Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45cc179ca13c077638acd408b4fc1fcfaf288ca1.cer
File:                     45cc179ca13c077638acd408b4fc1fcfaf288ca1.cer (raw, json)
Hash identifier:          1MlxQPhlo9fr+I9doy7cJzzzd56OzwGCm3eyWoPttHY=
Subject key identifier:   0A:CE:8E:36:C8:52:D0:D3:91:FA:F5:60:F0:FC:76:DA:BB:4A:98:CF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F103A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9c5ebaf2-f51f-467c-a7e0-288d9a7749db/45cc179ca13c077638acd408b4fc1fcfaf288ca1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9c5ebaf2-f51f-467c-a7e0-288d9a7749db/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Jul 2023 13:51:07 +0000
Certificate not after:    Mon 31 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 273033
                          IP: 2803:4b90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15795106 (0xf103a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  7 13:51:07 2023 GMT
            Not After : Mar 31 06:00:00 2025 GMT
        Subject: CN=45cc179ca13c077638acd408b4fc1fcfaf288ca1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:61:25:ab:d2:55:4c:19:1b:c0:26:92:27:f9:
                    8e:fa:cb:0e:bc:a3:13:02:04:06:25:cd:41:7c:2d:
                    4c:63:50:dd:35:07:98:2e:6a:21:52:ea:5c:2e:c7:
                    de:6d:e5:43:a8:11:1c:86:c3:fa:8f:f5:1e:39:d9:
                    5f:cf:c8:d4:08:e7:8d:61:f0:90:d8:9b:b8:cc:a4:
                    74:d4:24:8f:c8:44:c0:cc:f2:07:62:3e:b3:5b:d9:
                    c2:71:f6:00:01:ea:0d:91:52:a9:1e:a2:64:0a:71:
                    3a:fa:28:e2:d8:a0:5a:bd:c2:ae:99:8c:d6:fc:6a:
                    7e:34:d9:46:14:53:fe:d8:b9:ee:d7:ce:e6:fe:37:
                    fa:a0:cb:ce:7a:6b:59:0c:41:50:31:b9:d5:3e:ef:
                    91:ea:ab:77:05:a9:77:cc:d3:0f:d7:6f:a1:0b:25:
                    c4:51:3c:d7:3c:95:b0:55:df:d8:73:ed:6e:f2:72:
                    e6:e9:6e:45:cb:63:13:72:d0:96:ca:63:8a:c5:18:
                    fe:52:b1:c4:46:d7:ed:71:89:06:8a:d1:bc:50:85:
                    9f:fc:14:fd:b6:ae:27:a7:49:8b:8d:d1:21:92:6c:
                    11:22:ca:c4:21:56:a3:e7:e2:ec:b5:2c:ee:33:70:
                    a1:f6:4a:0e:27:a4:a5:5a:6c:57:de:08:1a:f1:d3:
                    1e:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:CE:8E:36:C8:52:D0:D3:91:FA:F5:60:F0:FC:76:DA:BB:4A:98:CF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9c5ebaf2-f51f-467c-a7e0-288d9a7749db/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9c5ebaf2-f51f-467c-a7e0-288d9a7749db/45cc179ca13c077638acd408b4fc1fcfaf288ca1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4b90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273033

    Signature Algorithm: sha256WithRSAEncryption
         72:b8:05:70:7d:6f:75:34:8f:4a:36:3a:76:30:16:68:0a:66:
         8a:8a:96:6f:1c:9f:2a:a9:6f:f0:dd:8c:a2:51:d5:c9:64:ed:
         84:ba:bb:f4:b9:51:bd:4e:d3:cf:65:b5:f0:7f:dd:2c:0b:f6:
         51:59:b1:0e:fe:12:0a:ba:be:2d:a6:7d:4d:1e:55:52:9e:06:
         96:4f:aa:be:b8:14:ec:72:5c:dd:29:34:21:55:d2:ac:54:86:
         97:95:33:2e:8b:f0:82:82:b1:29:48:8e:48:36:98:c9:7d:d2:
         20:82:9a:bd:99:6d:79:b9:2a:07:0e:9f:f1:2c:59:29:a0:c4:
         05:13:f8:6e:8e:cf:df:b8:73:42:bf:ed:05:61:6d:8f:cf:20:
         6b:bb:9b:58:98:12:70:cf:2c:c2:c6:16:dc:3d:c9:09:19:d6:
         5e:e8:24:4b:8d:93:89:60:c0:41:34:2e:45:15:0d:5f:8a:0e:
         8f:0e:3b:5a:60:00:7d:33:35:ac:02:d1:2c:c1:61:97:24:96:
         42:05:ec:09:52:fa:41:c7:c3:cc:f6:58:72:03:37:7f:f7:89:
         84:50:6d:90:1f:c1:2e:e3:c0:c4:e9:d8:1b:06:1e:86:2a:57:
         20:ff:c4:33:95:11:51:15:ec:ce:3c:13:29:06:e6:d9:c3:93:
         6e:09:fd:e3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org