Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/6e8b1d6723dff3aaf6303753e025a032fdd7af8f.cer
File:                     6e8b1d6723dff3aaf6303753e025a032fdd7af8f.cer (raw, json)
Hash identifier:          ENj7CRNKUvCDjZs+iYij3SAsDZIjj2PDGJj9sRF0CIw=
Subject key identifier:   50:48:83:28:47:D9:5C:31:76:F9:8F:66:12:62:79:EA:8A:E9:AF:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DA16E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/692bd108-777c-44ed-9d2a-7dd35b8ebdee/6e8b1d6723dff3aaf6303753e025a032fdd7af8f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/692bd108-777c-44ed-9d2a-7dd35b8ebdee/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Feb 2024 14:33:08 +0000
Certificate not after:    Sun 17 Aug 2025 16:10:25 +0000
Subordinate resources:    AS: 272888

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17670510 (0x10da16e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 14:33:08 2024 GMT
            Not After : Aug 17 16:10:25 2025 GMT
        Subject: CN=6e8b1d6723dff3aaf6303753e025a032fdd7af8f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:13:90:f8:8c:d9:8b:b9:8e:bf:b2:7e:ac:8e:
                    ba:92:c5:eb:ee:cf:a9:f0:8b:f7:64:15:3e:53:d6:
                    da:b8:85:9d:7f:e8:b4:95:d5:76:54:bd:27:ae:34:
                    50:aa:2d:4c:9c:93:a0:af:28:4f:26:73:04:11:e6:
                    29:e7:1c:fc:54:c5:b3:01:f4:28:bb:3a:17:b3:08:
                    4a:63:eb:b1:f2:4f:c7:0d:8c:74:4a:72:54:14:aa:
                    5d:0f:97:6c:83:c1:0f:97:05:97:38:b9:f6:be:97:
                    f8:2d:7c:53:38:d4:c0:2f:19:61:9d:5d:f6:d1:e0:
                    92:47:26:28:97:2a:7a:af:58:03:ec:c2:2e:4a:f1:
                    a5:4f:17:b2:e7:d2:71:7b:25:23:c6:e6:69:30:cf:
                    22:36:9b:93:26:c6:f6:0d:97:72:9b:95:42:86:5a:
                    c3:c5:28:88:0c:d9:c3:01:78:59:85:60:78:9e:6d:
                    cd:69:5a:27:41:a5:29:cf:76:16:0d:1f:be:42:f4:
                    af:9d:4c:83:3b:b0:d7:0c:84:b4:e9:af:a7:92:cd:
                    50:ab:56:ba:c1:3d:81:56:ae:08:1d:ad:02:da:95:
                    ab:bc:9b:5c:46:42:2d:40:e1:fb:e4:b6:5e:94:da:
                    26:a8:ef:3d:9c:54:44:12:28:73:a8:cd:49:c6:58:
                    08:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:48:83:28:47:D9:5C:31:76:F9:8F:66:12:62:79:EA:8A:E9:AF:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/692bd108-777c-44ed-9d2a-7dd35b8ebdee/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/692bd108-777c-44ed-9d2a-7dd35b8ebdee/6e8b1d6723dff3aaf6303753e025a032fdd7af8f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272888

    Signature Algorithm: sha256WithRSAEncryption
         66:2b:43:88:3b:52:39:55:45:fc:33:2c:8f:7e:a9:90:2a:05:
         9c:3b:ab:17:0c:aa:e1:07:da:89:6b:ed:a0:41:e7:16:18:ed:
         89:25:8b:31:56:6f:95:8d:a5:0b:e9:06:3a:ec:60:73:8d:14:
         40:aa:50:b1:a0:f1:d5:47:64:ea:c6:9e:43:70:b1:a1:c3:f8:
         c6:11:5b:92:8c:29:0f:4d:42:af:fd:49:8b:dd:1b:6b:f0:e8:
         b4:31:d9:fb:5b:cc:2f:b2:37:e3:1a:46:56:40:59:11:3d:3d:
         83:94:cf:a7:b9:06:2a:6b:64:0a:f3:08:ce:bd:13:74:eb:73:
         62:00:9e:43:8b:c4:1f:ec:82:6a:af:58:1b:78:63:72:f9:6a:
         16:4a:c1:86:5b:6f:ff:a2:01:47:04:07:27:33:5a:e0:57:33:
         58:5b:85:02:8b:46:ee:80:d1:55:97:de:8a:51:73:e0:a3:17:
         f6:d8:7d:23:a7:e2:79:1d:22:bc:b6:7b:69:fc:38:30:18:24:
         c0:57:5c:90:bc:fb:f9:d5:80:77:97:6b:96:d0:c7:ab:59:59:
         3a:0c:a5:f9:e8:60:5e:3e:a5:db:8b:9a:53:a1:2c:23:97:20:
         57:e1:e6:ac:c4:27:7b:43:99:4c:8a:8f:1b:4c:9a:a5:57:61:
         69:57:de:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:26 2024 by rpki-client on console-ams.rpki-client.org