Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer
File:                     4b0ff3b0bb36514a29ceced3a440524fd7f636dc.cer (raw, json)
Hash identifier:          ntSTt/yDHUOx+cl+buJUIk9DvWNlSJNmEMz8J8yz1eQ=
Subject key identifier:   33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8C179
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Jun 2020 22:23:45 +0000
Certificate not after:    Wed 03 Jan 2024 05:00:00 +0000
Subordinate resources:    AS: 3597
                          IP: 168.96.0.0/16
                          IP: 199.248.144.0/24
                          IP: 200.10.202.0/24
                          IP: 2001:1318::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14205305 (0xd8c179)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  9 22:23:45 2020 GMT
            Not After : Jan  3 05:00:00 2024 GMT
        Subject: CN=4b0ff3b0bb36514a29ceced3a440524fd7f636dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:e8:aa:c6:43:10:d2:0b:94:c8:68:e6:b5:27:
                    36:03:1a:58:f4:e9:56:7b:b7:8d:2b:5a:72:c8:76:
                    f4:ac:1f:cf:c6:3d:5b:81:96:15:d8:ed:43:3b:95:
                    3b:60:38:56:f3:ac:aa:48:18:0a:38:e3:fa:c2:43:
                    b4:26:c5:5b:66:89:b8:9f:11:15:1f:5e:2f:78:a0:
                    fa:2e:4d:bb:3c:42:29:02:ea:4d:0c:f5:f2:25:13:
                    1f:fe:f6:36:b3:69:42:47:01:00:53:5f:73:bd:00:
                    78:a2:a8:45:c6:dc:c4:d4:8b:01:bc:05:43:a3:9e:
                    4d:ec:4d:86:bf:1f:36:5b:b9:7c:0d:11:ea:58:1e:
                    4b:0a:5e:54:05:5a:6f:b1:73:80:86:af:59:fb:39:
                    03:ed:44:58:af:e2:e0:83:65:c1:2c:8c:2f:8a:d5:
                    00:ab:40:c9:be:28:58:7e:3c:6e:68:22:27:2e:a8:
                    ee:54:75:66:ca:c5:76:1e:67:8f:53:5c:b6:be:71:
                    ae:01:aa:b2:6c:35:2a:80:8f:e8:49:1a:89:85:53:
                    c5:f1:a2:6b:45:4b:45:17:9a:3d:b7:8c:00:a3:46:
                    50:2e:c5:a9:29:e1:d0:ce:1b:07:62:57:05:e3:11:
                    23:d5:1f:b9:34:65:3d:1d:37:c4:e7:d6:6a:8e:f6:
                    20:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:53:3D:1D:1F:5A:F1:D7:5C:44:A5:38:F4:4F:00:64:DC:F8:DC:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ba45778-af84-45cf-bc29-3e40d72be94d/4b0ff3b0bb36514a29ceced3a440524fd7f636dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.96.0.0/16
                  199.248.144.0/24
                  200.10.202.0/24
                IPv6:
                  2001:1318::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3597

    Signature Algorithm: sha256WithRSAEncryption
         64:81:e6:bb:fc:ac:6d:67:9c:c8:e4:88:cf:99:00:d9:9c:53:
         5d:2a:06:ac:7c:f4:c9:fe:df:b5:1b:c9:8e:c4:19:ed:aa:37:
         bc:5c:8d:16:79:e0:7f:81:f5:7e:1a:a2:99:c1:61:7a:22:3a:
         e1:bd:21:e5:38:46:fa:e7:a4:e5:33:5a:a7:91:79:00:c2:57:
         4e:7e:f4:9f:fe:8a:72:0c:ea:76:dd:6f:1a:a3:73:48:88:22:
         a5:dc:40:2d:c9:21:68:81:6e:c3:d7:8e:c6:1c:89:42:55:f9:
         c6:bb:37:9b:8d:6b:fe:47:77:93:e8:34:45:de:f3:e9:3c:4f:
         cd:c1:1a:fa:e0:a5:97:21:3b:8e:b4:96:ad:84:39:53:44:54:
         bd:12:03:3a:6f:83:83:5d:b8:7a:41:04:99:a7:98:80:ee:ce:
         04:c1:8b:ea:b5:8d:7a:da:14:ea:bf:38:53:10:85:91:94:be:
         c5:a4:81:23:3c:96:6e:a2:8d:ca:fb:b7:57:c4:5d:9c:75:f6:
         a7:5a:67:a4:c7:8c:d3:5d:6a:74:8d:ad:ba:e8:8d:82:bd:33:
         2b:97:b2:07:fa:c8:cf:b8:4b:0d:4e:05:13:dd:45:98:0e:28:
         f1:00:ca:31:c1:85:e3:aa:78:41:07:36:89:e3:48:ad:55:63:
         8a:96:f0:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:33 2024 by rpki-client on console-fra.rpki-client.org