Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7a6ee8c825c05307d8f346cd1a1986136665543d.cer
File:                     7a6ee8c825c05307d8f346cd1a1986136665543d.cer (raw, json)
Hash identifier:          HRhufyQryqUCrdwl+0lyMvGHkrZtX098CdEyXe8zY6A=
Subject key identifier:   53:96:8D:01:E3:44:9F:DF:89:17:57:7E:EB:93:75:9F:11:A1:0D:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F73A97
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b9cf4ad9-f634-42f2-8870-c84e53dd2f3d/7a6ee8c825c05307d8f346cd1a1986136665543d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b9cf4ad9-f634-42f2-8870-c84e53dd2f3d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:00:40 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.219.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16202391 (0xf73a97)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:00:40 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=7a6ee8c825c05307d8f346cd1a1986136665543d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:c1:10:7f:47:d4:6e:15:3a:86:4b:6c:d0:94:
                    c9:09:0c:29:b8:ad:50:38:af:e9:59:ce:9f:18:4e:
                    dc:cc:0f:83:58:11:02:f8:8f:53:21:5e:8f:a7:6b:
                    df:16:10:70:80:f2:60:cb:36:c3:b4:9a:a4:df:98:
                    51:c4:a7:e3:3c:d6:02:90:56:d7:4f:2d:bd:c3:73:
                    98:4b:94:65:d9:ed:84:b5:fc:1b:e8:5f:cd:3c:69:
                    ac:24:e5:07:b5:3c:8d:90:c0:ab:87:7d:ad:11:e4:
                    02:b9:98:7e:19:91:d3:db:aa:e9:11:fe:37:d2:7b:
                    be:04:6f:59:24:62:30:07:65:7d:49:28:a7:33:d8:
                    79:6b:05:dd:56:34:52:fb:6f:18:3d:85:90:0a:c5:
                    53:ec:41:21:c4:e9:42:da:c9:27:61:21:91:ef:74:
                    7c:79:a8:4e:de:d6:96:ac:70:c6:75:2d:db:59:61:
                    cd:d7:ef:f6:a6:22:e9:9f:50:8a:73:5a:67:aa:5f:
                    cc:20:ec:4c:c5:5a:10:fd:43:62:d3:68:32:20:c5:
                    6f:d9:02:3e:84:d4:1a:c9:e4:05:fd:4f:83:9c:a4:
                    de:fb:02:c2:e3:4a:69:1e:37:c9:02:35:cb:06:b1:
                    1a:a0:20:b9:76:6c:9d:0f:46:dd:22:48:72:d5:32:
                    9e:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:96:8D:01:E3:44:9F:DF:89:17:57:7E:EB:93:75:9F:11:A1:0D:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b9cf4ad9-f634-42f2-8870-c84e53dd2f3d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b9cf4ad9-f634-42f2-8870-c84e53dd2f3d/7a6ee8c825c05307d8f346cd1a1986136665543d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.219.0/24

    Signature Algorithm: sha256WithRSAEncryption
         c4:68:32:a5:54:aa:be:ef:e2:a7:fc:36:c8:44:b2:32:52:74:
         5a:ec:11:ed:ef:51:ce:10:1a:03:59:74:21:a6:b2:15:7a:9d:
         e8:cf:af:72:3b:4e:97:6a:a0:c7:7e:2e:18:1d:fe:1d:b3:68:
         c0:17:39:8d:15:56:13:e3:f1:e5:d6:c3:a7:c9:91:6b:ee:a1:
         ff:8f:38:84:62:3c:93:56:49:8b:c7:87:61:c7:3d:3c:7b:93:
         95:eb:f5:71:d7:1d:a1:34:04:9d:d1:66:1a:e6:12:4e:78:1b:
         4f:63:d6:87:93:09:14:51:a8:7d:b1:e2:e3:1e:9c:4f:c6:c4:
         ee:e7:47:c6:87:be:75:b4:c7:bc:b1:df:de:5c:c4:9d:cd:bd:
         b2:01:ef:f0:67:36:bb:ca:9b:dc:0d:1c:cb:89:cf:b5:e3:a9:
         d2:08:65:66:74:f4:9a:f2:57:77:d5:e8:47:83:5a:82:aa:ff:
         65:5c:6f:2f:8e:7c:24:d9:62:22:7f:4c:8b:da:a9:3e:38:81:
         d6:82:bd:d2:d8:c0:26:b5:eb:ca:f0:57:24:2c:19:e7:37:23:
         2c:c7:06:b6:32:6a:fd:04:75:52:a6:58:67:cf:66:32:84:40:
         6e:0b:e0:a9:62:9a:2c:4f:5e:8a:04:c1:2b:40:e6:70:2e:1f:
         7f:4f:9e:bb
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAPc6lzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyOTE2MDA0MFoXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoN2E2ZWU4YzgyNWMwNTMwN2Q4ZjM0NmNkMWExOTg2MTM2
NjY1NTQzZDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJLBEH9H1G4V
OoZLbNCUyQkMKbitUDiv6VnOnxhO3MwPg1gRAviPUyFej6dr3xYQcIDyYMs2w7Sa
pN+YUcSn4zzWApBW108tvcNzmEuUZdnthLX8G+hfzTxprCTlB7U8jZDAq4d9rRHk
ArmYfhmR09uq6RH+N9J7vgRvWSRiMAdlfUkopzPYeWsF3VY0UvtvGD2FkArFU+xB
IcTpQtrJJ2Ehke90fHmoTt7WlqxwxnUt21lhzdfv9qYi6Z9QinNaZ6pfzCDsTMVa
EP1DYtNoMiDFb9kCPoTUGsnkBf1Pg5yk3vsCwuNKaR43yQI1ywaxGqAguXZsnQ9G
3SJIctUynu0CAwEAAaOCAt4wggLaMB0GA1UdDgQWBBRTlo0B40Sf34kXV37rk3Wf
EaENvTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iOWNmNGFkOS1mNjM0
LTQyZjItODg3MC1jODRlNTNkZDJmM2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjljZjRhZDktZjYzNC00
MmYyLTg4NzAtYzg0ZTUzZGQyZjNkLzdhNmVlOGM4MjVjMDUzMDdkOGYzNDZjZDFh
MTk4NjEzNjY2NTU0M2QubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBk2zANBgkqhkiG9w0BAQsFAAOC
AQEAxGgypVSqvu/ip/w2yESyMlJ0WuwR7e9RzhAaA1l0IaayFXqd6M+vcjtOl2qg
x34uGB3+HbNowBc5jRVWE+Px5dbDp8mRa+6h/484hGI8k1ZJi8eHYcc9PHuTlev1
cdcdoTQEndFmGuYSTngbT2PWh5MJFFGofbHi4x6cT8bE7udHxoe+dbTHvLHf3lzE
nc29sgHv8Gc2u8qb3A0cy4nPteOp0ghlZnT0mvJXd9XoR4Nagqr/ZVxvL458JNli
In9Mi9qpPjiB1oK90tjAJrXryvBXJCwZ5zcjLMcGtjJq/QR1UqZYZ89mMoRAbgvg
qWKaLE9eigTBK0DmcC4ff0+euw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:12 2024 by rpki-client on console-fra.rpki-client.org