Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3e9fb67f683a9f133313d58c2a61dabb59c3d853.cer
File:                     3e9fb67f683a9f133313d58c2a61dabb59c3d853.cer (raw, json)
Hash identifier:          7HHMroVXhUyllP224MJRgF7OiM1XkCzl5GPhSjmBC6o=
Subject key identifier:   A7:C6:77:5B:38:FA:E6:69:BA:12:42:C3:DE:E0:B2:F1:B6:19:3B:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EA6CF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/39321bb4-b1be-4d13-b8a1-7321cb54b90d/3e9fb67f683a9f133313d58c2a61dabb59c3d853.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/39321bb4-b1be-4d13-b8a1-7321cb54b90d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 19 May 2023 00:57:24 +0000
Certificate not after:    Sun 16 Mar 2025 19:35:31 +0000
Subordinate resources:    AS: 273000
                          IP: 2803:5d90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15363313 (0xea6cf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 19 00:57:24 2023 GMT
            Not After : Mar 16 19:35:31 2025 GMT
        Subject: CN=3e9fb67f683a9f133313d58c2a61dabb59c3d853
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:da:de:6b:19:d3:d8:34:53:c8:d3:ed:d2:b6:
                    56:48:28:f0:a0:33:9d:bc:20:f1:a0:f4:65:92:ea:
                    b7:41:59:8f:c1:13:ad:73:fc:27:e4:fe:c7:c4:f1:
                    0a:b8:51:92:b5:02:32:03:a1:a4:dc:3b:0c:29:11:
                    26:2b:db:e6:37:03:aa:dc:12:0b:99:c2:0b:6a:96:
                    92:55:cc:8d:25:d0:10:a9:cd:31:d9:79:c3:88:1d:
                    70:cf:27:5b:cf:10:08:f9:99:71:82:20:e0:c4:e3:
                    4a:ea:8c:f7:10:ed:4f:72:6d:d7:5e:d9:ef:ce:0b:
                    f9:97:39:fb:5f:bf:0d:fe:75:8a:17:a9:07:f2:c8:
                    42:1a:33:7d:09:fc:40:ab:13:4f:c7:ae:16:71:a0:
                    b4:6e:c1:fa:26:73:f9:a4:f1:13:ae:30:8f:e1:ef:
                    27:9b:f9:a7:d4:ee:62:67:66:db:6a:28:5c:29:b8:
                    7d:0b:a6:d2:81:bc:26:47:f8:c0:2e:f7:f6:2e:79:
                    e8:b3:84:76:95:79:68:ef:5a:71:30:90:a3:c4:42:
                    82:fb:8e:8b:1e:08:d3:e7:f2:6b:22:05:bd:1a:0e:
                    13:6d:d2:e3:bc:c2:cd:98:52:da:fd:78:c7:8d:6d:
                    2f:c4:c9:ab:ce:3a:20:a0:ab:93:b8:b6:74:9c:3a:
                    e5:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:C6:77:5B:38:FA:E6:69:BA:12:42:C3:DE:E0:B2:F1:B6:19:3B:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/39321bb4-b1be-4d13-b8a1-7321cb54b90d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/39321bb4-b1be-4d13-b8a1-7321cb54b90d/3e9fb67f683a9f133313d58c2a61dabb59c3d853.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5d90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273000

