Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8da5ca421c0f7de25c5d4a5aa6cc3d396d648035.cer
File:                     8da5ca421c0f7de25c5d4a5aa6cc3d396d648035.cer (raw, json)
Hash identifier:          hXLtJB1EwFTLrF7W4IcolkgJAK0AngORLrft8Z+krEI=
Subject key identifier:   99:92:CE:9C:12:A5:C1:CD:67:A6:71:68:F1:74:94:89:84:82:6B:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CF4245
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/eb4c660a-0fee-42a3-aec7-82516becc1ae/8da5ca421c0f7de25c5d4a5aa6cc3d396d648035.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/eb4c660a-0fee-42a3-aec7-82516becc1ae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 09 Aug 2022 15:52:40 +0000
Certificate not after:    Wed 22 May 2024 21:26:02 +0000
Subordinate resources:    IP: 2801:149::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13582917 (0xcf4245)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  9 15:52:40 2022 GMT
            Not After : May 22 21:26:02 2024 GMT
        Subject: CN=8da5ca421c0f7de25c5d4a5aa6cc3d396d648035
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:e5:26:0f:8c:9b:13:eb:2d:7b:13:ac:64:fd:
                    c6:f3:9b:5b:71:a8:da:74:21:6f:aa:b7:cd:6d:50:
                    1f:9a:38:bd:c4:56:1a:a9:4e:81:27:5a:21:b7:8b:
                    ce:22:85:d9:7b:71:3c:13:f2:21:d6:72:73:8a:85:
                    83:3b:78:e5:8c:8c:60:e3:55:69:eb:d7:1a:5c:73:
                    0d:0d:55:0d:45:1f:cc:77:e7:af:ab:2b:28:9f:f9:
                    de:33:37:ab:73:97:47:f4:da:51:60:1a:72:26:86:
                    09:4f:fc:4e:a7:b0:3a:7a:68:97:ec:4e:3c:c6:70:
                    64:6e:fa:a8:3f:4d:ac:54:c7:75:4b:16:18:bd:56:
                    8d:5b:92:78:d3:35:e4:40:d1:72:40:5b:b6:5d:46:
                    85:eb:04:bd:a8:04:c7:97:d7:55:d0:dc:75:b8:76:
                    6f:05:67:15:32:d7:34:e0:41:53:c4:1c:29:ee:d0:
                    3a:ce:0d:65:b4:f9:46:a2:8d:d7:b0:d7:8b:e6:d4:
                    70:f6:3b:ae:27:b7:37:63:2c:08:b3:a9:cf:8c:22:
                    cf:a8:21:2b:41:74:e3:1f:1b:1e:18:be:8f:cd:40:
                    0a:e1:84:93:fb:ad:10:45:89:4d:3b:c7:51:fe:ea:
                    41:08:e8:fe:32:9b:b8:92:17:37:ba:f6:b6:71:db:
                    71:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:92:CE:9C:12:A5:C1:CD:67:A6:71:68:F1:74:94:89:84:82:6B:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/eb4c660a-0fee-42a3-aec7-82516becc1ae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/eb4c660a-0fee-42a3-aec7-82516becc1ae/8da5ca421c0f7de25c5d4a5aa6cc3d396d648035.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:149::/44

    Signature Algorithm: sha256WithRSAEncryption
         7b:31:2f:eb:a8:6d:a4:f1:da:13:ab:86:ab:1a:72:06:e7:e7:
         13:78:05:1e:b6:9c:72:61:51:bd:92:a3:cf:31:5f:e9:bb:a8:
         46:c3:69:da:28:fb:98:e6:79:f3:dc:f0:e6:2a:dc:4c:34:95:
         f8:bb:76:a5:1f:61:94:14:a1:fc:d2:d8:89:c5:51:ab:9d:9a:
         b3:64:52:04:73:9a:2a:49:b1:b0:db:ee:a5:18:71:c3:63:3d:
         df:52:35:23:06:b4:df:f3:37:c2:5f:09:d3:cb:90:32:27:35:
         44:26:04:24:51:cc:88:aa:f0:73:3a:dd:fd:dc:c5:4c:58:a2:
         b6:da:70:ee:80:99:f1:43:3c:1d:94:4a:fe:5a:51:1a:e6:8d:
         b0:82:dc:7a:53:37:7c:9a:54:44:3d:94:4c:d6:69:27:b2:47:
         1b:de:b2:96:7e:5d:07:4d:94:2d:81:4c:a0:2c:cd:ad:34:30:
         6e:2d:23:20:bf:c6:f5:8b:9b:12:9c:3c:51:2a:6e:17:5e:06:
         12:93:cb:a5:d3:0e:8b:0a:d0:a5:1e:8e:23:d9:d4:40:ed:f2:
         58:71:40:b6:11:55:91:2a:6b:ef:1c:18:26:b0:2e:a0:f0:45:
         fc:ed:7b:e6:ef:52:6b:3a:e9:40:18:88:6b:d7:d7:64:56:07:
         c3:bb:d8:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org