Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/541242c21b53073dfd8ec10f7dfc81cd30fa5234.cer
File:                     541242c21b53073dfd8ec10f7dfc81cd30fa5234.cer (raw, json)
Hash identifier:          NojQ9/HdHcpDtn3mX7XbDm9hK79ITyt3UKvbQuMQH5E=
Subject key identifier:   DA:AE:38:E6:63:7B:CE:C7:69:A3:6B:53:E1:40:4A:D9:29:21:90:5A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DF0C6B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d8aa61ef-cdfa-4e0e-b89c-0ec6c28e704e/541242c21b53073dfd8ec10f7dfc81cd30fa5234.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d8aa61ef-cdfa-4e0e-b89c-0ec6c28e704e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:36:18 +0000
Certificate not after:    Tue 19 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 16701
                          IP: 200.1.116.0/24
                          IP: 201.131.79.0/24
                          IP: 2801:0:1b0::/44
                          IP: 2801:1a4::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14617707 (0xdf0c6b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:36:18 2017 GMT
            Not After : Mar 19 06:00:00 2024 GMT
        Subject: CN=541242c21b53073dfd8ec10f7dfc81cd30fa5234
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:56:6c:c7:67:21:c4:10:7c:a8:6c:09:1d:08:
                    1e:71:60:da:94:69:4d:05:62:74:23:7e:6e:c2:7d:
                    07:8b:ba:5b:8d:1b:25:ee:3c:7c:e8:7f:3f:bd:30:
                    e3:da:dc:98:42:42:b6:94:46:0d:27:23:ce:8b:7a:
                    ab:2a:21:06:8f:7b:5f:6b:cc:0e:bc:98:2a:cb:18:
                    71:cb:9f:31:96:6a:fa:5f:26:26:26:3c:39:fb:80:
                    5f:bc:ae:b1:30:e6:54:e6:31:99:1f:7b:9a:68:a1:
                    05:5a:a4:8c:98:5b:51:06:fc:b1:b2:df:81:50:8b:
                    2a:cf:26:e2:a8:4c:9b:b0:38:72:fb:97:a3:cd:29:
                    b8:54:ec:2c:bf:1a:dc:f3:73:26:89:e0:10:46:a6:
                    85:6d:ed:33:a3:36:00:e6:80:7c:83:1b:e0:d2:4f:
                    ab:3c:53:96:0f:06:08:f5:18:fc:92:5f:0d:09:d9:
                    59:78:31:9b:97:3b:61:5f:06:13:57:be:90:ed:1d:
                    a1:38:6b:dd:d5:62:6f:3c:f8:c1:d1:78:c7:09:7e:
                    b6:ef:cd:fa:ef:e3:49:ea:e0:a0:5f:c0:b7:d7:72:
                    dd:cf:af:cb:33:81:22:79:a4:0e:dd:e0:89:31:55:
                    b3:0c:2a:2e:be:e1:3c:13:81:d9:77:1b:c8:ed:a2:
                    02:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:AE:38:E6:63:7B:CE:C7:69:A3:6B:53:E1:40:4A:D9:29:21:90:5A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d8aa61ef-cdfa-4e0e-b89c-0ec6c28e704e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d8aa61ef-cdfa-4e0e-b89c-0ec6c28e704e/541242c21b53073dfd8ec10f7dfc81cd30fa5234.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.116.0/24
                  201.131.79.0/24
                IPv6:
                  2801:0:1b0::/44
                  2801:1a4::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16701

    Signature Algorithm: sha256WithRSAEncryption
         57:c0:a0:7d:02:97:1f:2d:b1:ef:b3:76:08:9e:38:bf:cf:fa:
         2f:bf:d4:61:65:14:58:46:75:87:44:47:41:83:6b:8f:05:47:
         c3:69:ad:dd:53:44:a9:94:fd:74:7b:3f:37:ff:99:a5:b5:15:
         e8:cf:4f:e6:0c:61:67:8b:e8:5d:43:49:40:9a:67:dc:a8:5c:
         7c:4a:03:86:8b:32:d2:53:20:4b:2e:06:67:c6:a0:a4:7e:f3:
         de:4e:70:ef:12:ff:9a:57:dd:63:09:8a:63:eb:82:65:f5:67:
         dd:b7:a5:b9:ce:e4:22:04:ec:45:25:60:5c:58:14:73:d9:76:
         fa:f7:22:8d:ef:0c:94:83:98:b9:a9:d1:22:dd:e4:b6:23:f2:
         1a:53:4a:44:ce:59:f5:8d:b0:b7:c7:5a:85:a0:ff:b0:1e:97:
         63:13:f3:92:b8:d3:14:bf:92:ca:ef:f0:89:c7:30:40:20:a9:
         7c:54:c6:b5:27:32:6b:02:29:b0:20:54:db:56:99:ad:3b:e3:
         71:fa:b8:db:80:a5:ba:55:ad:bd:d6:df:2a:b2:67:ab:1a:f5:
         18:d6:ea:e7:7b:78:43:42:e1:7a:82:e7:5c:cc:7b:fb:b5:56:
         e3:dc:fb:e6:14:a0:eb:fa:38:fc:d4:5e:67:1c:88:cd:7b:84:
         6a:d1:e0:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-ams.rpki-client.org