Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4c4c73de2149f0ca3b2b2f7eb9b6581270f28fe7.cer
File:                     4c4c73de2149f0ca3b2b2f7eb9b6581270f28fe7.cer (raw, json)
Hash identifier:          81iz+agYhwxaL7ibnzh9+yr0n3pYs0wLtJfR6SQBdKk=
Subject key identifier:   52:D6:93:65:3E:7C:B5:7A:3D:54:95:A7:A5:A6:3D:00:A5:CB:B3:D4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C2B4D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/89ac417e-92dd-4ec3-b805-cd9da4ab892f/4c4c73de2149f0ca3b2b2f7eb9b6581270f28fe7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/89ac417e-92dd-4ec3-b805-cd9da4ab892f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 22:10:22 +0000
Certificate not after:    Thu 24 Apr 2025 22:50:25 +0000
Subordinate resources:    AS: 28062

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17574733 (0x10c2b4d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 22:10:22 2024 GMT
            Not After : Apr 24 22:50:25 2025 GMT
        Subject: CN=4c4c73de2149f0ca3b2b2f7eb9b6581270f28fe7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:ba:50:5a:5d:37:94:d5:36:96:b2:c1:58:24:
                    d0:53:29:64:16:9e:65:38:9e:a8:4f:d6:6b:b3:e6:
                    ea:b3:39:cd:56:23:21:d1:75:0a:5a:17:29:18:f0:
                    76:2b:07:44:b7:7e:b5:d0:26:75:f5:21:f4:c1:d3:
                    45:6e:c4:b0:6e:af:41:f2:2d:f4:ad:1e:7a:10:b3:
                    ab:72:0c:2a:b6:5c:8d:3c:7a:6e:5f:83:4b:5c:39:
                    c0:a7:b0:c8:e0:25:58:0c:80:3a:b3:14:6f:4b:5e:
                    86:2f:3d:89:f5:fb:96:c1:13:e6:6c:5b:9f:22:f8:
                    fb:39:9e:af:32:76:96:60:25:42:ac:64:ee:39:24:
                    c3:63:cc:57:a5:3d:1c:b3:3b:91:6e:c0:7b:33:06:
                    04:f3:65:c6:a0:d6:63:c5:55:af:c1:83:69:af:fa:
                    c3:a5:f2:22:6c:34:e6:c1:ac:e4:c8:a5:61:7b:4f:
                    80:04:e4:54:01:38:7b:67:c4:61:48:e2:ef:cd:5a:
                    f1:7b:15:57:26:44:03:96:55:84:e0:95:01:ee:af:
                    ee:0a:2b:be:e1:75:90:91:86:26:3f:e2:29:b7:26:
                    e0:8e:bc:57:71:b3:59:d1:f9:86:3b:09:c2:8f:7c:
                    c2:ae:e7:18:23:85:da:f8:9b:d3:91:6a:8d:62:7b:
                    db:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:D6:93:65:3E:7C:B5:7A:3D:54:95:A7:A5:A6:3D:00:A5:CB:B3:D4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/89ac417e-92dd-4ec3-b805-cd9da4ab892f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/89ac417e-92dd-4ec3-b805-cd9da4ab892f/4c4c73de2149f0ca3b2b2f7eb9b6581270f28fe7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28062

    Signature Algorithm: sha256WithRSAEncryption
         44:54:be:a4:40:79:21:bd:00:43:cd:c8:62:54:5d:79:87:9b:
         a8:6e:a7:1f:6f:fb:d5:8a:1a:1a:42:93:33:b5:ee:b3:e9:71:
         c3:2d:73:8a:57:4f:59:40:d3:7d:47:ac:19:1a:99:e2:74:fa:
         ea:59:31:82:52:09:5c:b6:8f:46:db:eb:93:0b:eb:00:26:75:
         d9:11:59:e9:94:ae:6d:e9:11:f7:1b:10:7a:6b:e4:50:82:ea:
         4b:c7:b7:18:3d:01:b2:11:b7:65:10:66:36:1c:bc:5d:23:1f:
         6e:07:40:79:1a:40:fb:bc:07:48:a9:8d:40:34:67:87:23:39:
         f7:66:ed:a8:12:25:d4:56:3f:9f:38:16:a3:d2:ed:ba:47:dc:
         5d:8e:bc:df:d4:be:6b:6d:43:fa:0c:eb:e8:b1:76:86:3a:af:
         6e:32:52:71:9a:8d:6c:12:8d:f8:c9:16:f0:6e:ed:7c:ce:68:
         9b:dc:45:76:c4:a4:c1:33:ce:37:f6:ad:c1:80:a9:23:b7:89:
         35:44:a1:2b:27:18:ef:d2:37:93:22:dc:6d:ea:cd:e0:6e:34:
         21:f9:3d:0f:4a:2b:e6:37:cb:a9:39:03:9a:73:05:2b:e1:1c:
         fa:d4:6f:bf:f9:2f:8d:86:cc:df:fe:85:bf:2f:10:98:1a:ee:
         a4:a6:3b:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org