Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5648e5969746bd795a04f727c02596e96f197e0f.cer
File:                     5648e5969746bd795a04f727c02596e96f197e0f.cer (raw, json)
Hash identifier:          BgOhiRoiiS6dDCu88wpLOEdZjTy74zRYoBz8nDgRyUE=
Subject key identifier:   4D:59:F3:69:BC:BA:83:74:57:66:B8:B6:87:25:38:EE:84:67:03:72
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F748A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/74e6c0ec-8332-4e0a-a085-2e6394655d9f/5648e5969746bd795a04f727c02596e96f197e0f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/74e6c0ec-8332-4e0a-a085-2e6394655d9f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:01:49 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.246.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16205992 (0xf748a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:01:49 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=5648e5969746bd795a04f727c02596e96f197e0f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:b4:4c:c5:42:1b:c1:ae:d9:1d:21:4a:59:94:
                    53:70:7a:db:28:c9:17:49:60:af:9c:d1:1e:87:db:
                    b3:9d:5c:ab:25:15:ca:f9:6a:5e:51:7c:c3:50:f4:
                    9d:29:4c:9d:44:06:f3:27:e5:34:0c:95:eb:e1:8d:
                    2e:6a:69:91:31:85:2b:3c:a8:9c:1f:2b:a9:59:dc:
                    9b:e5:b4:97:35:c6:ef:a2:d3:3f:0e:ef:80:bb:90:
                    35:69:88:dd:4c:37:ac:15:7e:fd:9f:c2:ea:23:8a:
                    4f:32:72:11:b4:8d:6e:c6:56:cf:84:68:3a:02:e6:
                    e0:2f:11:2e:4a:14:6d:07:30:54:a8:a7:ed:4f:ad:
                    76:8c:15:fd:70:a1:f3:89:4e:d3:87:69:57:93:d3:
                    f0:8c:bb:27:02:0a:16:a1:46:42:84:59:61:27:c5:
                    a3:43:c2:0e:d6:c5:39:d0:dc:39:21:b4:cf:95:b2:
                    44:b0:60:bf:ad:a5:c6:ac:e8:79:38:39:a3:e3:61:
                    38:75:01:17:1b:bf:c1:6f:1d:7b:aa:34:25:28:a0:
                    e0:3a:17:75:82:3a:ea:4a:7a:99:81:1d:c5:28:97:
                    64:6e:66:44:c1:4b:1d:c8:44:58:66:8d:b2:9b:9c:
                    2c:a9:86:1d:2c:a1:7e:1b:55:c5:64:bd:7f:6f:8a:
                    cc:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:59:F3:69:BC:BA:83:74:57:66:B8:B6:87:25:38:EE:84:67:03:72
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/74e6c0ec-8332-4e0a-a085-2e6394655d9f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/74e6c0ec-8332-4e0a-a085-2e6394655d9f/5648e5969746bd795a04f727c02596e96f197e0f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.246.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c5:d4:4a:71:3a:10:5b:af:11:15:fa:04:01:42:14:67:e8:8b:
         03:fd:61:6e:60:25:dc:91:a4:80:9e:b9:c6:02:6d:96:40:7a:
         27:73:8a:84:73:e9:33:d3:62:cb:e8:8f:c2:ea:a2:3c:e4:e8:
         d0:4e:a5:b4:0d:f7:b1:4f:01:c6:24:ac:42:fa:a8:c5:09:52:
         07:e1:af:04:1b:f3:62:83:6f:15:1f:75:f3:e8:91:92:93:4e:
         0d:81:70:e9:7c:71:0c:e8:1b:b1:6d:99:13:ac:e0:1d:3d:0b:
         a4:7b:87:8a:01:51:0f:41:a9:71:fd:2a:56:2b:74:6f:c3:3f:
         ee:ca:00:16:5a:5b:8b:04:49:17:bb:c8:aa:b7:84:ab:fe:cb:
         e4:f1:e5:94:91:52:4f:3b:29:87:d4:d4:64:a2:77:16:ea:8b:
         4c:29:47:22:23:d6:12:bc:eb:f1:af:47:aa:bd:15:cb:93:18:
         54:d8:2f:af:4c:10:f4:1f:c6:81:61:c4:18:b3:89:aa:d0:cb:
         58:3d:b8:65:53:91:b2:a8:1e:c3:e3:25:7f:ec:6a:3b:f7:d2:
         fd:22:c2:41:c8:4f:18:95:32:09:8f:f7:54:ca:83:6a:52:31:
         29:1b:62:a3:58:1e:20:3c:09:c9:b0:a9:60:13:d0:31:ef:9a:
         04:fb:07:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:24 2024 by rpki-client on console-ams.rpki-client.org