Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/563be9199cf5f3e83f8d52863cfaebc9503efd07.cer
File:                     563be9199cf5f3e83f8d52863cfaebc9503efd07.cer (raw, json)
Hash identifier:          LKl5m1sht59NBj8PT6qFXf+s83KQrGYbd9ADaFTStOk=
Subject key identifier:   95:80:FA:51:64:A2:AF:84:90:4E:8E:65:57:D1:3F:EC:69:78:F6:D7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F583F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d5a95c7a-0d11-413d-8429-61d7c8b45d71/563be9199cf5f3e83f8d52863cfaebc9503efd07.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d5a95c7a-0d11-413d-8429-61d7c8b45d71/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 18:03:03 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 167.157.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16090100 (0xf583f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 16 18:03:03 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=563be9199cf5f3e83f8d52863cfaebc9503efd07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:a4:8c:06:21:05:01:4c:d6:f5:1c:23:e1:0e:
                    4f:10:0f:5e:9b:a8:ed:d9:fa:18:16:50:93:56:cd:
                    e7:c6:e9:16:9f:91:bc:d4:60:9d:e4:6f:cc:84:0f:
                    f1:ae:71:1d:83:61:d2:3a:75:be:4d:82:73:11:65:
                    d8:58:f7:75:68:1c:54:8f:4a:fa:58:9c:f3:e8:1a:
                    fe:be:c2:2f:9f:30:9b:0b:d9:ad:e7:af:68:2a:65:
                    65:09:b6:32:6b:a1:c7:81:60:0f:55:54:cd:17:df:
                    67:ad:d8:24:23:bd:61:3d:22:1d:c2:e0:98:35:f7:
                    1d:e8:2d:cc:32:e3:21:b7:7f:91:99:0a:b3:96:55:
                    45:c1:79:ee:bc:62:13:46:2f:17:39:47:83:06:fa:
                    0c:eb:ff:b6:f2:ec:6a:09:bb:0c:78:b0:f8:0d:f0:
                    6a:65:68:ee:36:08:31:79:01:d1:02:7f:5c:07:1a:
                    f8:3c:b1:7b:0a:68:aa:bd:da:64:96:43:9b:93:88:
                    4f:ed:6b:ae:d5:28:91:54:cd:0c:35:74:26:e9:83:
                    69:3d:b9:9c:e1:fb:be:2c:d8:58:c6:9b:d1:b3:03:
                    fd:83:1b:07:52:f6:fa:20:c1:95:2e:c3:74:78:21:
                    98:56:92:7e:db:66:f4:ad:31:46:0a:50:c4:d8:3e:
                    a0:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:80:FA:51:64:A2:AF:84:90:4E:8E:65:57:D1:3F:EC:69:78:F6:D7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d5a95c7a-0d11-413d-8429-61d7c8b45d71/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d5a95c7a-0d11-413d-8429-61d7c8b45d71/563be9199cf5f3e83f8d52863cfaebc9503efd07.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  167.157.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         3f:f8:50:fc:c4:11:dc:c8:15:c6:0f:28:0e:6b:25:c0:5b:a7:
         14:e6:df:fd:96:e3:44:04:89:93:50:ec:f6:e9:bd:e7:a0:b6:
         5a:20:72:0f:f3:c1:87:1f:7d:13:d3:aa:3b:82:6c:f1:07:fc:
         fa:c2:5c:bb:70:a0:fb:7b:4c:36:95:11:ac:65:30:bb:67:cd:
         7e:56:fe:4f:96:27:0c:af:57:b7:73:97:44:62:17:2d:72:ef:
         4e:7d:5e:9b:34:03:b9:2a:17:30:dc:9b:95:27:2c:84:35:fd:
         d4:9e:87:13:9c:87:e1:12:44:f6:ed:fb:3f:76:77:a8:e2:c4:
         9d:83:89:ad:a4:b0:de:f0:27:14:28:f3:37:db:5d:f5:21:bf:
         a4:d5:61:31:29:f6:48:eb:78:1a:93:06:e8:c0:1f:5e:83:16:
         a2:16:f7:2a:e9:8b:e8:38:12:8e:49:31:d5:ad:b9:14:40:d2:
         5c:c2:bd:22:56:bb:80:58:ca:73:5c:ed:2f:04:a9:0c:1f:dc:
         b0:23:8a:9d:ab:4a:54:01:d9:ed:72:0b:f5:4f:3f:7f:d8:c3:
         69:31:98:ad:b9:cc:a3:bc:39:e4:38:af:47:da:6f:b9:6f:86:
         c1:cc:5e:23:3f:9a:34:76:e7:d1:54:30:60:58:25:c7:59:91:
         63:dc:5f:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org