Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9658cc8fa1b8dfe06902ff22f99a8ed029d0aa3f.cer
File:                     9658cc8fa1b8dfe06902ff22f99a8ed029d0aa3f.cer (raw, json)
Hash identifier:          f9OlwBOJrNF3yZuUU3xz5v0PuKe9XrSXMuCwNGtJqQA=
Subject key identifier:   19:32:04:78:05:41:B9:34:05:05:E3:54:33:16:04:F3:6E:E1:5D:DF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FED987
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9497cd15-d07f-4664-84df-4c1899cbbf14/9658cc8fa1b8dfe06902ff22f99a8ed029d0aa3f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9497cd15-d07f-4664-84df-4c1899cbbf14/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:37:33 +0000
Certificate not after:    Mon 09 Jun 2025 21:46:55 +0000
Subordinate resources:    AS: 28329
                          IP: 177.107.32.0/19
                          IP: 179.96.0.0/17
                          IP: 186.226.64.0/19
                          IP: 189.50.112.0/20
                          IP: 2804:39c::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16701831 (0xfed987)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:37:33 2023 GMT
            Not After : Jun  9 21:46:55 2025 GMT
        Subject: CN=9658cc8fa1b8dfe06902ff22f99a8ed029d0aa3f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:8d:ee:16:53:70:02:fc:8f:8e:0f:21:f8:f9:
                    63:0b:04:52:2a:80:99:29:2f:c0:29:fc:80:68:dc:
                    1e:67:05:bd:ec:2f:03:c9:af:5c:81:db:ef:bf:0e:
                    c5:0d:c2:85:f9:c5:b0:e0:8e:ac:40:c7:a0:16:2d:
                    86:f9:ce:fc:db:ec:c1:5e:d4:d4:16:b1:bb:a2:70:
                    a4:a3:4a:6f:97:d6:65:ce:ef:92:c8:25:0e:de:17:
                    b7:69:66:df:32:97:99:a4:d1:4c:61:c4:3e:9e:91:
                    af:8d:d2:8d:e5:64:7b:07:42:6f:dc:df:b4:c4:58:
                    e3:c4:85:f1:0b:28:13:51:6d:52:21:f1:1f:d4:67:
                    17:18:01:9c:bd:e9:15:c0:4b:f4:ec:f3:97:a5:b3:
                    3a:92:f6:7b:28:c6:0c:c1:4c:4b:00:fe:d3:46:e4:
                    15:90:2d:4a:a1:f2:e5:92:dd:8d:9b:b3:c3:f1:1a:
                    11:22:00:a1:c4:69:85:35:3b:75:c8:1f:3b:63:78:
                    31:3a:b5:6d:b9:12:f8:14:15:78:f3:a2:49:75:4c:
                    28:37:21:ba:ef:76:bb:95:25:49:99:c7:22:68:ae:
                    d4:8d:59:82:b6:25:60:24:b3:12:9d:22:27:c8:a9:
                    8d:f9:dd:d2:b8:3a:a1:62:e2:67:94:c7:34:3f:88:
                    bf:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                19:32:04:78:05:41:B9:34:05:05:E3:54:33:16:04:F3:6E:E1:5D:DF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9497cd15-d07f-4664-84df-4c1899cbbf14/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9497cd15-d07f-4664-84df-4c1899cbbf14/9658cc8fa1b8dfe06902ff22f99a8ed029d0aa3f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.107.32.0/19
                  179.96.0.0/17
                  186.226.64.0/19
                  189.50.112.0/20
                IPv6:
                  2804:39c::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28329

    Signature Algorithm: sha256WithRSAEncryption
         25:d7:65:35:2e:f1:68:d1:7a:72:ab:7b:45:f2:d1:89:f4:92:
         a2:74:f5:df:b4:64:a0:30:eb:57:5f:2d:57:bb:8d:7a:5b:2f:
         e6:9a:53:88:9b:4f:df:86:58:b5:22:95:6c:1b:97:03:11:85:
         fe:ec:50:b6:16:9c:55:14:0b:cf:08:89:63:ca:d3:d7:68:26:
         2f:4b:b3:db:45:c2:5b:aa:21:a7:09:e6:09:31:18:8d:ad:18:
         3d:96:b3:cf:a6:c1:5d:7c:c6:4b:81:b2:46:9c:6d:3d:e7:c6:
         29:17:41:6b:21:af:97:80:0b:fe:27:23:e3:91:68:b0:89:82:
         65:f0:6f:c0:3d:07:12:e7:5a:81:7a:fe:84:86:3e:bb:f8:1e:
         4e:7a:39:e1:ec:c4:19:89:20:ec:19:03:01:7c:b4:36:e8:98:
         82:d8:4c:60:ed:17:de:b4:5e:0f:b5:79:c9:19:ae:77:e3:7e:
         d9:11:62:65:09:02:94:98:0a:4c:50:c3:d0:06:9b:8c:01:03:
         4e:5e:11:53:14:ed:16:ed:50:8c:50:66:03:27:81:17:f0:c0:
         ea:6f:f3:0c:3b:6a:d9:9e:29:48:0d:1e:6c:4e:54:49:a4:1a:
         82:a7:44:ad:57:2f:3b:61:a6:3e:01:f4:d8:68:27:c2:df:fd:
         35:83:19:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:27 2024 by rpki-client on console-ams.rpki-client.org