Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.cer
File:                     42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.cer (raw, json)
Hash identifier:          PQPwHG7nvu3zdma3a0XSVUMuyzTIv31DZ42jAKjHohc=
Subject key identifier:   E7:9E:BE:5D:25:A6:32:5E:1E:8E:4E:9D:78:22:A8:DE:BD:09:57:CE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB31E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Sep 2021 20:17:41 +0000
Certificate not after:    Wed 30 Oct 2024 18:28:52 +0000
Subordinate resources:    AS: 271844
                          IP: 2801:10e::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16462308 (0xfb31e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 23 20:17:41 2021 GMT
            Not After : Oct 30 18:28:52 2024 GMT
        Subject: CN=42f3ea5b6e4b307fe0fd6659359a0e86b013f16c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:29:fd:65:f7:3d:f7:9d:dc:3f:b8:67:47:de:
                    0d:30:49:24:6f:dc:18:e6:90:b5:89:19:17:1c:5e:
                    5d:f9:b2:93:8e:33:70:e2:60:fe:f7:3e:5e:72:8f:
                    1d:2f:c4:4c:c4:f6:d8:41:c0:c3:cf:f7:cb:ca:b7:
                    ec:22:72:b9:79:e2:c1:b8:4a:75:4c:00:31:8e:30:
                    2f:e5:5c:70:e0:93:48:c0:df:2f:19:fd:5e:5f:a5:
                    38:05:91:0c:64:e4:b2:42:43:7b:5f:7e:2e:76:e1:
                    49:45:ac:5f:fb:e5:00:0d:e7:ef:87:13:52:12:57:
                    23:65:ec:dd:76:4a:cf:c8:1e:5b:49:b8:37:5c:be:
                    60:47:f7:e2:39:1a:86:fa:0f:15:0a:6c:58:4f:17:
                    64:25:7e:5f:cc:47:d0:51:5e:50:61:08:b7:03:3e:
                    af:95:d8:5d:6a:00:d5:a1:45:a5:57:0c:5d:d8:a0:
                    bf:7b:d5:a5:63:08:0e:5f:00:5c:9e:d6:1e:4b:1a:
                    b2:f2:cd:1f:90:ec:69:c3:7d:6c:b8:74:15:8d:2f:
                    15:21:4c:b0:2a:e9:1b:f4:67:7b:8c:11:ea:69:23:
                    0e:0b:aa:62:3b:db:d4:a0:5a:86:63:a8:e6:a6:0b:
                    75:d2:fc:fe:c8:7a:b7:ac:a4:82:ac:cc:cc:3e:06:
                    3f:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:9E:BE:5D:25:A6:32:5E:1E:8E:4E:9D:78:22:A8:DE:BD:09:57:CE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/09205107-19c4-475b-99a3-8232b83a7f1b/42f3ea5b6e4b307fe0fd6659359a0e86b013f16c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10e::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271844

    Signature Algorithm: sha256WithRSAEncryption
         55:d7:24:ac:34:78:21:82:1a:e7:6b:56:60:46:ce:ee:03:49:
         a2:f4:74:a8:24:fb:9d:72:90:bd:0c:42:39:77:b9:1f:3a:17:
         18:43:55:e1:32:37:b6:20:fa:ac:62:a2:d3:0e:52:d9:c9:3d:
         33:5c:63:88:3c:9b:1d:7a:09:f3:b7:e3:a7:06:b5:dc:9e:1c:
         e7:44:66:c9:62:ac:c9:5d:6d:23:2b:bd:fb:3d:15:78:08:7d:
         89:c2:44:46:22:84:5a:03:eb:6d:bd:ea:69:90:a7:1d:70:9c:
         f5:fd:21:9a:72:34:48:26:e5:c3:43:e4:9f:e0:e2:c5:da:d7:
         35:b5:0b:44:ff:b8:42:af:64:d3:00:ed:0a:86:6a:d2:42:13:
         9d:fa:20:b5:e6:cd:24:94:8c:1b:41:d4:e6:3f:78:51:90:05:
         05:5a:f8:98:8d:ce:6e:93:88:8f:85:42:3e:54:40:a6:74:d5:
         57:a0:7a:e8:a9:bb:58:91:e5:35:e7:5b:fc:dc:0f:41:dc:f3:
         2a:05:00:ec:be:e8:9c:d6:eb:cb:8e:a4:4f:b6:4e:10:06:58:
         72:ec:d7:ae:10:ea:c6:d3:69:8d:bb:04:c4:81:27:21:c3:56:
         79:3b:43:47:83:17:19:1d:92:6d:94:7a:93:e9:26:da:b7:da:
         11:80:58:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org