Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/467f3353c80109af6b36b31669122e6fc1304035.cer
File:                     467f3353c80109af6b36b31669122e6fc1304035.cer (raw, json)
Hash identifier:          jWAJbkggaWaJT5kaaobkEqDELyEQYXaDvCtkw75O1vg=
Subject key identifier:   B4:79:B1:20:AD:A6:7C:84:12:36:79:D8:F6:D9:56:07:C7:31:6A:B4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EC4361
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1f45887f-21ac-43c4-b62f-e6d5a9fae69f/467f3353c80109af6b36b31669122e6fc1304035.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1f45887f-21ac-43c4-b62f-e6d5a9fae69f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Jun 2023 17:33:04 +0000
Certificate not after:    Sat 08 Feb 2025 20:08:30 +0000
Subordinate resources:    IP: 200.5.10.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15483745 (0xec4361)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  2 17:33:04 2023 GMT
            Not After : Feb  8 20:08:30 2025 GMT
        Subject: CN=467f3353c80109af6b36b31669122e6fc1304035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:2d:47:1d:b8:3a:35:b0:0a:aa:13:50:0f:09:
                    5a:57:0b:89:43:bf:2a:88:b9:1c:1a:45:67:78:33:
                    fa:8c:c2:1b:c5:62:52:29:d7:61:9c:78:7e:a5:ee:
                    8c:f9:fa:f7:c0:35:7e:c6:8f:5a:be:2b:d9:d2:45:
                    11:df:f7:47:ac:1b:5e:2e:55:1c:94:11:d4:06:0f:
                    6f:44:a0:18:9f:a2:e2:8a:39:7e:ea:af:30:5e:6e:
                    68:c2:9b:9c:d9:d5:cc:bb:a8:80:ad:15:f8:5f:53:
                    fb:f7:64:3b:60:73:91:c5:85:41:ff:21:b3:4c:11:
                    77:f6:d9:c0:6d:ad:5e:2f:69:25:ae:c1:97:a9:8c:
                    6a:c4:0e:65:90:e8:56:71:69:56:f5:ac:81:8f:aa:
                    45:98:3f:46:e7:f3:2b:84:aa:71:b7:52:cb:9c:13:
                    bc:78:64:fe:7d:17:58:49:0c:56:b5:45:bd:20:55:
                    81:51:5e:e6:02:d8:a9:27:8f:b2:0d:32:e2:6e:22:
                    87:35:c2:36:6f:b2:1a:b4:30:a5:b3:8d:6a:a7:2f:
                    b7:76:0a:5d:f4:32:a8:51:d1:ad:e1:10:a8:f3:f3:
                    a5:93:2e:2e:44:f9:27:10:c3:2a:b9:1c:0d:23:63:
                    64:5e:cf:ad:9d:5f:9a:3a:27:22:b3:84:5c:bd:61:
                    ca:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:79:B1:20:AD:A6:7C:84:12:36:79:D8:F6:D9:56:07:C7:31:6A:B4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1f45887f-21ac-43c4-b62f-e6d5a9fae69f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1f45887f-21ac-43c4-b62f-e6d5a9fae69f/467f3353c80109af6b36b31669122e6fc1304035.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.5.10.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:79:26:02:bd:00:eb:9d:5e:f2:e8:95:0e:19:30:eb:44:86:
         5f:83:bd:b9:7f:ab:25:63:88:80:55:18:4a:c4:3f:af:94:3c:
         34:ce:27:1e:fb:be:7f:57:49:e4:63:99:60:be:4d:fc:ed:e9:
         fa:1f:ac:0a:14:3b:a4:b3:4d:48:04:00:7d:48:f2:c0:95:39:
         81:18:80:fb:a9:11:a2:4d:0e:d2:dd:3d:70:2d:7b:18:f1:ae:
         b9:42:fe:21:c8:ca:58:a3:eb:1b:b4:5c:0b:12:10:5a:9f:60:
         4c:a1:87:4f:6f:e9:21:be:7b:69:e2:39:e1:81:8b:6e:d5:d8:
         71:4b:45:94:a6:af:4d:c3:9a:41:50:72:a7:b5:c0:d1:59:cd:
         7c:9f:3c:18:0f:0d:f4:83:59:d1:64:0a:35:0d:b2:7b:42:2f:
         21:7b:fb:a3:46:81:95:a2:33:f9:25:fa:24:cc:ac:56:dd:4d:
         fc:7f:f5:84:0d:74:67:47:bc:79:99:86:51:70:a4:2f:03:7b:
         e5:98:be:d7:c1:25:7e:64:1a:16:26:61:43:93:52:a2:0e:96:
         fe:78:8a:30:3c:60:47:51:e3:a9:fe:60:9a:2a:da:7e:3f:77:
         10:c8:14:c1:55:32:61:4a:3b:11:ed:08:e2:43:8c:f9:51:2e:
         b9:54:55:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org