Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/57219f78d566e162a57018833fb256200a65949f.cer
File:                     57219f78d566e162a57018833fb256200a65949f.cer (raw, json)
Hash identifier:          MSqb0mIwrxIO8myL0hpGqE2HKK74bURwI+2uDCBxPpA=
Subject key identifier:   2A:AD:A1:B1:EE:72:B3:63:3E:A9:F7:A4:DA:16:FB:7F:41:A6:6D:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E2C0F3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/57219f78d566e162a57018833fb256200a65949f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 03 May 2018 20:45:19 +0000
Certificate not after:    Sun 28 Apr 2024 06:00:00 +0000
Subordinate resources:    IP: 192.188.46.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14860531 (0xe2c0f3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 20:45:19 2018 GMT
            Not After : Apr 28 06:00:00 2024 GMT
        Subject: CN=57219f78d566e162a57018833fb256200a65949f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:ff:29:ba:ec:f2:7c:d1:41:35:ed:74:33:68:
                    81:5b:b8:d2:7c:03:bf:5b:99:d4:9c:39:1c:97:62:
                    cc:5e:40:91:a2:b8:cd:8b:4b:7a:cf:19:17:c4:ce:
                    92:c6:13:86:25:31:08:53:06:f6:dd:76:04:c8:fe:
                    5a:90:2f:0e:c0:57:aa:9a:6f:24:c9:5c:4f:55:7a:
                    c5:fa:35:b0:0c:80:60:6c:dc:a0:96:f8:6f:db:af:
                    8b:31:66:66:da:2a:e7:5c:dc:19:4a:a7:cd:81:b2:
                    c5:3b:05:ef:46:73:ca:ee:9b:3b:47:86:dc:e7:b3:
                    be:9b:97:43:22:b4:df:fb:98:70:41:fa:34:d9:a6:
                    fe:1f:98:4c:30:6a:72:54:b1:31:ba:35:bc:79:f8:
                    0a:b5:92:0e:e3:45:51:75:a9:6e:35:2e:cb:14:9a:
                    b1:fd:a7:96:a9:33:f2:62:7a:a1:10:d9:ce:13:c5:
                    f8:81:16:38:72:99:27:b7:c2:e3:87:32:d6:97:7f:
                    0e:46:74:ca:57:b2:c3:11:b5:4b:27:b1:69:be:e2:
                    28:57:ba:e8:d0:ca:7a:40:d6:48:43:4f:37:c6:b0:
                    a4:ec:d1:96:54:46:00:c8:47:5b:1f:0e:6c:a0:d0:
                    b6:9a:58:d3:c7:aa:e8:01:fc:96:40:01:8d:9f:21:
                    85:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:AD:A1:B1:EE:72:B3:63:3E:A9:F7:A4:DA:16:FB:7F:41:A6:6D:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e6e2889e-d7df-4128-87a2-97aa942dd7f4/57219f78d566e162a57018833fb256200a65949f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.46.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:0f:43:05:60:e3:fb:ba:df:fb:65:1a:53:22:92:ce:f0:db:
         e0:d3:f1:03:96:f9:6b:5d:9a:97:69:47:77:af:dd:80:21:07:
         0b:1d:12:08:6b:9e:59:65:44:e9:93:1f:c1:e8:db:94:d1:35:
         64:5a:82:c0:d0:52:ec:2a:16:0b:f3:a0:6a:89:ae:83:8e:66:
         25:71:7f:29:ef:a2:89:73:42:3a:1b:26:57:0f:14:b7:21:ff:
         83:3f:57:89:30:f5:e8:0f:d9:fa:44:ef:9e:88:4c:74:04:2d:
         8b:85:63:13:4e:e4:1e:44:95:e7:59:4f:fe:eb:06:2f:36:cb:
         75:ee:12:16:c6:72:12:17:f7:31:77:2e:ae:f0:1e:0c:f1:48:
         83:32:d4:18:78:3d:27:8c:65:11:b8:45:cb:19:3d:30:87:4f:
         40:15:50:d5:ea:71:41:62:0b:79:78:af:85:74:30:17:e4:99:
         cf:2a:a0:56:03:62:a1:6f:94:e0:7f:e2:87:0d:67:69:88:ea:
         88:8b:22:61:e2:d6:a1:9b:a3:14:60:50:c4:ab:5e:b1:e0:c4:
         59:e6:ca:84:10:1a:d5:d4:1b:ad:86:3a:d6:05:36:97:82:fc:
         8b:2d:27:2c:5a:83:2d:75:c6:d0:fb:b8:26:c3:7a:15:5d:0e:
         cb:1c:5e:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:34 2024 by rpki-client on console-fra.rpki-client.org