Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3b13f9861770c87566beea43cd0817259bf0da7d.cer
File:                     3b13f9861770c87566beea43cd0817259bf0da7d.cer (raw, json)
Hash identifier:          Q2XsSoaA2xA2F9kCdO7BrLiaUOcXpc9Njvv2EiH3qzs=
Subject key identifier:   E0:DC:10:B6:07:F6:3F:50:C0:88:3F:9D:0C:39:88:08:7A:D4:75:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEA530
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/14e29bbd-9f92-4e37-a1bb-6baca5fe353a/3b13f9861770c87566beea43cd0817259bf0da7d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/14e29bbd-9f92-4e37-a1bb-6baca5fe353a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:04:44 +0000
Certificate not after:    Thu 06 Feb 2025 14:53:21 +0000
Subordinate resources:    AS: 53137
                          IP: 170.246.200.0/22
                          IP: 177.107.160.0/20
                          IP: 186.193.160.0/20
                          IP: 200.34.224.0/19
                          IP: 2804:33c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16688432 (0xfea530)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:04:44 2023 GMT
            Not After : Feb  6 14:53:21 2025 GMT
        Subject: CN=3b13f9861770c87566beea43cd0817259bf0da7d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:ba:ad:72:89:61:08:6e:41:19:af:53:55:61:
                    0c:75:38:24:81:7c:16:9d:4d:db:c3:5d:f0:33:1d:
                    6a:c6:41:a2:35:3d:0b:97:78:24:d1:6b:a1:63:63:
                    5e:a5:b8:99:87:8c:ef:a1:62:f4:3c:fa:49:3d:7e:
                    47:4f:ce:a2:b6:4f:82:f4:28:23:3d:73:1e:cd:50:
                    29:8f:17:6d:fb:1b:5d:24:82:c6:ce:9c:64:12:ab:
                    8e:c7:3f:3d:af:74:61:70:27:96:03:bc:ba:d2:d1:
                    f6:1c:31:37:81:30:b1:1f:e8:57:1f:3b:02:17:28:
                    e8:10:a9:8d:c7:f7:04:26:4a:5b:72:9c:0b:97:7b:
                    73:3a:e5:d1:f8:a2:69:55:b2:97:48:31:04:67:8f:
                    76:39:7c:7f:a4:a6:f2:6d:06:d9:71:49:22:c5:bb:
                    f6:70:77:76:df:3f:e9:28:07:d7:55:f4:af:35:c8:
                    9e:0f:8d:00:fc:48:3a:3d:9c:23:95:71:90:04:5c:
                    da:db:fa:14:69:44:2f:3b:46:6b:86:77:13:80:9a:
                    5f:49:ef:e0:88:ea:77:77:3e:ba:00:18:95:be:b6:
                    cd:95:11:b5:91:64:f4:94:3e:78:ee:97:cc:35:fe:
                    63:90:45:50:7f:38:74:7d:29:af:d6:30:9c:4e:77:
                    b3:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E0:DC:10:B6:07:F6:3F:50:C0:88:3F:9D:0C:39:88:08:7A:D4:75:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/14e29bbd-9f92-4e37-a1bb-6baca5fe353a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/14e29bbd-9f92-4e37-a1bb-6baca5fe353a/3b13f9861770c87566beea43cd0817259bf0da7d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.200.0/22
                  177.107.160.0/20
                  186.193.160.0/20
                  200.34.224.0/19
                IPv6:
                  2804:33c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53137

    Signature Algorithm: sha256WithRSAEncryption
         3f:96:25:4c:6d:96:58:30:39:e1:76:77:48:c7:75:87:37:40:
         60:55:5b:d7:e1:da:5d:0e:db:89:98:d4:dd:49:db:0b:fe:be:
         92:23:80:e6:74:eb:db:00:35:ba:c8:a5:bf:d6:1a:bc:ed:4a:
         b6:24:96:e5:bc:03:75:b2:c4:4e:a4:cf:4c:00:2e:15:f6:5e:
         92:73:ec:36:73:36:8d:a7:02:d5:7d:94:aa:f8:df:1c:f7:61:
         1e:42:01:3c:fb:64:ef:56:32:ee:27:27:98:44:93:19:62:a2:
         30:48:b2:8c:98:e5:04:d0:e5:72:4a:f5:1b:b1:d4:f0:74:85:
         fa:b6:f7:e6:f1:df:30:bc:a7:00:ed:9c:62:2e:1f:82:1d:9f:
         c6:37:45:c0:ae:23:14:a7:62:f7:2c:66:88:9c:00:c3:bb:bd:
         20:4e:c0:3d:f8:2b:d9:69:bf:97:85:5b:bb:cd:68:d4:6a:90:
         1b:f7:01:d1:0a:62:da:11:94:4b:1b:17:5b:0e:1b:58:2f:f2:
         54:ea:dc:d4:f3:f3:c1:15:41:ec:fc:05:d5:6c:0d:97:8f:b2:
         14:f5:ae:43:a0:44:24:72:9f:04:c2:27:cb:fd:b9:c7:a1:94:
         e7:a5:9d:45:d0:31:e3:c0:d4:00:61:ee:08:95:5b:ef:cd:74:
         05:8b:f0:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org