Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/65279a27e94f8c2aa1b5007abe04d31767557318.cer
File:                     65279a27e94f8c2aa1b5007abe04d31767557318.cer (raw, json)
Hash identifier:          kmjgubExGkLnPtjRIHFk7SCS2W5GL8LX3KI9K447fis=
Subject key identifier:   CE:A0:AF:32:A5:B9:AB:34:E3:F2:B9:CC:82:E2:43:07:02:39:1C:77
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DB253A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f1823967-8f0a-40c6-9989-b28cc914a1fd/65279a27e94f8c2aa1b5007abe04d31767557318.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f1823967-8f0a-40c6-9989-b28cc914a1fd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Jan 2023 17:50:42 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.33.54.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14361914 (0xdb253a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  3 17:50:42 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=65279a27e94f8c2aa1b5007abe04d31767557318
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:3d:5e:92:c3:3b:07:6b:0e:00:36:74:23:ac:
                    c8:8a:77:25:b8:7f:48:72:85:4c:43:f2:3b:e8:7b:
                    41:ec:1a:3d:df:bb:54:65:f1:48:f3:f5:7b:cc:93:
                    77:aa:c8:c8:a9:9b:44:d3:5f:6a:78:da:ed:78:2b:
                    fe:0c:93:c3:eb:ca:99:b9:59:4a:af:d2:d2:c6:2c:
                    bb:fa:e9:cd:f8:63:e3:b0:9e:69:5e:ac:dc:aa:e5:
                    1c:a0:ca:8b:7b:8c:da:c6:2c:e8:a7:43:54:a8:cd:
                    77:9b:c7:9a:3f:b3:d4:c3:ef:05:22:90:3e:cc:5a:
                    a9:99:a8:81:ad:65:ca:1b:c7:e7:be:7f:38:64:73:
                    ff:3f:12:6e:01:c3:31:3d:71:6e:ac:ea:f4:bc:ac:
                    aa:0d:48:cc:27:7e:b3:70:01:66:a7:73:1d:e4:df:
                    f4:1e:18:07:4f:5d:f7:9d:2a:01:dd:b3:2d:e5:61:
                    63:90:b0:15:3f:90:b1:9c:dc:cc:b0:4a:00:cb:c5:
                    30:02:39:8d:04:ec:4b:9d:a6:16:f8:ed:de:ee:d2:
                    ac:bd:10:1c:2f:0a:b5:bc:a2:e5:67:8c:2a:77:ee:
                    90:95:9b:8a:aa:e5:ec:c2:54:74:76:18:dc:c7:86:
                    ca:58:88:c6:63:98:aa:4f:52:95:c1:9d:df:59:78:
                    7a:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:A0:AF:32:A5:B9:AB:34:E3:F2:B9:CC:82:E2:43:07:02:39:1C:77
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f1823967-8f0a-40c6-9989-b28cc914a1fd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f1823967-8f0a-40c6-9989-b28cc914a1fd/65279a27e94f8c2aa1b5007abe04d31767557318.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.54.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ab:c2:ba:86:d0:c4:e6:0a:c1:14:72:d7:1f:50:6d:cd:5c:80:
         d8:c6:bd:c5:86:16:52:b2:ad:45:da:c6:5c:e9:d2:2c:b2:f1:
         c1:14:c7:4b:78:d1:63:eb:73:41:ab:cb:fc:42:4d:05:75:a4:
         9b:ab:eb:f4:f9:90:73:3b:a2:bc:48:0c:76:82:91:85:d7:33:
         e1:15:ec:9c:65:ae:96:79:72:f5:3b:76:de:66:10:bd:6e:11:
         dc:ec:62:69:ea:27:e3:e5:1d:92:29:35:ee:5c:32:3d:1f:ab:
         5d:e4:04:ec:75:be:84:2c:17:20:9f:e6:2b:06:00:02:df:8d:
         f1:62:34:28:5d:c9:3c:d2:91:73:4a:f7:a0:e2:2b:71:05:ec:
         c0:fd:8f:41:e0:de:37:14:7c:81:2b:37:05:eb:37:79:c6:4a:
         8f:53:bc:9e:c9:a7:30:98:8b:e3:bc:4a:78:3e:11:35:81:af:
         23:83:67:29:eb:dd:6d:da:d5:89:16:a0:f9:e0:28:b0:f3:5d:
         11:7d:6b:a8:83:21:a2:36:cc:55:6c:37:e3:60:fe:92:91:e7:
         28:75:45:f1:3e:c2:cc:56:aa:ef:96:d0:6c:0d:c9:4b:a1:fe:
         09:23:68:75:f7:61:04:45:53:a1:a4:de:39:31:09:1a:47:de:
         9c:97:15:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org