Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5e18bbf394059311e9ab0b7b4b3584e0a1e30aa5.cer
File:                     5e18bbf394059311e9ab0b7b4b3584e0a1e30aa5.cer (raw, json)
Hash identifier:          zGRnStbye89ZSocEOlWgIjz7dK3uGkF8/TyvdVwQPC0=
Subject key identifier:   40:E3:5C:2A:1E:56:C2:02:70:30:24:BA:8F:00:2F:74:61:22:B3:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAD243
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/00b10b59-a4e0-40c3-889c-4c3725ede0a0/5e18bbf394059311e9ab0b7b4b3584e0a1e30aa5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/00b10b59-a4e0-40c3-889c-4c3725ede0a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 18:46:42 +0000
Certificate not after:    Thu 06 Jun 2024 20:30:07 +0000
Subordinate resources:    AS: 271950
                          IP: 2803:d610::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15389251 (0xead243)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 22 18:46:42 2023 GMT
            Not After : Jun  6 20:30:07 2024 GMT
        Subject: CN=5e18bbf394059311e9ab0b7b4b3584e0a1e30aa5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:95:1a:e1:4d:d4:20:4c:ee:4d:f7:ba:37:42:
                    bd:c5:3e:b1:99:6d:d8:af:18:5c:87:ce:1e:f7:08:
                    35:32:0f:fc:48:64:93:8d:f1:f4:78:7f:b1:eb:de:
                    91:a1:ee:25:3e:13:17:7e:d8:80:06:30:12:d1:11:
                    c9:dd:da:44:df:17:eb:c7:ba:75:23:c5:fb:8f:ff:
                    33:2c:85:a8:a2:fa:0b:8e:c2:31:ab:25:de:a1:1f:
                    7d:69:44:63:f8:ea:ba:47:4b:88:5b:80:78:f8:88:
                    aa:34:72:b2:a7:d7:95:42:84:32:f2:cc:64:13:58:
                    cd:b7:f3:62:a6:c5:32:45:ec:48:08:d1:72:45:ca:
                    08:7d:e1:d0:c3:ce:f8:fc:d2:fa:7e:14:42:86:76:
                    44:77:ee:d8:a0:3a:9c:9e:d4:b5:0d:b0:14:27:5b:
                    41:65:39:57:e5:09:90:92:4a:d5:33:61:be:4c:6f:
                    cb:cf:31:16:2f:ad:98:f1:cf:31:c3:01:90:ec:cf:
                    e3:2c:7b:56:e2:0e:ab:e8:f5:f6:f4:4f:62:df:62:
                    1f:6d:75:14:7d:e9:69:a2:30:62:36:fe:46:b3:11:
                    ed:f8:34:77:42:e0:88:05:8e:3e:dd:2c:94:50:33:
                    5c:dc:66:1e:e1:65:cb:26:80:16:52:fc:ba:e2:c9:
                    44:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:E3:5C:2A:1E:56:C2:02:70:30:24:BA:8F:00:2F:74:61:22:B3:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/00b10b59-a4e0-40c3-889c-4c3725ede0a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/00b10b59-a4e0-40c3-889c-4c3725ede0a0/5e18bbf394059311e9ab0b7b4b3584e0a1e30aa5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d610::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271950

    Signature Algorithm: sha256WithRSAEncryption
         13:b5:99:e8:10:01:70:08:a9:c4:8d:aa:4c:fb:b5:5a:ca:45:
         6b:6d:76:43:79:b1:c0:84:3b:31:de:e7:97:9d:2f:b7:73:5b:
         3d:eb:72:63:2b:a8:d6:f3:7e:d1:32:ea:be:8e:fa:78:84:34:
         61:79:d4:97:61:02:da:1f:2a:61:80:3d:7f:49:59:71:b2:96:
         33:95:ca:b8:43:46:51:7a:ab:c1:a3:d3:dd:e2:7b:fa:dd:23:
         9b:04:da:2f:43:45:67:22:87:ac:8d:fe:67:0d:0f:dc:0b:4d:
         8d:7b:7b:e7:61:76:22:eb:de:85:51:9c:97:37:66:cc:eb:90:
         1e:42:d0:d3:8d:7e:30:8a:ec:17:df:ce:63:eb:65:ff:fa:5e:
         54:13:87:c3:0a:7b:d2:2d:f3:0d:53:2d:e2:19:68:67:65:20:
         fc:5f:df:9d:7a:7e:b8:00:2a:e5:b8:24:48:22:2c:61:05:ee:
         5f:9b:5b:87:d1:38:c7:0a:a4:df:66:b1:31:1d:9e:aa:44:4a:
         9c:dc:c8:12:d8:36:d3:01:f5:c6:d8:8d:bb:d9:1a:20:8f:7e:
         ff:42:0e:97:11:05:c7:7a:d4:08:4f:ee:05:4c:65:7d:cc:f2:
         2d:11:c6:cd:51:5a:1e:73:d7:d5:72:27:80:c8:15:b0:a5:c6:
         ab:59:3a:7c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org