Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8af635228aa4fcce5eb898f21336376599005c7f.cer
File:                     8af635228aa4fcce5eb898f21336376599005c7f.cer (raw, json)
Hash identifier:          du21zcZqD51ZNX3KnjkBRKYtZYLe5r9Bk/nsMjyREmE=
Subject key identifier:   63:BC:F8:D4:13:FD:10:3D:CD:0A:16:12:ED:CB:07:D8:58:BB:BC:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5DBF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2a6ba53c-1aff-493c-86d6-b07b5767018b/8af635228aa4fcce5eb898f21336376599005c7f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2a6ba53c-1aff-493c-86d6-b07b5767018b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 19 Aug 2023 12:45:51 +0000
Certificate not after:    Fri 07 Feb 2025 22:29:15 +0000
Subordinate resources:    AS: 272116
                          IP: 200.0.184.0/24
                          IP: 200.3.113.0/24
                          IP: 200.10.161.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16112628 (0xf5dbf4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 19 12:45:51 2023 GMT
            Not After : Feb  7 22:29:15 2025 GMT
        Subject: CN=8af635228aa4fcce5eb898f21336376599005c7f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:ee:06:83:e6:58:bf:aa:f2:55:24:94:42:cf:
                    76:9c:4f:91:a4:01:3f:53:eb:62:51:ce:82:a5:9a:
                    d3:32:81:97:cb:78:a2:ef:d6:92:0e:e6:88:b9:b9:
                    6f:8d:24:63:ef:85:9f:2f:25:e6:4b:2f:3c:1f:65:
                    1f:31:0a:dd:63:98:72:8d:20:c2:61:12:41:d9:64:
                    e0:d9:6d:6b:e5:f5:5f:17:85:74:35:68:ee:c0:ec:
                    3e:ba:fb:da:e1:28:5f:f3:2d:33:e1:48:ef:1a:26:
                    1d:14:9b:af:a0:2b:9b:7f:5d:8d:e6:4c:01:3e:70:
                    20:6a:6c:ef:b7:51:70:9b:50:b2:e0:7d:80:22:16:
                    cc:c7:1b:57:8c:61:ac:9b:54:96:f2:91:fa:03:80:
                    06:88:00:a8:88:5f:8d:b8:0c:0c:6d:79:68:42:50:
                    a3:74:72:a1:07:c9:04:02:87:ae:27:43:0e:b3:e3:
                    cb:ca:6c:91:ca:cb:b7:b9:35:cc:e6:d8:d5:13:8b:
                    79:e8:8d:d3:78:7b:cf:b3:ac:fe:1d:2e:bf:a3:d1:
                    d1:e8:83:f0:52:94:e6:dc:07:43:ed:44:f7:cd:af:
                    fb:40:99:6e:f9:63:16:81:33:5b:9a:20:a8:cb:53:
                    5f:6a:08:f5:41:c6:1f:28:86:37:65:7f:50:ed:5e:
                    fa:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:BC:F8:D4:13:FD:10:3D:CD:0A:16:12:ED:CB:07:D8:58:BB:BC:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a6ba53c-1aff-493c-86d6-b07b5767018b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a6ba53c-1aff-493c-86d6-b07b5767018b/8af635228aa4fcce5eb898f21336376599005c7f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.184.0/24
                  200.3.113.0/24
                  200.10.161.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272116

    Signature Algorithm: sha256WithRSAEncryption
         53:e1:3b:22:92:a2:74:33:0a:85:1b:9f:b5:48:0b:f3:8b:51:
         49:cc:97:91:60:72:00:37:a7:8e:36:dc:7d:68:b5:7b:78:00:
         dd:de:58:e4:1c:ca:79:da:4e:07:c1:87:b2:85:7c:16:23:02:
         47:5d:53:5d:96:ba:c0:a8:6b:9a:c4:37:b9:f8:fe:6e:8e:e6:
         0f:e4:dc:74:1d:95:66:71:8d:32:bb:9e:10:03:86:fc:bc:70:
         ad:f7:a6:72:e1:14:cb:fb:fe:ad:07:7f:84:06:09:0e:c2:d2:
         39:05:d1:43:d1:0b:45:b5:62:6f:8d:fc:c3:87:68:ce:c2:54:
         5b:b2:bf:63:5f:83:08:c0:60:27:56:f9:b6:6e:a4:05:37:57:
         f0:84:0a:0c:e7:ee:bf:e9:39:48:bc:29:c3:70:dd:4e:dd:d5:
         a5:ea:9f:7a:a1:8a:ec:3e:df:d7:35:b1:53:82:fc:90:58:78:
         22:e7:36:3f:cf:89:ca:6c:89:fd:72:b7:a7:2e:32:7f:54:4a:
         c6:7e:30:31:c0:16:60:84:97:37:35:3b:19:6f:a8:0c:6e:64:
         70:8b:2e:35:26:4a:11:20:f9:33:c4:4f:7e:b1:89:e2:33:bd:
         c6:95:f5:d0:f7:75:3d:16:d4:49:dc:e0:8a:2a:16:b9:7b:31:
         8c:be:01:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org