:B0:7E:19:A8:26:B4:E9:6F:C6:BD:5D:B5:5A:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fbe46aeb-e718-4fc4-918a-c4aa8379ff16/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fbe46aeb-e718-4fc4-918a-c4aa8379ff16/376df19b74f764e5fefb43d6e846f1402b16113e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.118.76.0/22
                  168.121.228.0/22
                  168.197.192.0/22
                  177.125.152.0/21
                  177.129.88.0/21
                IPv6:
                  2804:8cc::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262394

    Signature Algorithm: sha256WithRSAEncryption
         30:a1:ae:f8:cc:a2:01:90:5f:b0:93:b1:ea:c9:bd:d5:08:0b:
         b3:28:47:44:91:1f:dd:6a:b5:b6:2b:40:d9:cd:6d:3a:0b:2e:
         fb:10:15:f5:02:92:5d:92:e3:8e:cd:56:06:7e:b7:c1:cf:39:
         9b:5f:62:78:ce:e9:bb:b2:5f:79:ff:4b:7a:e5:c3:ae:51:6e:
         78:ec:82:1d:c9:cc:41:4b:cb:fe:34:7d:f8:7a:24:ab:8f:9c:
         9e:93:5f:4f:96:f3:ad:e1:f5:30:d2:2b:fa:7b:b4:1d:27:3a:
         b1:82:df:30:08:07:2e:26:c0:d1:bc:7a:9e:c7:cb:f0:de:a2:
         02:b8:2d:5c:18:21:63:19:61:86:c2:ab:00:55:a1:39:b7:db:
         96:b5:03:16:18:84:c3:42:29:3f:65:96:dd:fc:89:df:25:f2:
         f4:b7:f3:4a:de:2f:ae:65:b8:2a:57:8a:43:52:47:b5:83:42:
         ed:6c:e6:37:6c:f3:1b:c3:30:9a:27:85:b9:02:6e:14:a9:a7:
         f6:bc:4a:c3:a0:ef:cb:3a:50:88:89:c0:55:33:1e:7f:21:a8:
         f4:b9:27:9b:a8:19:19:10:1d:79:b5:48:45:03:b9:15:94:e2:
         b6:c1:94:c2:24:55:b8:3c:03:fe:47:6d:4c:8a:08:29:60:78:
         6c:e6:05:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org