Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8d016ee04965a12d97cf5622bc43dc9be3876145.cer
File:                     8d016ee04965a12d97cf5622bc43dc9be3876145.cer (raw, json)
Hash identifier:          g4jn5vZRDT6ooEdKabYPLidjt49ZIgYy4NLSVJpRDoo=
Subject key identifier:   2F:DA:D9:D1:60:CF:44:90:66:60:30:AF:C1:48:D5:86:74:E6:7D:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C92D75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8487eb74-7b19-4506-817a-2499f244d843/8d016ee04965a12d97cf5622bc43dc9be3876145.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8487eb74-7b19-4506-817a-2499f244d843/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 04 Jun 2022 20:20:13 +0000
Certificate not after:    Tue 02 Apr 2024 01:15:06 +0000
Subordinate resources:    IP: 2801:12:5800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13184373 (0xc92d75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  4 20:20:13 2022 GMT
            Not After : Apr  2 01:15:06 2024 GMT
        Subject: CN=8d016ee04965a12d97cf5622bc43dc9be3876145
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:47:cf:22:bc:7a:e4:3b:af:31:c5:82:1c:9c:
                    3a:6f:bb:03:1d:d0:d0:58:05:ee:67:42:3e:a8:b9:
                    bb:8b:a8:f0:59:8a:cb:a8:d0:e9:56:c2:47:71:92:
                    32:00:db:bb:de:de:72:85:83:77:21:12:c9:95:ad:
                    c6:d4:c0:0c:e8:99:a2:86:e4:ee:ec:e6:cc:5a:bd:
                    67:04:90:44:a8:d8:01:4a:5e:e9:05:95:4a:4f:d5:
                    70:4d:3c:88:ce:b1:62:c6:b5:14:e6:65:4f:21:03:
                    8f:f9:79:97:b6:2d:ac:c3:d5:3f:25:55:c9:ba:97:
                    1c:38:59:97:0c:f6:3e:24:35:59:19:fc:29:58:55:
                    fa:2e:e9:70:0c:7c:c8:fc:ca:e0:0c:2e:f0:4d:49:
                    21:e7:d5:0a:1c:c7:b9:a0:4d:8b:5e:a4:cb:b5:10:
                    a2:63:13:df:d7:a6:8b:b3:1c:6c:1c:c1:99:47:b4:
                    5e:11:be:44:8e:6c:de:fc:6b:03:06:09:df:41:f2:
                    56:5d:9c:0c:f0:72:a9:10:86:de:75:0e:c9:9a:58:
                    46:87:da:94:7c:b8:b4:13:80:01:7f:5b:ee:e0:de:
                    02:71:85:29:40:d8:95:0a:6c:11:a6:1a:f7:aa:08:
                    1d:12:15:8a:3a:81:71:6f:40:a5:de:f5:78:c4:b5:
                    af:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:DA:D9:D1:60:CF:44:90:66:60:30:AF:C1:48:D5:86:74:E6:7D:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8487eb74-7b19-4506-817a-2499f244d843/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8487eb74-7b19-4506-817a-2499f244d843/8d016ee04965a12d97cf5622bc43dc9be3876145.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:5800::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:bc:2a:de:39:f9:20:f2:11:fd:46:ac:ae:a2:ed:38:ca:53:
         cf:18:5b:21:85:15:f1:99:da:11:85:70:ef:e6:d2:a7:8a:f2:
         5f:13:aa:6e:3a:1f:be:3a:1d:8b:f4:e1:74:ae:f0:7e:02:14:
         dc:b8:0d:b5:24:82:54:8c:f7:19:4a:02:a3:d9:73:16:a7:e0:
         d4:16:15:ee:9c:5e:f8:91:ab:f8:73:6e:72:b1:f5:5b:89:b0:
         87:cc:c2:9b:dc:51:5d:b0:da:8e:dd:9e:ae:50:c2:7d:e9:47:
         41:59:2e:ab:8b:35:d5:a6:5b:54:e9:05:89:a0:29:40:76:43:
         63:a0:dd:f9:1c:d8:f1:c2:a3:f6:ab:3b:af:a5:f8:6b:aa:3b:
         1c:5e:aa:90:59:92:76:8e:ae:ad:be:4f:26:f8:23:ba:58:d0:
         f2:d6:11:fd:25:5c:1f:7d:12:d4:8c:37:a0:9c:2b:28:10:46:
         db:ff:d6:6d:fc:d0:bd:84:d9:47:26:ee:be:97:29:a1:38:2c:
         d6:bc:8a:a5:21:8a:91:eb:21:4f:1e:e0:37:5c:bf:d4:ba:4f:
         4f:47:65:d0:eb:3e:d3:f8:40:6e:f1:99:d3:ed:36:4d:a8:66:
         59:47:9e:ab:2f:da:72:20:e6:0d:53:e8:85:f7:3f:17:79:4f:
         2d:04:0f:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org