Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8afdf29f9cf235b0bd49725c1d8db340c546c41d.cer
File:                     8afdf29f9cf235b0bd49725c1d8db340c546c41d.cer (raw, json)
Hash identifier:          k+2txPflM4/K4cACPb5Sqy968cXKtrlXLm8D9W5BuFQ=
Subject key identifier:   A3:70:E8:DB:0D:4C:1C:F2:AA:EC:C7:C2:46:35:47:AA:7C:EF:CB:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9238E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8afdf29f9cf235b0bd49725c1d8db340c546c41d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16327566 (0xf9238e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=8afdf29f9cf235b0bd49725c1d8db340c546c41d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:7a:5c:84:33:d5:8b:69:8a:23:f0:12:28:b8:
                    ba:74:ea:fc:72:7d:f9:dc:11:a0:1d:34:0f:34:df:
                    08:fc:ea:bc:a7:f6:d3:36:0c:34:a6:8f:9d:3a:41:
                    a0:0f:b9:dd:ac:ef:ac:86:1b:d9:bf:67:6d:5d:41:
                    22:5e:bb:db:0a:5a:0a:14:fc:ab:54:6d:08:a3:0e:
                    11:f7:da:71:89:07:15:8c:f4:f5:ff:a7:93:01:7d:
                    54:2e:3f:79:03:16:2d:7a:0b:96:f6:fc:5d:a7:fc:
                    db:50:f6:2f:bf:cc:d3:11:ad:d2:dc:aa:95:54:d1:
                    25:07:6c:09:3b:07:2a:d4:35:5e:18:d3:dd:45:b2:
                    a0:be:e1:14:ab:aa:94:00:48:8f:57:c8:e1:05:ca:
                    b7:a4:46:99:70:bc:5e:c3:70:77:80:2d:0c:70:7c:
                    7b:85:7d:a9:55:e8:c2:53:d8:c0:71:15:3a:b0:f7:
                    ee:66:01:3a:a6:e0:fa:87:8b:98:0d:58:fd:03:75:
                    df:fd:bd:c9:49:f1:72:ff:59:63:ad:7b:16:2b:fb:
                    79:e4:d1:bf:20:1c:11:28:ac:df:83:93:7a:78:9b:
                    68:45:24:07:06:67:dc:7d:db:d9:38:d2:d8:75:d8:
                    53:c7:3d:e1:8c:b5:61:c3:94:fa:f1:de:1a:71:36:
                    06:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:70:E8:DB:0D:4C:1C:F2:AA:EC:C7:C2:46:35:47:AA:7C:EF:CB:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/8afdf29f9cf235b0bd49725c1d8db340c546c41d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         24:da:48:8b:ca:63:6c:00:9c:d6:a4:b5:ff:67:51:f5:5c:30:
         57:6c:4d:49:5e:ec:3b:c9:d7:20:b1:e6:71:74:88:16:f1:59:
         f2:6b:0d:68:83:98:2d:c9:c1:77:ab:6c:00:95:5e:d0:81:66:
         ec:8e:31:31:d9:ec:90:49:a0:fb:97:44:11:e7:fb:0a:ad:ff:
         67:3f:a8:69:5f:38:d0:07:22:cd:1b:44:c2:63:f1:b9:26:ed:
         b1:3a:a1:f3:3a:58:ec:f5:32:03:4f:6e:eb:fc:a2:79:a6:52:
         14:8c:e5:16:89:51:08:dd:54:93:85:ce:2e:9c:bf:35:9d:83:
         19:c1:09:9b:ae:89:00:86:60:bf:d9:18:3c:72:68:0e:11:63:
         11:7f:6c:3d:d1:35:9f:40:10:67:5f:e4:cd:18:cc:ad:4b:2c:
         23:41:c9:6e:2b:ce:dd:92:83:6d:62:cc:b1:be:e4:06:02:52:
         ae:f4:c8:8b:d5:54:83:42:b5:bf:59:16:78:ca:b1:06:3e:d8:
         d0:74:85:7f:2f:03:66:bc:b1:44:7f:b7:e6:10:7d:22:dd:31:
         ad:24:bd:8d:f0:90:91:74:e6:da:13:c9:91:3c:24:9f:72:e7:
         d7:16:fa:06:be:a1:27:0a:44:df:c7:5d:23:44:c7:e5:04:67:
         22:ca:07:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:27 2024 by rpki-client on console-ams.rpki-client.org