Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4091dd5f86b6759109bca712d6384dfc45084ad2.cer
File:                     4091dd5f86b6759109bca712d6384dfc45084ad2.cer (raw, json)
Hash identifier:          puXvYyUAyy6KEAnuchYyRpL8+d10ZS7kMVEW1OTaos8=
Subject key identifier:   11:12:78:1E:88:8F:30:FB:DA:37:18:80:61:AE:9B:1B:F1:6A:D7:E8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E847B3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/643962d9-654c-4cf9-aeb1-291e22bc90ba/4091dd5f86b6759109bca712d6384dfc45084ad2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/643962d9-654c-4cf9-aeb1-291e22bc90ba/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 22:58:12 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 200.10.139.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15222707 (0xe847b3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 22:58:12 2023 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=4091dd5f86b6759109bca712d6384dfc45084ad2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:d5:8c:2a:55:97:0b:f8:4d:c7:07:86:d3:54:
                    95:07:d5:27:fd:fe:1d:c2:cb:09:c7:be:28:b4:48:
                    46:89:66:6f:f1:cb:2f:14:a5:49:35:19:34:20:ec:
                    96:c8:51:9e:94:97:c1:e5:3d:8d:9a:32:6c:ce:7c:
                    a2:69:94:6f:fa:5f:fa:cf:0f:0a:d0:ae:45:bf:d7:
                    6c:b4:df:4f:90:36:6f:9c:a9:86:97:39:2d:49:99:
                    50:02:1a:ee:ac:8e:61:0e:0b:43:75:4e:fd:3b:36:
                    a0:c4:9b:97:08:04:46:52:65:e3:43:29:f0:ed:27:
                    2f:c7:99:02:6b:89:c6:7d:b1:d5:0d:38:e7:7d:a0:
                    9e:0e:c4:cd:9b:5f:c9:07:18:fb:01:2e:f5:f6:b1:
                    26:51:ca:dd:6b:4a:7d:46:4f:31:ff:59:9c:9c:1a:
                    3a:c0:fd:42:ad:04:ff:20:11:9e:b5:fa:a8:13:c6:
                    a1:54:4b:68:c5:97:47:80:6a:5a:f0:02:cd:da:ec:
                    b7:ab:c9:34:1b:01:21:bb:f0:7f:1d:34:e1:60:8f:
                    ef:46:b7:3f:f4:2b:45:6e:88:a0:b9:bd:68:29:44:
                    75:cc:19:0f:da:02:54:07:dc:a1:17:63:09:f0:5a:
                    4d:2f:f7:08:c3:13:5b:13:df:88:f7:44:4d:69:b1:
                    c0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:12:78:1E:88:8F:30:FB:DA:37:18:80:61:AE:9B:1B:F1:6A:D7:E8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/643962d9-654c-4cf9-aeb1-291e22bc90ba/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/643962d9-654c-4cf9-aeb1-291e22bc90ba/4091dd5f86b6759109bca712d6384dfc45084ad2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.139.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ad:d7:96:a4:45:54:3f:75:f4:4e:06:e0:98:3a:9a:37:4a:48:
         ca:67:a1:6a:05:41:3b:8d:5d:11:ee:d6:a7:f7:39:b3:77:60:
         02:07:d8:7d:b8:60:92:a7:a4:ca:d6:fc:ac:c9:73:47:34:8b:
         2a:a5:83:0d:39:7b:ef:ed:fa:d2:be:5d:4e:d5:53:2e:42:46:
         0c:7e:6c:d4:04:7c:c2:af:d3:c5:2d:3a:3c:6a:4a:31:2f:88:
         95:0b:2d:dc:2f:5f:58:7a:c7:34:8d:5a:e2:a0:25:e6:79:7f:
         5a:d2:9c:28:a0:d7:71:e6:a1:83:86:82:57:cd:d0:2d:4c:76:
         de:fd:02:35:98:10:16:45:ed:66:2d:44:51:56:30:69:fe:06:
         8d:45:c2:d8:c8:1b:98:1c:c6:f3:2e:ae:8e:f0:9d:df:c9:33:
         f2:b2:04:24:70:15:06:31:55:09:30:b4:1e:1b:c7:1a:da:9a:
         80:35:a8:0b:84:a2:31:d4:1a:43:54:7c:8b:0b:9b:d7:19:90:
         61:1c:85:4d:84:8e:20:df:ce:a7:54:f5:1d:ad:07:f9:4d:41:
         a2:ff:0f:06:a6:de:1a:fe:06:08:fb:b0:1b:c1:a6:58:4f:87:
         46:55:a4:bf:44:2d:ac:57:2f:3a:55:80:69:01:78:43:2d:22:
         39:24:76:ad
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAOhHszANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUwMzIyNTgxMloXDTI0MTEwMTA0MDAw
MFowMzExMC8GA1UEAxMoNDA5MWRkNWY4NmI2NzU5MTA5YmNhNzEyZDYzODRkZmM0
NTA4NGFkMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIXVjCpVlwv4
TccHhtNUlQfVJ/3+HcLLCce+KLRIRolmb/HLLxSlSTUZNCDslshRnpSXweU9jZoy
bM58ommUb/pf+s8PCtCuRb/XbLTfT5A2b5yphpc5LUmZUAIa7qyOYQ4LQ3VO/Ts2
oMSblwgERlJl40Mp8O0nL8eZAmuJxn2x1Q04532gng7EzZtfyQcY+wEu9faxJlHK
3WtKfUZPMf9ZnJwaOsD9Qq0E/yARnrX6qBPGoVRLaMWXR4BqWvACzdrst6vJNBsB
Ibvwfx004WCP70a3P/QrRW6IoLm9aClEdcwZD9oCVAfcoRdjCfBaTS/3CMMTWxPf
iPdETWmxwK0CAwEAAaOCAt4wggLaMB0GA1UdDgQWBBQREngeiI8w+9o3GIBhrpsb
8WrX6DAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy82NDM5NjJkOS02NTRj
LTRjZjktYWViMS0yOTFlMjJiYzkwYmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNjQzOTYyZDktNjU0Yy00
Y2Y5LWFlYjEtMjkxZTIyYmM5MGJhLzQwOTFkZDVmODZiNjc1OTEwOWJjYTcxMmQ2
Mzg0ZGZjNDUwODRhZDIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgKizANBgkqhkiG9w0BAQsFAAOC
AQEArdeWpEVUP3X0TgbgmDqaN0pIymehagVBO41dEe7Wp/c5s3dgAgfYfbhgkqek
ytb8rMlzRzSLKqWDDTl77+360r5dTtVTLkJGDH5s1AR8wq/TxS06PGpKMS+IlQst
3C9fWHrHNI1a4qAl5nl/WtKcKKDXceahg4aCV83QLUx23v0CNZgQFkXtZi1EUVYw
af4GjUXC2MgbmBzG8y6ujvCd38kz8rIEJHAVBjFVCTC0HhvHGtqagDWoC4SiMdQa
Q1R8iwub1xmQYRyFTYSOIN/Op1T1Ha0H+U1Bov8PBqbeGv4GCPuwG8GmWE+HRlWk
v0QtrFcvOlWAaQF4Qy0iOSR2rQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org