Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4dfb15d2467a33ac5ae16397c5aa1094a509fe32.cer
File:                     4dfb15d2467a33ac5ae16397c5aa1094a509fe32.cer (raw, json)
Hash identifier:          pLGVJ9b+YBnspRpKqfL2e/tV86Wkeb27tDyEV4hne1c=
Subject key identifier:   CF:A6:73:4C:5D:1D:EA:CE:89:65:B7:99:67:74:28:47:4C:24:84:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010BD468
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fb6b2548-5d05-4cb8-bf3d-67b6b66ebcf3/4dfb15d2467a33ac5ae16397c5aa1094a509fe32.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fb6b2548-5d05-4cb8-bf3d-67b6b66ebcf3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 15:59:13 +0000
Certificate not after:    Wed 17 Sep 2025 15:00:00 +0000
Subordinate resources:    AS: 10954
                          IP: 161.148.0.0/16
                          IP: 189.9.0.0/16
                          IP: 200.198.192.0/18
                          IP: 2804:150::/30

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17552488 (0x10bd468)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 15:59:13 2024 GMT
            Not After : Sep 17 15:00:00 2025 GMT
        Subject: CN=4dfb15d2467a33ac5ae16397c5aa1094a509fe32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:35:da:94:d3:24:a7:69:d8:34:b8:c1:39:d1:
                    0e:97:f9:11:b2:f2:bf:8d:9f:6a:0e:c0:04:be:ef:
                    20:39:90:27:f9:ef:bc:10:01:c3:b2:75:23:98:56:
                    30:49:d4:9c:63:50:25:71:a4:b2:ad:14:58:63:89:
                    5f:2e:f4:7f:57:7b:be:c8:6f:1b:18:d7:b2:82:46:
                    29:a1:9f:83:8d:02:d1:c3:6c:6f:fe:22:1a:72:e3:
                    62:9e:7c:fe:da:e2:c5:48:68:8e:b2:b2:6a:3b:83:
                    a3:87:8b:54:7a:30:ac:c0:7a:1d:5e:5f:4c:c1:e4:
                    72:05:43:c5:e1:00:9b:79:12:b4:af:69:ad:cf:c5:
                    6d:b6:29:2f:9f:ec:d2:1b:ad:a3:d7:6f:d7:d8:7e:
                    0a:fa:61:c3:2b:7c:a3:3e:00:35:42:95:ec:4b:12:
                    50:14:8a:17:24:9a:36:87:b5:88:63:b8:47:57:e0:
                    85:2d:c2:e5:5b:82:6f:02:7f:d6:fd:fb:08:6c:6f:
                    03:ba:2e:56:e9:f9:08:45:91:3a:ca:60:70:2f:7e:
                    87:02:fa:97:ff:06:54:96:b9:be:6c:53:4b:c6:ea:
                    b1:ae:c1:e5:9c:b3:be:0a:1a:b8:40:64:f6:6d:ae:
                    a5:38:8e:c8:da:1b:e4:86:b7:5c:6a:e3:c9:32:8a:
                    16:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:A6:73:4C:5D:1D:EA:CE:89:65:B7:99:67:74:28:47:4C:24:84:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fb6b2548-5d05-4cb8-bf3d-67b6b66ebcf3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fb6b2548-5d05-4cb8-bf3d-67b6b66ebcf3/4dfb15d2467a33ac5ae16397c5aa1094a509fe32.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.148.0.0/16
                  189.9.0.0/16
                  200.198.192.0/18
                IPv6:
                  2804:150::/30

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10954

    Signature Algorithm: sha256WithRSAEncryption
         55:a5:bc:0f:e7:b8:df:e9:8a:ef:76:24:61:54:6b:ac:1a:33:
         e8:92:67:cf:01:28:0f:41:5f:0a:fe:eb:46:52:0f:9c:58:74:
         be:dc:d7:e4:12:09:d8:13:2c:ce:43:e2:d0:63:99:8f:78:b3:
         22:c5:70:56:b5:9f:cb:d1:29:65:c4:88:64:95:6f:0a:52:aa:
         6d:14:e5:d9:30:82:15:fc:54:b2:90:1a:ff:95:4b:15:d1:df:
         6e:fa:d9:12:7e:87:cf:42:a9:ea:34:13:72:49:a1:96:af:e0:
         4b:df:4b:87:17:a3:e8:13:80:9c:81:d1:a6:16:b1:4e:c5:3d:
         12:cb:18:25:29:ea:41:41:e9:d5:62:ac:1b:4a:ad:01:d5:ad:
         bf:b8:b3:71:68:cb:01:b7:e8:98:6b:13:be:fc:b1:7b:8d:bd:
         62:af:c6:b6:23:46:16:9f:aa:ba:dc:c5:6f:8e:6c:58:6e:5c:
         75:5d:13:bd:be:55:55:04:04:a3:0b:15:48:16:ca:e9:62:c4:
         9a:98:93:d7:f7:d2:c2:f3:22:d5:e4:23:81:93:07:30:7f:91:
         cf:b4:9a:9c:c6:ee:d6:87:02:40:77:25:17:9d:3d:e3:3c:39:
         13:ad:9f:ca:69:cc:39:6c:39:37:63:77:25:a1:08:87:1e:8f:
         b1:c4:6f:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org