Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8fef8e71cfdeabc47bfc62a6a3b0e658cf83c247.cer
File:                     8fef8e71cfdeabc47bfc62a6a3b0e658cf83c247.cer (raw, json)
Hash identifier:          MIARQle81N611N1ERIdu0c1et+EE4WrSxDfzoPFHbug=
Subject key identifier:   D6:4C:D5:A9:D8:EA:F7:9E:23:29:E5:5E:64:6E:8A:78:8A:77:D7:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE8FDD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/afbb8e23-6f49-45bd-aa06-9ddf5ec52ddb/8fef8e71cfdeabc47bfc62a6a3b0e658cf83c247.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/afbb8e23-6f49-45bd-aa06-9ddf5ec52ddb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 17:08:00 +0000
Certificate not after:    Mon 18 Nov 2024 13:31:15 +0000
Subordinate resources:    AS: 262680
                          IP: 170.246.208.0/22
                          IP: 177.126.224.0/20
                          IP: 187.85.80.0/20
                          IP: 190.108.96.0/19
                          IP: 2804:840::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16682973 (0xfe8fdd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 17:08:00 2023 GMT
            Not After : Nov 18 13:31:15 2024 GMT
        Subject: CN=8fef8e71cfdeabc47bfc62a6a3b0e658cf83c247
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:47:34:f0:c6:16:01:cc:4b:75:ed:25:11:
                    f8:b9:bf:49:4b:0c:a9:64:5d:3c:35:29:01:39:8c:
                    b1:48:b3:77:93:8d:61:27:c5:89:e7:9c:62:c8:71:
                    80:00:24:8a:b9:fc:fe:ce:4f:a7:29:07:44:0c:67:
                    3e:ba:a6:6f:7f:03:ef:68:2e:8f:7e:c5:a7:52:58:
                    cf:fa:5c:06:70:9c:88:82:22:4b:d6:dc:da:2f:76:
                    e1:bb:de:61:29:ea:8e:45:5d:e0:fd:d8:32:2e:9e:
                    90:80:89:0e:07:27:13:12:42:30:57:0d:72:93:2b:
                    4c:5c:6c:3d:42:67:6b:23:55:73:06:29:0b:f9:d6:
                    74:f8:1d:46:38:12:a8:62:b2:e6:c2:84:12:ba:fb:
                    d0:07:f6:7e:f0:87:19:78:de:1d:b0:be:8d:b6:82:
                    d9:2a:9c:51:34:51:1f:4c:ab:9b:b5:5a:12:77:56:
                    88:3c:33:5b:72:1c:5f:c5:b2:4f:c1:a0:d3:db:2c:
                    a4:96:b0:f9:fb:9c:2a:94:8a:8a:7f:f2:75:c6:22:
                    ca:3f:fa:a0:9b:23:22:33:b0:03:26:7c:09:59:e3:
                    1a:e8:23:8f:6b:1b:44:e7:cb:41:c4:25:95:86:9d:
                    d8:d5:04:36:8a:0c:10:29:5b:77:27:8c:7d:d6:97:
                    8a:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:4C:D5:A9:D8:EA:F7:9E:23:29:E5:5E:64:6E:8A:78:8A:77:D7:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/afbb8e23-6f49-45bd-aa06-9ddf5ec52ddb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/afbb8e23-6f49-45bd-aa06-9ddf5ec52ddb/8fef8e71cfdeabc47bfc62a6a3b0e658cf83c247.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.246.208.0/22
                  177.126.224.0/20
                  187.85.80.0/20
                  190.108.96.0/19
                IPv6:
                  2804:840::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262680

    Signature Algorithm: sha256WithRSAEncryption
         89:02:7d:4a:1c:bc:3f:fa:43:af:4e:6b:c4:8e:ce:3a:49:66:
         cc:74:9f:9f:04:4e:28:74:56:f9:77:df:d4:44:42:63:71:de:
         dd:32:3f:c2:0c:0a:07:39:46:91:53:70:2e:f6:f1:6c:c3:ee:
         d1:fc:41:7d:61:0c:1a:1c:7b:ff:6f:8f:47:4e:96:99:21:9f:
         fa:1c:f3:8c:66:96:06:99:cd:2a:b4:25:40:9c:09:08:62:28:
         77:97:a5:3a:16:c0:57:61:dd:d6:c9:05:5d:07:86:dc:5a:84:
         d7:af:dd:14:02:7f:bf:f6:0c:e4:da:dc:0e:ee:60:3a:05:b0:
         df:1b:a3:5c:8d:2d:92:3b:54:66:e4:ac:0d:c8:be:3b:60:c6:
         64:03:29:04:45:0c:5b:4e:70:0f:70:89:93:9a:1e:3e:ee:4b:
         13:29:bb:c1:2b:4a:64:b1:52:b6:76:68:ee:83:0f:57:6c:07:
         63:95:4b:03:68:17:17:91:56:72:c7:5f:58:2e:2a:ad:e7:24:
         7f:da:37:0a:e8:b6:f6:38:6c:20:e3:33:eb:ee:e8:f5:b2:da:
         fd:ad:b7:e3:f4:43:e8:55:67:00:be:76:33:8d:6f:f8:73:4a:
         ec:45:4a:f3:18:f1:41:0f:80:a8:55:85:5e:14:10:2b:1b:65:
         f1:02:81:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:35 2024 by rpki-client on console-fra.rpki-client.org