Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8484cf748c84e92f3785aca9df91ac27ccf432a5.cer
File:                     8484cf748c84e92f3785aca9df91ac27ccf432a5.cer (raw, json)
Hash identifier:          MljDZRyG3AsCLpzAY+PUc627d5UYE/ZJ3Pv6OoIsn5g=
Subject key identifier:   2F:CE:7D:82:D4:45:E3:34:13:37:15:AF:A8:AD:30:05:D9:03:FB:70
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF9197
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/77a5c803-fcea-4acc-850b-3523ec9df453/8484cf748c84e92f3785aca9df91ac27ccf432a5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/77a5c803-fcea-4acc-850b-3523ec9df453/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 26 Jun 2023 18:58:50 +0000
Certificate not after:    Tue 28 May 2024 15:00:00 +0000
Subordinate resources:    IP: 200.13.41.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15700375 (0xef9197)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 26 18:58:50 2023 GMT
            Not After : May 28 15:00:00 2024 GMT
        Subject: CN=8484cf748c84e92f3785aca9df91ac27ccf432a5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:79:c3:49:e3:bc:75:07:85:55:97:d2:f9:b0:
                    b6:6c:9e:4a:92:44:83:65:c5:62:4c:15:b5:a3:a9:
                    ab:bb:f2:c9:39:c6:a5:fd:c6:21:eb:e4:dc:92:e7:
                    2c:e4:e3:a4:a0:8f:2f:e9:f0:2f:df:c1:a7:cd:dd:
                    9b:3c:da:9e:ae:2a:a3:e0:7d:4f:c6:01:b8:c2:cb:
                    1b:01:bf:76:c0:d1:b2:86:0b:49:9e:b6:ce:44:73:
                    c8:fd:30:9c:34:a1:2d:1b:ce:dd:22:39:11:04:7a:
                    94:45:63:72:c0:60:80:e4:21:6b:8d:6f:c1:53:cd:
                    47:72:3d:c4:85:7d:9a:c7:cc:ff:e8:61:cf:b9:51:
                    c1:78:42:64:72:fc:74:ee:db:48:66:86:46:67:40:
                    76:95:25:d0:40:97:c5:05:6f:68:d7:f6:cc:29:c9:
                    ae:53:62:a7:29:e1:57:38:34:41:21:d4:e9:52:bc:
                    70:a0:76:64:30:b6:e8:92:f3:2a:4d:ce:29:46:4d:
                    a1:87:b9:a8:55:7c:23:5a:9d:ca:ef:26:4b:bf:c7:
                    82:48:67:32:d2:fe:5c:52:93:3f:80:0b:24:3a:2a:
                    b8:2b:b0:f8:45:49:28:ca:16:d6:0b:e0:5d:d6:33:
                    b7:3f:7e:ce:9c:3b:6b:d6:48:4c:fe:03:46:9b:46:
                    00:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:CE:7D:82:D4:45:E3:34:13:37:15:AF:A8:AD:30:05:D9:03:FB:70
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/77a5c803-fcea-4acc-850b-3523ec9df453/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/77a5c803-fcea-4acc-850b-3523ec9df453/8484cf748c84e92f3785aca9df91ac27ccf432a5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.41.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a4:0f:27:f0:80:66:10:d4:66:04:9a:ae:71:18:de:81:01:c0:
         15:e4:09:45:91:60:04:67:8e:b3:f1:49:a2:ff:86:0c:47:dc:
         23:e5:6c:76:3e:fa:92:2c:83:38:cd:b5:10:62:e2:17:68:1d:
         aa:ca:b8:20:86:4f:84:ea:f5:3e:13:58:bf:21:30:dc:f1:87:
         b1:b0:b5:a3:34:6b:91:34:28:9c:ae:4c:bf:5f:ac:a2:08:8f:
         f7:26:91:dd:4b:d7:b1:98:ef:a1:4e:9b:7f:4e:97:e7:1b:32:
         a3:4b:82:fb:f0:4c:ec:61:3d:c4:fe:c4:3d:9f:93:b3:b8:21:
         b8:0a:cd:86:05:c4:69:8c:c4:da:e8:7e:7a:12:89:e5:6b:bf:
         32:3a:04:f2:c9:4f:af:9d:38:97:60:b7:58:19:dd:ed:a2:a1:
         7b:d7:c1:34:e1:98:8d:69:50:da:fb:1b:61:c0:96:c7:e1:26:
         00:ee:a5:cd:39:a5:cc:66:3c:c4:68:12:32:61:3f:14:38:f5:
         e4:70:9d:1c:bd:ab:19:ac:cf:3e:43:97:a7:c2:a3:cc:a9:34:
         d8:c0:5a:25:56:fe:9e:39:b3:55:06:ed:e4:11:10:dc:e0:8a:
         9e:48:ad:d7:73:5b:de:e2:05:dc:3c:5e:dc:51:3e:0e:55:a0:
         c8:1d:ce:85
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAO+RlzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDYyNjE4NTg1MFoXDTI0MDUyODE1MDAw
MFowMzExMC8GA1UEAxMoODQ4NGNmNzQ4Yzg0ZTkyZjM3ODVhY2E5ZGY5MWFjMjdj
Y2Y0MzJhNTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJB5w0njvHUH
hVWX0vmwtmyeSpJEg2XFYkwVtaOpq7vyyTnGpf3GIevk3JLnLOTjpKCPL+nwL9/B
p83dmzzanq4qo+B9T8YBuMLLGwG/dsDRsoYLSZ62zkRzyP0wnDShLRvO3SI5EQR6
lEVjcsBggOQha41vwVPNR3I9xIV9msfM/+hhz7lRwXhCZHL8dO7bSGaGRmdAdpUl
0ECXxQVvaNf2zCnJrlNipynhVzg0QSHU6VK8cKB2ZDC26JLzKk3OKUZNoYe5qFV8
I1qdyu8mS7/HgkhnMtL+XFKTP4ALJDoquCuw+EVJKMoW1gvgXdYztz9+zpw7a9ZI
TP4DRptGAIkCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBQvzn2C1EXjNBM3Fa+orTAF
2QP7cDAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83N2E1YzgwMy1mY2Vh
LTRhY2MtODUwYi0zNTIzZWM5ZGY0NTMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNzdhNWM4MDMtZmNlYS00
YWNjLTg1MGItMzUyM2VjOWRmNDUzLzg0ODRjZjc0OGM4NGU5MmYzNzg1YWNhOWRm
OTFhYzI3Y2NmNDMyYTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMgNKTANBgkqhkiG9w0BAQsFAAOC
AQEApA8n8IBmENRmBJqucRjegQHAFeQJRZFgBGeOs/FJov+GDEfcI+Vsdj76kiyD
OM21EGLiF2gdqsq4IIZPhOr1PhNYvyEw3PGHsbC1ozRrkTQonK5Mv1+sogiP9yaR
3UvXsZjvoU6bf06X5xsyo0uC+/BM7GE9xP7EPZ+Ts7ghuArNhgXEaYzE2uh+ehKJ
5Wu/MjoE8slPr504l2C3WBnd7aKhe9fBNOGYjWlQ2vsbYcCWx+EmAO6lzTmlzGY8
xGgSMmE/FDj15HCdHL2rGazPPkOXp8KjzKk02MBaJVb+njmzVQbt5BEQ3OCKnkit
13Nb3uIF3Dxe3FE+DlWgyB3OhQ==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org