Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86059556325495219b02c9ff8c0c0906818810fa.cer
File:                     86059556325495219b02c9ff8c0c0906818810fa.cer (raw, json)
Hash identifier:          gqmF9bTcFcad3anyMfQomsj43/fwPvGOrqSP9b2bWLs=
Subject key identifier:   B3:77:57:2E:A3:DF:DE:74:2F:A7:72:FB:64:EC:99:6F:55:56:95:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB6DC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e487239d-90e1-40e2-ad53-4fc703b654f8/86059556325495219b02c9ff8c0c0906818810fa.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e487239d-90e1-40e2-ad53-4fc703b654f8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Oct 2021 16:36:46 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.0.74.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16477641 (0xfb6dc9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 12 16:36:46 2021 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=86059556325495219b02c9ff8c0c0906818810fa
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:68:05:c5:f3:3d:e3:a1:82:77:ea:2d:b6:aa:
                    a1:70:33:7c:33:0a:47:b5:d0:06:18:52:04:45:1f:
                    1f:8c:b6:dd:cd:7c:2e:28:8c:79:b3:c4:79:3a:7f:
                    d4:82:a4:ea:4f:43:c8:cb:b8:c5:ee:a8:4a:34:5d:
                    e0:e8:48:2a:93:cc:55:7c:d2:5b:ae:96:ac:c6:70:
                    1b:61:7f:28:b0:d8:05:f5:aa:24:62:cd:d6:9c:94:
                    b7:25:bb:89:bd:5e:f5:ba:89:06:e4:50:0b:cf:b8:
                    9e:55:fb:4a:dd:f6:7d:07:23:be:b7:86:40:b8:69:
                    8f:37:7b:3a:fd:a7:91:d2:be:45:d7:9d:32:d6:33:
                    0c:42:c2:c8:08:56:46:8f:05:55:2c:7c:6d:1a:6c:
                    44:43:f8:4e:d8:1b:1b:7d:32:09:b1:97:fa:6d:b8:
                    f1:40:94:4f:92:17:7e:e5:69:80:03:ba:f9:df:ea:
                    b6:54:c9:6d:bc:9b:b2:8d:eb:ae:25:a4:ac:ba:6a:
                    62:54:07:e2:3c:02:38:46:a2:4b:b7:b6:c0:54:79:
                    47:2b:93:dd:4b:bf:db:8a:fa:7c:9e:e4:60:7d:05:
                    bb:75:5e:73:e2:d3:00:9e:0c:99:ef:86:d5:ee:53:
                    be:d5:23:09:ce:2d:36:c0:f6:fb:66:40:d6:04:46:
                    72:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:77:57:2E:A3:DF:DE:74:2F:A7:72:FB:64:EC:99:6F:55:56:95:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e487239d-90e1-40e2-ad53-4fc703b654f8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e487239d-90e1-40e2-ad53-4fc703b654f8/86059556325495219b02c9ff8c0c0906818810fa.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.74.0/24

    Signature Algorithm: sha256WithRSAEncryption
         98:06:77:85:e2:2b:fa:2a:75:43:3c:5d:a7:af:c8:13:aa:bd:
         13:f4:9f:a1:fc:f1:09:f5:00:a3:9a:cf:b7:0d:93:3f:f0:40:
         30:61:1c:30:d2:b6:d8:ab:51:db:d6:68:4d:f8:5e:9b:2a:f7:
         37:6d:48:b3:62:c0:a4:9e:ce:92:3e:41:1a:3e:21:31:8e:f6:
         e8:bf:39:45:77:1f:5c:42:60:48:a9:3f:b1:4d:f1:91:37:90:
         7b:d9:4a:70:ac:fb:6a:55:ab:04:43:c6:e7:a0:82:ff:95:65:
         f8:87:78:0c:c6:61:80:b2:dc:06:da:92:d5:62:b2:ee:da:68:
         c9:56:54:67:08:e6:e9:17:a4:6d:a4:66:ed:c7:23:1a:c1:cc:
         9a:03:eb:b7:98:3b:66:ed:3b:c2:19:91:df:65:a5:da:c3:b1:
         24:57:87:05:a3:80:88:be:33:8c:48:84:19:e3:20:45:ab:22:
         4f:02:61:3f:87:be:52:73:80:28:61:49:77:34:12:c1:5b:eb:
         9d:0d:b5:03:af:39:15:55:11:8e:54:91:9f:ba:20:e4:97:72:
         71:30:3a:fe:52:17:50:f9:4d:16:fc:9d:13:d7:23:55:8d:f6:
         b1:c6:f5:05:48:d4:f6:53:23:f7:04:a9:39:39:ec:ad:82:d8:
         42:29:7f:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org