Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5fa0b0b293be2d21d413de8750a44c08106ba0d3.cer
File:                     5fa0b0b293be2d21d413de8750a44c08106ba0d3.cer (raw, json)
Hash identifier:          J7AnZIhJJxFQJAgptR0D+pzWcNYo5hAJBlMO7b4Bsb8=
Subject key identifier:   80:FB:64:AB:4E:B3:0F:37:AD:B2:D0:6D:B1:00:1D:3A:D1:2F:D3:7F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C26D6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5369bb81-9e4b-4d72-a852-e76a81d2b43b/5fa0b0b293be2d21d413de8750a44c08106ba0d3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5369bb81-9e4b-4d72-a852-e76a81d2b43b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 22:10:07 +0000
Certificate not after:    Mon 06 Oct 2025 15:00:00 +0000
Subordinate resources:    AS: 27945

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17573590 (0x10c26d6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 22:10:07 2024 GMT
            Not After : Oct  6 15:00:00 2025 GMT
        Subject: CN=5fa0b0b293be2d21d413de8750a44c08106ba0d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:68:41:a4:08:9a:48:01:c2:44:e9:12:ff:ac:
                    7a:6e:ed:28:c4:f9:43:03:fd:a4:48:8b:ad:a3:96:
                    1d:1e:5e:50:e1:9c:11:a6:32:bf:73:49:32:93:df:
                    d4:79:dc:be:06:ce:4c:88:2c:83:d3:61:18:5b:a3:
                    07:e4:cb:47:e0:e5:6a:f8:d7:d9:45:59:9a:84:da:
                    59:8c:ca:04:b4:ea:22:d2:0a:20:9c:81:2c:1a:71:
                    bf:28:2c:9b:04:69:63:00:75:64:96:35:46:fb:5f:
                    5e:aa:54:f5:db:ae:41:64:4e:88:c4:ef:76:0c:fe:
                    13:41:50:ad:bf:bb:48:71:9c:38:8f:08:cd:ee:ca:
                    d6:d1:09:f4:9d:e2:2d:d4:6d:fe:01:0f:e6:51:9c:
                    cb:e2:47:f0:0e:b5:cc:ed:9d:3c:67:18:c7:50:91:
                    62:3a:5c:74:c3:ea:06:f4:5f:ae:a9:4f:30:43:9a:
                    a7:97:3a:cf:ba:66:c5:c9:de:d6:59:d7:d0:f5:78:
                    de:48:78:cc:80:e8:34:29:5b:c9:d0:d0:a0:44:68:
                    a0:1a:0f:d0:58:98:1f:db:0e:98:4a:82:4d:53:29:
                    c1:02:de:7d:84:b2:32:c0:b2:f2:ce:d3:f7:61:fe:
                    e1:fe:da:7f:6c:aa:76:78:77:40:f8:f2:e1:99:58:
                    83:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:FB:64:AB:4E:B3:0F:37:AD:B2:D0:6D:B1:00:1D:3A:D1:2F:D3:7F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5369bb81-9e4b-4d72-a852-e76a81d2b43b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5369bb81-9e4b-4d72-a852-e76a81d2b43b/5fa0b0b293be2d21d413de8750a44c08106ba0d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27945

    Signature Algorithm: sha256WithRSAEncryption
         78:24:30:08:c3:c4:84:73:a0:a9:56:2a:62:4f:5e:9e:ae:70:
         6d:c9:45:b2:de:ff:8c:9d:29:05:df:b7:7c:b3:7a:7b:39:1d:
         c8:0c:54:1c:3c:75:0f:ff:15:45:78:a9:85:ae:03:e2:06:35:
         71:e7:aa:16:4c:d2:4f:2c:98:bb:be:58:2a:a7:d9:0a:dd:69:
         97:fb:53:37:60:11:66:55:4a:cb:64:c4:88:bb:41:b4:4e:a7:
         6c:10:30:f9:e5:61:6a:15:f8:14:01:72:14:a8:18:29:99:b1:
         0f:b8:c2:32:34:13:9a:56:35:1e:23:e6:8d:d7:c7:1e:b7:b4:
         cf:ea:78:21:26:f9:37:cf:a9:92:93:1d:50:aa:cf:eb:ef:ce:
         fa:5e:01:f7:41:b4:18:5c:89:f0:1a:6d:68:cb:83:5b:39:1c:
         ac:7e:59:0c:95:b5:5c:c4:ca:df:0e:70:6b:4d:1f:77:dd:22:
         0c:15:13:e5:bd:4d:77:bd:96:02:fd:4d:f5:72:6e:89:60:66:
         ca:52:d4:38:74:64:e2:60:f6:3e:c5:0b:71:16:7f:0b:36:77:
         85:f6:5c:ae:4e:eb:37:fb:d6:14:b8:63:8f:a3:eb:bb:7f:5c:
         d1:ce:79:12:f0:be:db:b6:96:36:89:c1:c8:36:8d:12:4e:31:
         c2:82:56:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org