Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c2b30659652e6831828bf95dd33de95964e9af5.cer
File:                     4c2b30659652e6831828bf95dd33de95964e9af5.cer (raw, json)
Hash identifier:          4FVmQVkeF9BjGfrxg+mpq/hTGSGWIU7M/NOVO+BOuSU=
Subject key identifier:   F3:16:7E:2C:83:D3:BE:BD:12:2A:B5:E6:3C:49:14:21:00:78:76:54
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3A30B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ce12b7b9-5c58-446c-a96b-b20906c3a413/4c2b30659652e6831828bf95dd33de95964e9af5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ce12b7b9-5c58-446c-a96b-b20906c3a413/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 18:53:40 +0000
Certificate not after:    Wed 27 Mar 2024 00:27:56 +0000
Subordinate resources:    AS: 272798

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14918411 (0xe3a30b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 18:53:40 2023 GMT
            Not After : Mar 27 00:27:56 2024 GMT
        Subject: CN=4c2b30659652e6831828bf95dd33de95964e9af5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:ac:d1:02:ba:42:b7:34:26:77:e4:c6:3e:c6:
                    8c:b4:31:81:28:e6:37:ea:7e:4d:91:e9:d0:4a:ba:
                    dc:83:0f:1c:63:03:89:2f:85:1f:81:5f:4c:ea:16:
                    f9:df:4a:38:58:1d:38:cf:e8:25:3d:10:eb:3d:c1:
                    a7:db:d9:fd:78:54:6c:b2:63:09:1d:1b:cd:1e:21:
                    72:02:4d:30:64:84:07:97:6f:fa:62:2a:61:4f:54:
                    81:bb:97:23:86:b9:76:ba:a0:24:1f:13:f6:4b:df:
                    f6:61:c2:11:b6:08:85:20:e4:51:71:dd:e1:18:51:
                    6c:d4:1d:e6:04:f5:95:85:bf:3a:56:56:0c:84:c8:
                    c5:df:4f:3b:28:47:cc:43:e3:eb:96:89:3a:70:a3:
                    7f:c6:72:3e:d9:e9:26:82:f0:df:7e:54:76:ea:d9:
                    c7:a9:65:40:ee:cf:e9:15:0a:22:49:62:37:39:24:
                    0f:ee:ec:6b:fb:60:13:08:cb:ad:38:8c:cc:c6:7f:
                    30:41:71:c5:7e:00:a0:70:7b:0c:54:5e:45:38:70:
                    de:ba:eb:9a:85:dc:97:81:21:a2:a5:42:4f:69:69:
                    c3:52:e9:46:37:b4:07:03:1e:67:76:5b:54:c0:29:
                    36:36:07:28:72:87:bc:28:d7:63:ef:c2:33:ef:3f:
                    41:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:16:7E:2C:83:D3:BE:BD:12:2A:B5:E6:3C:49:14:21:00:78:76:54
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ce12b7b9-5c58-446c-a96b-b20906c3a413/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ce12b7b9-5c58-446c-a96b-b20906c3a413/4c2b30659652e6831828bf95dd33de95964e9af5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272798

    Signature Algorithm: sha256WithRSAEncryption
         98:b5:9d:ea:cd:3c:36:1a:5e:e8:ba:aa:75:81:0e:6d:db:bd:
         0f:f1:02:f6:eb:21:b1:53:9c:62:27:71:64:05:8b:6c:a6:c6:
         3b:84:74:49:bd:2f:5c:2e:4b:10:df:41:99:05:46:85:44:c0:
         ff:a8:e8:49:30:37:1e:bd:41:8e:c4:e9:a5:4f:d2:19:7f:8c:
         2c:7f:02:8a:9c:d4:32:72:4e:a5:d6:7a:91:93:cb:51:f4:f8:
         01:63:6c:21:fa:e1:93:b5:41:53:f7:0c:97:77:6a:fc:cc:ab:
         85:87:97:c6:4f:a3:5f:de:23:bf:1a:74:e8:69:53:fe:43:3c:
         b8:7e:6b:ec:82:a4:5b:ae:96:88:38:cb:76:9d:cb:53:75:b9:
         26:b7:c3:4e:59:e4:19:a4:d7:65:28:28:22:0f:20:f3:74:63:
         75:93:97:08:69:88:b1:e3:2d:da:39:04:d7:6a:75:93:ae:ce:
         d0:0e:3e:33:fb:fd:14:8a:d4:56:5a:44:4e:b5:6a:93:29:04:
         ca:8d:55:a7:c6:81:91:06:bc:d8:46:d6:1a:d7:73:2b:7d:01:
         fc:22:06:8d:24:56:25:70:2e:ce:77:fc:66:c8:2b:9d:e5:b7:
         f0:05:cc:56:1f:0a:78:c2:cf:f5:8b:c1:96:24:f1:a6:d3:80:
         47:17:7e:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-ams.rpki-client.org