Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42b08b0342f4f7f7c4e44054026d23d7568373f6.cer
File:                     42b08b0342f4f7f7c4e44054026d23d7568373f6.cer (raw, json)
Hash identifier:          6Qooh6vrzT1GVzhW6ZrB+3G8FSGcNxY9Fs4bDQLmqhk=
Subject key identifier:   1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA02EA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Mar 2021 20:18:59 +0000
Certificate not after:    Sat 20 Jan 2024 02:36:46 +0000
Subordinate resources:    AS: 270110
                          IP: 189.85.100.0/22
                          IP: 2806:3b1::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14287594 (0xda02ea)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 20:18:59 2021 GMT
            Not After : Jan 20 02:36:46 2024 GMT
        Subject: CN=42b08b0342f4f7f7c4e44054026d23d7568373f6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:00:0a:af:40:2c:1a:3c:8a:70:22:af:b9:2f:
                    f9:62:ea:21:15:3b:09:cf:05:67:e4:b5:e7:fa:5a:
                    90:35:b1:36:23:6c:97:ea:5d:f7:f5:0e:32:a5:b5:
                    de:3b:d3:0c:ca:39:48:2e:95:59:d6:44:a3:b2:80:
                    68:c0:2b:c1:4d:8b:75:e1:94:b8:f7:ae:22:5f:6d:
                    83:ba:fe:7e:4b:2f:67:1c:f4:d5:c1:88:af:4b:54:
                    6a:ea:ff:82:22:08:9d:1b:db:7c:e2:30:39:09:42:
                    19:90:95:85:44:d3:93:68:76:75:a6:09:d0:91:d8:
                    b2:a5:ce:98:c9:85:eb:8b:d2:3b:ab:96:12:af:ce:
                    21:08:d5:1b:fd:cf:c9:96:b5:62:47:3a:a4:6b:69:
                    3e:a7:17:3c:c4:3e:c6:b6:f3:e2:98:1a:43:dd:f4:
                    22:92:cf:f5:51:56:a9:92:a7:a2:b9:7e:9d:45:8f:
                    91:85:70:cd:72:e3:f5:aa:fe:ec:b9:81:10:1d:8d:
                    8f:dd:ef:b3:09:2e:c7:a1:3b:29:24:bf:8a:ef:61:
                    56:84:cd:e2:5d:c5:05:6e:98:63:fe:3a:fe:33:bd:
                    44:12:85:88:97:86:87:ca:dc:21:8a:0e:d6:c6:07:
                    9a:3b:57:a5:61:d6:92:0f:71:35:33:c2:25:d7:e5:
                    9c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:47:29:D2:C3:62:FF:76:5B:8A:D4:B8:F1:D9:B7:18:24:A4:F4:5F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/45206155-092c-4591-84e4-f7e86f1bdfdc/42b08b0342f4f7f7c4e44054026d23d7568373f6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.100.0/22
                IPv6:
                  2806:3b1::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270110

    Signature Algorithm: sha256WithRSAEncryption
         9a:d4:dc:85:09:f0:34:16:fd:45:82:b2:fc:22:c0:b4:77:41:
         7f:60:cf:fa:ae:e5:92:18:77:e3:ec:bb:13:b1:10:07:66:18:
         aa:98:d6:47:69:55:20:cc:da:94:1e:96:8c:0e:1d:fc:96:16:
         cd:11:fb:e5:93:8f:d2:2d:f4:9a:da:62:0e:42:72:7c:cc:b2:
         ac:bf:3e:d0:89:f7:c7:47:5a:33:5d:0d:59:e9:19:c0:ba:20:
         42:61:2b:26:38:55:c9:1a:39:ab:a6:27:8d:64:02:f3:6a:0c:
         9a:85:70:80:8a:c5:37:cf:e3:12:0b:ec:41:be:b0:3f:0f:b0:
         bc:66:00:29:2e:9c:9e:a9:91:18:a6:16:a8:70:7f:8a:a5:72:
         ce:12:35:df:a7:33:a2:6e:0f:78:4b:08:11:bc:50:19:d3:b9:
         e2:cd:0a:2e:a1:18:f3:0d:68:92:ca:d4:b0:00:d8:32:16:77:
         10:14:3a:cc:61:55:15:c0:2f:9e:ad:a0:27:d1:42:79:23:bb:
         d1:d4:38:1a:02:a0:5e:ed:cf:c2:f0:f1:50:5d:b2:65:12:1b:
         e3:a7:1a:76:1c:7d:13:05:38:c6:e0:81:a7:f0:0e:8f:7b:52:
         cc:9c:d7:50:1d:95:6a:a4:8e:56:21:6c:8c:82:51:3c:3b:e4:
         a3:58:23:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org