Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3b91e541a1675f44d8143d83005be20a3739716d.cer
File:                     3b91e541a1675f44d8143d83005be20a3739716d.cer (raw, json)
Hash identifier:          5NVF1Oan7OEAN17hnJ6rzq5xAh74qaTeuKAqA8KCZmE=
Subject key identifier:   49:5A:F4:D1:CD:2E:1D:7F:05:78:63:47:E1:66:5A:D5:95:43:89:22
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB8A64
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c0276b61-ca78-4e02-8c7d-c089320548f6/3b91e541a1675f44d8143d83005be20a3739716d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c0276b61-ca78-4e02-8c7d-c089320548f6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 17 Nov 2021 11:06:29 +0000
Certificate not after:    Wed 07 Feb 2024 19:32:54 +0000
Subordinate resources:    AS: 28052
                          IP: 200.11.29.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14387812 (0xdb8a64)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 11:06:29 2021 GMT
            Not After : Feb  7 19:32:54 2024 GMT
        Subject: CN=3b91e541a1675f44d8143d83005be20a3739716d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:e7:9c:d4:97:c6:89:23:9a:30:fe:c6:4b:9e:
                    c8:71:65:7d:36:89:db:90:9a:54:9f:76:1b:6c:62:
                    61:5a:c8:15:46:fe:36:cc:19:6a:40:ba:77:9c:cc:
                    26:05:bc:3d:e2:8f:e9:01:cc:46:a6:44:76:b9:a8:
                    4c:02:bb:97:86:72:62:c0:ee:9f:af:1f:bc:23:f7:
                    e6:02:ec:73:01:06:6c:d5:4a:c1:ce:78:a9:9a:95:
                    04:c8:a2:11:c2:57:05:2e:b2:38:ef:8e:67:73:21:
                    07:02:33:13:60:a5:46:49:19:fb:66:84:b0:f9:28:
                    39:25:81:25:0f:de:94:24:1b:9c:b4:3b:90:ad:68:
                    d9:85:54:11:73:31:3b:ba:17:e1:37:08:41:00:26:
                    2e:7f:d4:8a:d3:4c:1c:c2:a9:32:59:e0:ae:e8:5c:
                    49:42:52:63:cb:b8:33:e1:57:66:37:5b:83:eb:5e:
                    d9:14:47:a3:bd:00:51:92:f4:2a:8b:14:7a:7c:00:
                    a3:69:b6:2b:35:e5:75:4c:23:10:40:1b:c5:21:07:
                    b9:3c:6f:6e:28:79:e6:98:d2:24:d1:0c:b7:3e:17:
                    e8:0a:99:67:fa:85:52:37:df:58:79:53:cb:b4:e2:
                    db:cd:6a:4f:80:35:7a:98:32:a2:00:c8:41:1d:6f:
                    3d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:5A:F4:D1:CD:2E:1D:7F:05:78:63:47:E1:66:5A:D5:95:43:89:22
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c0276b61-ca78-4e02-8c7d-c089320548f6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c0276b61-ca78-4e02-8c7d-c089320548f6/3b91e541a1675f44d8143d83005be20a3739716d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.11.29.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28052

    Signature Algorithm: sha256WithRSAEncryption
         a2:68:5b:73:b4:cf:72:3f:db:ff:a4:77:98:9c:67:d8:50:5d:
         89:58:f8:cb:15:cf:b4:c1:47:9e:83:a1:1d:a7:eb:9d:d9:03:
         af:e2:bb:96:5b:2c:83:95:e1:54:26:ac:0c:9f:e5:5d:0d:d9:
         e0:3d:41:e1:1a:d3:2c:23:9e:41:e0:9c:4e:e0:65:bf:7b:a9:
         d6:9a:eb:c0:cc:49:b0:58:ca:33:9f:57:b7:a5:67:fe:7c:e3:
         fc:64:78:3c:c5:36:7a:59:f1:29:32:9c:e5:e4:31:de:58:0a:
         15:c5:3c:bd:0c:0f:b4:b8:3b:2e:1f:4b:ff:80:5e:d2:bd:63:
         d6:03:b3:7c:95:a3:37:88:de:9a:3d:08:b1:90:10:00:0f:a7:
         9d:d7:b0:11:b8:5a:1f:cc:22:ce:fd:4f:2d:19:49:01:ab:3a:
         5a:24:98:65:51:43:dd:bc:06:04:a0:56:66:45:92:3d:37:70:
         93:23:47:5e:79:bd:5c:ba:9c:3f:f2:a1:eb:f6:c7:d9:0f:7c:
         df:c3:bb:36:0c:6c:37:18:44:8a:71:99:24:45:41:f2:28:13:
         9a:26:dd:0e:0f:ce:b5:64:41:9e:93:38:19:c8:0c:44:25:aa:
         77:74:12:75:ba:e1:63:fa:35:fa:20:89:f6:89:62:e5:ca:7f:
         03:dc:89:ad
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org