Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer
File:                     43d1351614e693788211d4b7aaaf7f8f5d919d3d.cer (raw, json)
Hash identifier:          UkMy7nKTPt5CO3fBTNPW1w3Cgpv3aKnSps46yc88dsM=
Subject key identifier:   CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D366D9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 30 Sep 2022 19:07:14 +0000
Certificate not after:    Sun 21 Jul 2024 15:43:03 +0000
Subordinate resources:    AS: 272875
                          IP: 2803:4a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13854425 (0xd366d9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 30 19:07:14 2022 GMT
            Not After : Jul 21 15:43:03 2024 GMT
        Subject: CN=43d1351614e693788211d4b7aaaf7f8f5d919d3d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:a1:d2:14:dd:f5:ab:26:73:ed:5f:e4:32:0f:
                    95:5a:86:17:6a:c0:6c:f1:7f:89:aa:fc:98:70:3b:
                    b5:98:52:2f:22:72:71:fe:92:92:3d:28:9f:7b:b6:
                    78:d4:39:0c:c5:db:1d:5d:2e:ed:80:d1:da:fe:bf:
                    26:d3:c6:43:aa:e8:09:ff:ef:5e:82:43:2e:ca:62:
                    79:70:3a:80:7a:f6:94:1d:cd:50:49:8f:d3:15:e5:
                    cc:d1:d9:83:f0:f6:de:aa:0b:a1:c5:a8:28:37:8f:
                    37:b2:a3:d5:98:ef:ca:a3:eb:38:de:a6:6a:a2:f6:
                    48:a6:9b:5d:3c:03:c3:e0:1c:39:db:65:b2:dd:d2:
                    36:08:ec:b3:fe:f5:86:c4:ad:b0:1f:0d:1b:d7:45:
                    d5:37:76:34:4c:99:85:0c:3f:bc:33:6d:5c:ad:9a:
                    b9:39:d6:f0:c2:2b:91:37:fd:79:56:a5:58:8a:9b:
                    6a:84:ae:39:ff:93:bb:65:5a:c9:bb:21:97:4b:24:
                    0e:45:37:b7:4d:53:66:44:05:da:5a:3f:77:56:2c:
                    1d:fe:b5:59:40:fd:96:32:99:e6:3d:44:67:24:0a:
                    ba:81:48:69:d1:b8:b4:50:71:fd:0d:23:b8:38:c0:
                    65:42:fa:36:19:63:50:7b:af:26:de:ff:36:93:af:
                    50:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:68:5C:F7:85:F0:12:21:37:BD:7F:BF:AE:D3:EF:F7:5C:3D:27:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/43d9ca35-7fc1-4c79-9aea-e96b7469d36b/43d1351614e693788211d4b7aaaf7f8f5d919d3d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272875

    Signature Algorithm: sha256WithRSAEncryption
         51:18:58:8e:3b:ff:d3:ab:52:a8:dd:74:a8:4b:71:45:08:cb:
         59:15:e5:f8:ee:6a:3b:e8:04:80:df:26:90:f8:4d:2a:26:15:
         b9:40:ed:e0:02:8e:b1:b2:fe:f4:f6:0f:b8:b7:00:1f:bd:04:
         44:f9:ad:ae:b6:ae:6f:01:61:0f:4b:77:b5:8e:06:1c:e6:98:
         8d:de:97:66:a5:cc:89:28:01:7f:0f:c1:00:70:d8:08:39:32:
         d9:eb:41:65:ba:b0:2d:61:44:2d:76:0a:6d:8a:83:05:cc:07:
         95:f5:d4:a3:d3:39:d1:dc:b9:51:44:c8:39:93:49:f4:59:d6:
         6c:8f:6f:bb:0e:3d:52:a6:f6:a0:21:d9:cf:57:26:12:52:2d:
         2b:3f:00:2e:35:29:d3:dc:5b:0f:54:2b:36:43:88:3d:d8:fc:
         cf:ff:86:b6:84:72:36:ed:ae:7a:f7:18:e1:47:0e:51:45:8e:
         04:ca:51:bf:ba:58:5c:63:b2:8d:47:e1:52:56:b1:99:27:b9:
         83:80:53:ea:46:20:59:dc:86:d2:d3:89:70:8d:18:07:17:74:
         55:74:c0:41:62:15:55:4c:14:9a:43:86:68:78:42:68:99:db:
         a1:51:36:a9:e4:06:89:da:18:49:dd:8d:4c:cc:a3:f8:b6:e0:
         a4:42:82:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org