Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/71ca75c4827d7a03f77fc51c7c68c8c0187e81aa.cer
File:                     71ca75c4827d7a03f77fc51c7c68c8c0187e81aa.cer (raw, json)
Hash identifier:          N7Bq+YVvsK02Y7O4v8q1+4aCs07rrjwRRnlfJl4xTgk=
Subject key identifier:   44:1C:02:02:A7:79:1B:86:49:D2:8B:9E:F2:3C:27:7C:20:B9:AE:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F73D21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7c3971f0-001a-418c-a5f9-fb5a0e8bb1f0/71ca75c4827d7a03f77fc51c7c68c8c0187e81aa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7c3971f0-001a-418c-a5f9-fb5a0e8bb1f0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:00:47 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.221.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16203041 (0xf73d21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:00:47 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=71ca75c4827d7a03f77fc51c7c68c8c0187e81aa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:74:d9:a4:93:84:61:ab:d7:6a:6e:eb:64:3b:
                    91:e1:72:8e:a8:67:98:41:fe:5d:b1:29:f6:d2:ca:
                    19:6a:f0:1e:ad:11:3c:46:e6:41:cc:19:a0:b8:51:
                    40:8e:98:55:e8:75:85:2b:33:f8:40:1e:8f:6c:2e:
                    46:71:3a:d2:9a:85:8b:a1:f5:72:ac:d5:50:2c:d0:
                    d4:b4:67:0d:26:42:26:fb:14:90:4e:e3:3c:09:bc:
                    eb:7d:2c:13:52:bf:d4:68:5c:f0:ed:f5:18:f2:b6:
                    cf:95:a7:26:46:e8:e8:4e:a2:13:5f:eb:75:42:1b:
                    1c:8b:4b:3d:ae:cd:50:17:2a:6c:b6:39:68:8c:10:
                    16:22:a3:e3:97:b1:1f:43:36:10:be:e8:b1:10:80:
                    43:83:f7:0b:e9:c5:96:0d:e7:55:02:e9:32:75:68:
                    4b:fb:0c:dc:1b:54:b4:20:a3:11:8c:20:c9:9c:2e:
                    b1:14:78:b1:f7:bc:04:c4:88:53:c3:d4:48:83:1f:
                    28:6d:91:3a:0e:3c:b4:ef:c5:07:46:95:3e:e4:cb:
                    f2:74:0d:14:c3:7d:06:08:1c:98:df:4f:30:6a:2d:
                    11:47:30:e6:27:37:6e:9f:3c:80:6a:76:42:8e:78:
                    7f:1c:22:55:c4:dc:b0:e4:20:1b:f5:ea:76:fc:73:
                    ef:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:1C:02:02:A7:79:1B:86:49:D2:8B:9E:F2:3C:27:7C:20:B9:AE:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7c3971f0-001a-418c-a5f9-fb5a0e8bb1f0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7c3971f0-001a-418c-a5f9-fb5a0e8bb1f0/71ca75c4827d7a03f77fc51c7c68c8c0187e81aa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.221.0/24

    Signature Algorithm: sha256WithRSAEncryption
         ac:7a:2f:55:f5:6f:9d:d6:6d:ed:74:62:39:70:5f:cf:a3:19:
         6b:c2:d8:75:14:ee:ff:e5:77:0a:57:65:26:66:1c:59:f6:e2:
         c7:56:76:16:9a:a2:99:52:d9:7c:de:2c:58:a3:80:b6:a2:2a:
         fe:92:a7:1d:db:bf:91:bb:4a:01:0d:83:88:ff:c7:68:28:66:
         e5:5a:be:97:f0:63:ee:2b:c2:8c:ec:71:5c:51:a0:7c:07:e8:
         ec:53:04:30:86:fb:61:ad:42:91:5b:b2:c9:7d:9a:0d:4e:ec:
         1f:7d:4a:76:67:7b:6e:04:ef:3f:c7:3f:46:15:74:d4:c1:09:
         0e:ce:37:9a:05:17:e2:67:f7:b8:ab:65:10:1d:55:d2:1b:f8:
         ff:cc:5a:c5:90:21:c7:15:60:06:8b:8b:f3:c2:08:f9:e7:39:
         21:dd:7e:3a:20:73:5e:30:03:4f:5b:c5:59:22:b4:f9:ce:60:
         98:20:ca:05:d3:74:21:3c:37:96:b4:6c:98:ba:c1:95:05:38:
         f4:c9:16:e7:86:68:82:b0:42:3e:a8:22:ba:3e:f4:92:6e:cc:
         8a:9d:58:ec:a8:1b:8b:b4:99:7b:7e:33:09:ae:04:1e:d8:b8:
         c4:23:7b:64:d7:f5:db:c0:05:e2:6a:66:5b:a5:b7:4a:d5:d9:
         e2:89:36:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org