Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4a0379c3a118c70d78b0ee317fd5e96e18bc7832.cer
File:                     4a0379c3a118c70d78b0ee317fd5e96e18bc7832.cer (raw, json)
Hash identifier:          oDlBTI9Ii99IMQ3LWvV7YYXh60yX3BHG+PNI0u03h3Y=
Subject key identifier:   B5:80:5F:74:15:88:5F:08:7A:C3:D0:03:31:2C:47:EC:63:E5:2F:A6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDE07D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/df10d756-7308-42f6-aab7-c8df0d3f6851/4a0379c3a118c70d78b0ee317fd5e96e18bc7832.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/df10d756-7308-42f6-aab7-c8df0d3f6851/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 Jun 2023 13:12:52 +0000
Certificate not after:    Sun 07 Jul 2024 21:42:27 +0000
Subordinate resources:    IP: 2801:1fa::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15589501 (0xede07d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 16 13:12:52 2023 GMT
            Not After : Jul  7 21:42:27 2024 GMT
        Subject: CN=4a0379c3a118c70d78b0ee317fd5e96e18bc7832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d2:c0:a8:81:f4:1f:8d:9d:c8:db:8b:b7:4f:
                    a6:5b:b9:bd:ab:bc:45:ac:8f:b1:69:05:2f:01:f8:
                    22:68:09:ba:af:c8:b6:28:a4:8b:98:92:20:c3:a2:
                    0f:84:e6:2a:b3:91:1b:6d:76:30:6a:c5:7d:9e:ff:
                    3c:f0:cd:9e:ba:f6:f8:02:d5:98:c8:7a:83:98:cb:
                    42:b4:46:03:38:45:10:fa:b6:d1:49:d9:e2:2e:85:
                    53:f8:82:25:13:27:8d:4c:66:54:6d:76:e4:e2:78:
                    e4:da:9b:4b:08:76:03:60:31:da:75:41:25:26:5a:
                    c7:7d:76:57:f2:4f:d1:42:10:b2:80:a6:e8:3c:8f:
                    06:31:9b:00:9d:76:b6:8a:45:d6:1d:ee:6a:38:b5:
                    82:06:ef:ec:62:8f:ef:fd:91:07:d7:de:42:1b:b5:
                    7b:cb:dc:c8:f3:ba:a4:e8:77:d2:63:08:d8:7e:ef:
                    0b:66:53:57:8b:fb:9f:60:fc:a4:47:02:7d:54:9e:
                    91:00:a5:58:1b:39:e7:0c:f2:66:f0:9a:30:69:9d:
                    64:61:10:b0:ac:30:fe:e2:be:7e:69:c7:81:0d:71:
                    1b:12:05:5c:f7:57:05:7f:50:35:8e:71:f0:ed:54:
                    90:4e:3e:9e:e9:f4:ce:ed:b5:0b:8a:de:c4:38:59:
                    25:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:80:5F:74:15:88:5F:08:7A:C3:D0:03:31:2C:47:EC:63:E5:2F:A6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/df10d756-7308-42f6-aab7-c8df0d3f6851/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/df10d756-7308-42f6-aab7-c8df0d3f6851/4a0379c3a118c70d78b0ee317fd5e96e18bc7832.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1fa::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:4d:8c:58:5f:c8:7e:ab:75:47:c1:eb:c3:ae:ff:67:0b:1c:
         bd:6c:3a:fc:06:d1:07:42:ac:bc:69:ff:60:a4:12:b3:ff:e7:
         96:19:96:95:be:d3:26:a1:11:58:ed:57:82:95:46:f9:6f:bf:
         16:f4:aa:f5:08:2c:67:75:eb:a9:6c:c0:d1:8a:67:cb:1b:db:
         66:a0:f9:30:40:e1:ea:2a:0e:e9:c8:7e:a1:57:4b:dc:20:d5:
         07:f2:5f:7e:26:a0:cd:0b:c1:9a:79:eb:9c:40:e2:51:e5:97:
         42:5f:55:39:3f:f7:22:a3:a6:b6:54:6a:dd:90:40:79:5b:99:
         7f:b8:84:64:bf:c7:56:57:a9:54:ef:e1:fb:dc:ab:06:0a:c0:
         b1:be:c1:39:92:b0:25:a4:a9:54:ac:63:c6:16:c9:13:0f:5a:
         5d:c5:c6:ed:bb:1f:e2:dc:c7:b7:5b:1a:34:c9:79:b2:fd:59:
         f9:d3:24:85:88:7c:4c:07:c2:bf:24:00:4d:ef:db:e1:f7:ee:
         00:d3:73:b5:28:f3:82:54:11:02:77:c2:05:7b:9d:c5:3c:c4:
         63:c4:12:ce:9f:b8:d0:2f:03:60:a9:6e:ca:21:f5:30:09:3c:
         8a:88:d1:3c:90:e8:1a:4c:05:d9:4b:5c:89:ae:96:51:ef:76:
         f2:7f:ea:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:25 2024 by rpki-client on console-ams.rpki-client.org