Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/56185f9dba5f598511b4e486f877a5bb327a6177.cer
File:                     56185f9dba5f598511b4e486f877a5bb327a6177.cer (raw, json)
Hash identifier:          EhITygWiaeSMmrqGd+RsMPfKNDcxeqjkVQXqxipUXLg=
Subject key identifier:   E1:12:57:76:88:19:33:03:68:65:73:70:48:0A:57:26:84:98:35:B8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF374F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e083e090-17e0-472e-902a-c8b2e8788b9f/56185f9dba5f598511b4e486f877a5bb327a6177.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e083e090-17e0-472e-902a-c8b2e8788b9f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:10:13 +0000
Certificate not after:    Fri 04 Oct 2024 14:10:21 +0000
Subordinate resources:    AS: 263441
                          IP: 138.255.120.0/22
                          IP: 170.233.168.0/22
                          IP: 177.91.128.0/22
                          IP: 200.225.108.0/22
                          IP: 2804:11d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16725839 (0xff374f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:10:13 2023 GMT
            Not After : Oct  4 14:10:21 2024 GMT
        Subject: CN=56185f9dba5f598511b4e486f877a5bb327a6177
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:47:2a:78:33:43:49:d0:8b:0a:19:65:21:19:
                    d6:be:24:44:b3:3c:af:ad:ff:d2:93:ab:7b:ce:76:
                    a8:b2:ba:80:72:83:6c:82:f7:a4:3f:1a:1d:ed:05:
                    ec:5a:7a:ec:d7:ed:c5:d2:4a:fa:a9:ae:90:13:b7:
                    fb:89:fb:74:d6:7e:1c:e2:45:6d:7c:51:c1:d6:3a:
                    e9:d8:dd:ac:e0:61:c7:d1:cc:ab:a9:ca:8b:32:e9:
                    5f:3f:3d:bb:67:99:cc:4a:e4:9a:bc:84:5f:bb:97:
                    68:fc:78:c3:12:cf:e6:69:42:39:39:ec:8f:1c:95:
                    c3:d5:b7:65:85:94:28:bd:60:3b:6d:05:ec:b1:e0:
                    a7:3a:76:1d:d5:f2:5b:6f:16:e3:a4:86:01:d8:90:
                    53:16:68:c1:ac:39:bb:e6:b6:51:2d:e3:58:12:83:
                    eb:e2:60:1a:b1:f8:c1:af:ea:b9:81:6f:c6:05:1a:
                    7a:01:3c:e3:fe:bf:04:61:30:c2:6b:41:c0:be:0b:
                    56:0f:80:47:2d:01:cf:97:6b:5e:b7:8e:cc:68:4b:
                    79:e9:79:4e:2a:a1:f0:41:2a:1d:43:4b:8f:c7:06:
                    1a:d2:da:7f:d2:0c:2e:d1:90:0c:10:9e:b0:2b:7a:
                    18:b0:ca:2c:52:f5:dd:33:f6:f7:65:e0:ab:ae:ee:
                    61:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E1:12:57:76:88:19:33:03:68:65:73:70:48:0A:57:26:84:98:35:B8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e083e090-17e0-472e-902a-c8b2e8788b9f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e083e090-17e0-472e-902a-c8b2e8788b9f/56185f9dba5f598511b4e486f877a5bb327a6177.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.120.0/22
                  170.233.168.0/22
                  177.91.128.0/22
                  200.225.108.0/22
                IPv6:
                  2804:11d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263441

    Signature Algorithm: sha256WithRSAEncryption
         b0:84:b8:b2:ca:c8:95:96:0d:58:d2:d9:a1:09:3b:c6:84:ad:
         76:92:5d:5e:5a:d8:53:ab:df:bd:57:13:43:b1:39:32:b1:9e:
         7a:92:bb:ba:34:14:44:90:89:3c:24:cd:8f:68:01:e7:5e:69:
         7c:39:2d:06:40:28:9b:12:3e:f9:3e:16:82:91:4b:a3:d4:92:
         ed:e6:10:05:8c:2b:ee:57:c9:cf:d9:42:aa:71:43:36:fe:ec:
         02:4a:59:58:7e:51:01:48:ec:7c:59:e1:e2:23:37:5c:9b:79:
         f0:16:b5:de:76:9b:d2:15:d2:83:a5:ce:1a:37:83:ba:5c:27:
         06:9b:09:0a:5d:dc:98:3b:57:12:bd:07:27:12:ff:f6:c2:07:
         a2:b9:56:25:11:d0:4d:63:be:f4:79:84:e7:68:f1:9b:6a:6c:
         a1:6e:eb:4a:2b:c4:e2:e3:43:e3:cc:89:15:6c:74:34:a7:19:
         66:a7:dd:22:28:29:89:bd:f3:f0:68:87:fe:83:f0:14:a1:c7:
         5e:66:53:22:7b:fb:48:e3:cf:ed:fb:cd:28:b5:87:41:24:d3:
         da:5c:31:85:fc:01:e7:2c:27:9f:7f:ca:26:e1:6c:d9:19:1c:
         56:2f:11:fb:83:6a:66:b7:d2:92:3c:5f:e5:fa:45:52:3f:de:
         63:ef:36:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:11 2024 by rpki-client on console-fra.rpki-client.org