Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5324417480956bea7c3a7cadc16ed99aab4019c5.cer
File:                     5324417480956bea7c3a7cadc16ed99aab4019c5.cer (raw, json)
Hash identifier:          Ke3ViuZbsvADP6AQ0GkfSoI3BR8MqmQkpVfCycyV//k=
Subject key identifier:   7B:4E:F4:B7:B4:5B:4E:2D:C4:E9:72:B4:1D:71:E7:4C:02:AE:CB:22
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFD595
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0eabd77-fb00-4130-9ba8-0fb54c0a1471/5324417480956bea7c3a7cadc16ed99aab4019c5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0eabd77-fb00-4130-9ba8-0fb54c0a1471/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 17:28:11 +0000
Certificate not after:    Sat 25 Jan 2025 21:37:57 +0000
Subordinate resources:    AS: 262933
                          IP: 179.0.194.0/23
                          IP: 2801:1b:c000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16766357 (0xffd595)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 31 17:28:11 2023 GMT
            Not After : Jan 25 21:37:57 2025 GMT
        Subject: CN=5324417480956bea7c3a7cadc16ed99aab4019c5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:23:69:22:fe:24:65:b8:97:67:a8:70:98:d2:
                    0d:25:97:1f:57:c6:cb:70:d8:64:d3:48:99:e3:bd:
                    db:7c:c4:79:24:e0:7c:b6:7f:92:3c:ad:13:f7:9c:
                    b4:51:b8:04:60:fe:36:83:e6:03:b5:eb:11:70:08:
                    5f:79:84:c1:71:a6:24:15:b4:3c:c6:81:7f:c8:8c:
                    fa:b9:47:ae:94:5e:e9:6f:c8:2e:84:c3:99:35:87:
                    29:45:5a:f6:70:9c:2e:2a:e0:35:04:ab:cf:d4:b4:
                    aa:e7:a5:4e:de:b0:8a:85:ea:17:f3:72:19:af:be:
                    8f:4f:79:7b:e0:ce:47:ff:85:fb:3d:37:33:5e:2a:
                    ee:12:13:22:2b:e8:60:3f:2d:c1:f7:ce:7f:e7:9f:
                    e2:7d:3f:89:cc:4c:9a:74:de:33:ed:07:f1:c2:70:
                    9d:93:f7:ac:6c:d4:f2:2b:67:db:86:74:02:d7:78:
                    a3:02:63:66:c3:b7:f2:2e:8a:83:b6:ef:fe:96:f5:
                    e1:54:55:f4:38:10:86:dc:fe:24:dc:9b:32:51:14:
                    56:51:5e:36:63:d4:5e:08:7d:7e:f7:03:91:a8:02:
                    9a:d3:19:bb:6c:db:e3:c9:8b:49:b6:64:27:c7:d4:
                    5e:b2:41:ec:6a:53:f3:56:d0:75:9d:66:55:e8:ff:
                    58:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:4E:F4:B7:B4:5B:4E:2D:C4:E9:72:B4:1D:71:E7:4C:02:AE:CB:22
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0eabd77-fb00-4130-9ba8-0fb54c0a1471/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0eabd77-fb00-4130-9ba8-0fb54c0a1471/5324417480956bea7c3a7cadc16ed99aab4019c5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.194.0/23
                IPv6:
                  2801:1b:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262933

    Signature Algorithm: sha256WithRSAEncryption
         47:af:0e:f7:e8:12:65:0a:43:6b:21:e4:54:9b:cf:35:d2:04:
         56:2e:5e:43:2d:2e:03:05:c2:60:ac:1d:bc:81:f8:56:96:f2:
         b4:d3:ed:c5:a6:46:e3:7c:1e:85:a1:e1:4f:c2:aa:a6:4a:51:
         00:9a:78:54:10:77:9a:25:02:28:49:90:97:d1:05:7a:37:17:
         c2:7b:44:c2:39:22:07:03:a7:93:84:e1:a6:2f:68:ce:dc:2a:
         b8:39:5d:f2:ea:a6:0a:2c:86:30:88:81:48:5d:3c:7b:b6:6b:
         fe:07:b7:36:27:de:c0:77:7b:49:8a:88:4a:33:75:26:0d:f7:
         fd:50:7e:35:ad:17:d1:75:f7:4b:77:10:3e:27:55:e4:a4:7a:
         09:ca:db:07:f9:6e:97:7b:31:20:52:79:9f:f0:46:5f:df:7c:
         e1:34:33:ef:6f:9c:56:58:4d:8b:d8:e6:47:2e:95:10:61:65:
         3c:9a:d3:eb:e2:81:73:9d:45:1c:f3:13:66:77:ef:aa:b7:59:
         f7:71:e3:e6:c0:c7:79:0a:f0:91:49:45:d6:47:89:e3:42:10:
         b9:7e:82:94:e0:19:c8:4b:ff:9f:6d:ac:06:5a:7e:8a:bb:ae:
         70:4f:66:f8:ad:3f:5d:eb:4a:b5:cb:3b:40:05:3d:f4:3d:b4:
         15:7f:4a:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org