    Signature Algorithm: sha256WithRSAEncryption
         30:66:9a:88:85:9c:cb:04:c6:30:4b:36:37:21:b1:45:f6:0e:
         7c:0d:1d:e4:12:83:17:4d:9e:a1:cc:3c:6e:e8:d9:88:4a:48:
         0b:4a:06:f0:27:c5:b4:ae:b9:33:61:3c:33:da:2a:e6:13:6c:
         4f:cb:8f:a8:f5:76:92:52:e3:a5:6c:0c:a3:c2:6c:93:16:ef:
         51:a7:86:58:4a:95:f4:4c:10:32:d1:84:3b:4c:7c:a1:f9:1c:
         0e:b8:88:0e:e6:d0:42:94:86:c3:ea:2e:7a:a2:0b:00:9b:27:
         fd:9b:8b:05:73:5d:b2:b5:63:97:34:b1:86:e4:a9:35:44:43:
         e8:26:dc:63:59:5c:ed:54:7e:f9:e1:4b:89:ae:8d:e8:4d:70:
         98:ce:d3:80:c6:dc:26:b5:34:3e:d0:a9:8e:c9:30:f0:54:70:
         06:51:d5:c8:95:7e:e2:a4:13:a1:ee:a1:4b:ab:38:c2:2b:5d:
         df:c7:b2:7c:21:ef:64:ce:f3:f0:a1:e5:2a:de:67:04:90:a9:
         03:d3:d2:c1:25:39:56:cc:0a:d0:50:33:c0:45:39:0c:8a:36:
         cc:6e:43:65:dd:b6:19:9d:8d:c3:f4:82:28:70:af:7c:ee:59:
         3b:cf:66:8d:d0:6a:90:42:60:e3:7e:a7:60:74:d0:3c:4b:a3:
         c7:57:b7:02
-----BEGIN CERTIFICATE-----
MIIFzDCCBLSgAwIBAgIEAOps8TANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUxOTAwNTcyNFoXDTI1MDMxNjE5MzUz
MVowMzExMC8GA1UEAxMoM2U5ZmI2N2Y2ODNhOWYxMzMzMTNkNThjMmE2MWRhYmI1
OWMzZDg1MzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAMDa3msZ09g0
U8jT7dK2Vkgo8KAznbwg8aD0ZZLqt0FZj8ETrXP8J+T+x8TxCrhRkrUCMgOhpNw7
DCkRJivb5jcDqtwSC5nCC2qWklXMjSXQEKnNMdl5w4gdcM8nW88QCPmZcYIg4MTj
SuqM9xDtT3Jt117Z784L+Zc5+1+/Df51ihepB/LIQhozfQn8QKsTT8euFnGgtG7B
+iZz+aTxE64wj+HvJ5v5p9TuYmdm22ooXCm4fQum0oG8Jkf4wC739i556LOEdpV5
aO9acTCQo8RCgvuOix4I0+fyayIFvRoOE23S47zCzZhS2v14x41tL8TJq846IKCr
k7i2dJw65a0CAwEAAaOCAvswggL3MB0GA1UdDgQWBBSnxndbOPrmaboSQsPe4LLx
thk73TAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8zOTMyMWJiNC1iMWJl
LTRkMTMtYjhhMS03MzIxY2I1NGI5MGQvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMzkzMjFiYjQtYjFiZS00
ZDEzLWI4YTEtNzMyMWNiNTRiOTBkLzNlOWZiNjdmNjgzYTlmMTMzMzEzZDU4YzJh
NjFkYWJiNTljM2Q4NTMubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAg
BggrBgEFBQcBBwEB/wQRMA8wDQQCAAIwBwMFACgDXZAwGgYIKwYBBQUHAQgBAf8E
CzAJoAcwBQIDBCpoMA0GCSqGSIb3DQEBCwUAA4IBAQAwZpqIhZzLBMYwSzY3IbFF
9g58DR3kEoMXTZ6hzDxu6NmISkgLSgbwJ8W0rrkzYTwz2irmE2xPy4+o9XaSUuOl
bAyjwmyTFu9Rp4ZYSpX0TBAy0YQ7THyh+RwOuIgO5tBClIbD6i56ogsAmyf9m4sF
c12ytWOXNLGG5Kk1REPoJtxjWVztVH754UuJro3oTXCYztOAxtwmtTQ+0KmOyTDw
VHAGUdXIlX7ipBOh7qFLqzjCK13fx7J8Ie9kzvPwoeUq3mcEkKkD09LBJTlWzArQ
UDPARTkMijbMbkNl3bYZnY3D9IIocK987lk7z2aN0GqQQmDjfqdgdNA8S6PHV7cC
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org