Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.cer
File:                     7bd015f599a571a8e20d3eb5a7bae05bf71e908b.cer (raw, json)
Hash identifier:          vTsBnpkMd43g9o0rVAYiY0k3K/xv5Z+zmT14LfjIwCg=
Subject key identifier:   E4:6D:18:CE:56:58:1B:49:48:8A:46:29:FC:E2:DA:D1:3A:4D:45:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDF384
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 May 2019 21:09:34 +0000
Certificate not after:    Fri 08 Mar 2024 06:00:00 +0000
Subordinate resources:    AS: 27903
                          IP: 138.255.152.0/22
                          IP: 170.0.176.0/22
                          IP: 200.89.80.0/21
                          IP: 2803:fa40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14545796 (0xddf384)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  9 21:09:34 2019 GMT
            Not After : Mar  8 06:00:00 2024 GMT
        Subject: CN=7bd015f599a571a8e20d3eb5a7bae05bf71e908b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:22:d2:8d:aa:19:aa:d3:da:6c:76:98:db:df:
                    42:21:bd:91:67:07:ee:00:1e:b3:6d:c1:c6:38:93:
                    1d:4e:88:fd:7c:d5:05:32:e6:f8:28:3b:a9:5d:7c:
                    25:1b:c0:f6:6f:3d:51:12:a2:82:38:d6:1a:43:37:
                    cf:30:21:80:41:42:59:97:28:af:ff:05:a4:3a:a3:
                    80:c5:d9:48:c7:39:76:5c:32:7c:f3:9b:73:c7:25:
                    87:91:0d:77:d3:42:29:fb:2a:ef:07:77:30:b6:b5:
                    96:e8:c2:52:4f:a6:c2:c5:5b:67:5a:8e:0f:35:b0:
                    ef:62:9b:e2:22:2e:62:e8:9e:ce:0c:c9:18:56:1f:
                    cf:46:da:ea:d1:75:f0:fe:2a:ef:71:34:bf:4a:6f:
                    86:8b:92:db:ce:e6:fe:a8:18:b8:3b:d2:3c:71:fc:
                    b5:88:ca:0e:b6:38:5b:96:bf:68:55:64:fb:a8:7c:
                    a9:6a:c8:8e:51:6e:1e:b6:ea:1a:38:01:ea:63:29:
                    d3:7b:91:bf:79:20:77:77:57:60:2e:50:5f:91:e9:
                    b3:be:25:fe:82:8f:cd:55:30:1c:cf:8a:cb:a5:a0:
                    48:64:b6:43:50:5d:01:e7:f8:72:f0:b9:38:d0:05:
                    a1:d0:01:69:ef:4a:29:3e:18:be:83:c3:63:d3:54:
                    b3:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6D:18:CE:56:58:1B:49:48:8A:46:29:FC:E2:DA:D1:3A:4D:45:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3c59562f-838e-46ca-8fe0-829587696e82/7bd015f599a571a8e20d3eb5a7bae05bf71e908b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.152.0/22
                  170.0.176.0/22
                  200.89.80.0/21
                IPv6:
                  2803:fa40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27903

    Signature Algorithm: sha256WithRSAEncryption
         5d:41:59:f8:c1:02:98:51:6e:df:1b:f0:3a:ee:28:a1:1a:a6:
         11:da:d0:22:f5:96:eb:e5:55:46:30:d8:dc:d9:a6:d5:01:d3:
         3f:b3:4a:b2:b1:93:76:40:4b:55:1c:c2:58:70:d2:88:c8:08:
         3d:8d:9d:00:1f:83:9a:0a:03:ad:7f:bb:01:6f:a8:8b:24:56:
         9d:7c:3d:93:ab:5a:80:9b:ab:a2:be:a3:e5:fb:13:cc:a6:8c:
         dc:46:c4:18:3c:99:60:c0:39:4d:f0:71:2d:2b:5b:49:25:9c:
         9a:f1:07:db:21:77:01:14:d3:0c:db:da:ed:1b:b6:df:3d:d4:
         a1:b8:29:1a:c5:fd:65:db:92:63:92:49:c5:31:79:96:4c:a5:
         32:48:7e:ad:c8:2e:43:25:a5:53:2e:aa:32:5c:14:4e:98:17:
         5b:29:6e:1d:cd:94:b2:ff:00:a9:0c:aa:28:a3:6c:f3:bc:f4:
         f6:0f:51:4d:f3:ad:1a:14:bc:d5:d7:f6:bd:ee:62:29:44:1a:
         97:eb:34:36:64:61:69:b1:b8:c4:00:1f:36:b2:33:91:b3:c5:
         5e:f3:b7:01:c6:15:65:89:15:89:ed:1a:0c:5c:11:4f:89:1e:
         a1:07:d0:31:35:6e:ef:e0:35:63:ea:14:ee:75:70:0f:87:43:
         ce:81:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:34 2024 by rpki-client on console-fra.rpki-client.org