Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9e7ab624580d1af1c3ccd2022eef05e1cb3d1215.cer
File:                     9e7ab624580d1af1c3ccd2022eef05e1cb3d1215.cer (raw, json)
Hash identifier:          gHchR9mTtxulH9TnOqiTCUbEzNrhWvSerhQsczlc3PY=
Subject key identifier:   2E:42:42:D7:93:F1:1A:54:1E:7D:7D:AC:E6:CB:90:51:7E:63:C2:C6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E380AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/db1b2e11-c0bd-4be9-862d-73343ddeaf04/9e7ab624580d1af1c3ccd2022eef05e1cb3d1215.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/db1b2e11-c0bd-4be9-862d-73343ddeaf04/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 11:31:41 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.24.0.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14909610 (0xe380aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 11:31:41 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=9e7ab624580d1af1c3ccd2022eef05e1cb3d1215
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:ea:e2:6f:3f:19:d7:b5:42:22:06:f5:fc:dd:
                    bb:2f:dd:aa:16:af:28:ce:a9:ea:ba:6d:a6:78:e7:
                    9b:1f:78:b2:59:ba:fd:27:f0:d2:13:bf:cb:a5:f8:
                    40:85:d8:a3:b0:9d:63:b3:be:65:7f:f1:78:df:7f:
                    09:a1:0a:b6:c6:7c:64:53:79:63:e7:bc:be:df:ba:
                    9d:03:f3:44:2b:50:33:b4:36:ca:cc:af:be:ea:31:
                    f0:01:49:60:7e:c7:be:2a:74:5c:f6:13:02:0d:9d:
                    af:52:d5:2f:de:6b:c9:5f:c1:40:80:31:ce:5e:46:
                    d3:2c:de:02:41:a8:53:89:71:9b:f8:8a:12:71:cb:
                    86:98:3f:10:4b:e6:0a:7c:e0:69:75:9d:d5:2e:c6:
                    e5:78:a1:0d:32:92:4f:b7:56:fe:fd:2b:37:2e:be:
                    08:98:3f:35:cf:4c:e0:90:cd:0c:65:5e:bb:b0:03:
                    2c:65:87:dc:c2:92:b1:02:59:4d:67:af:8c:cd:21:
                    a4:09:9b:c8:6b:3d:90:cc:29:fe:35:3f:e4:2a:79:
                    33:4f:c6:10:16:17:3b:f1:ce:c6:4b:9b:42:0e:98:
                    47:5b:31:6d:a2:9c:e1:04:fd:d7:ca:39:dc:c4:55:
                    13:93:ce:b1:1c:95:c4:f9:14:57:4a:9a:c0:e8:e5:
                    24:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:42:42:D7:93:F1:1A:54:1E:7D:7D:AC:E6:CB:90:51:7E:63:C2:C6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/db1b2e11-c0bd-4be9-862d-73343ddeaf04/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/db1b2e11-c0bd-4be9-862d-73343ddeaf04/9e7ab624580d1af1c3ccd2022eef05e1cb3d1215.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.24.0.0/21

    Signature Algorithm: sha256WithRSAEncryption
         76:e5:36:16:87:58:71:9b:9d:64:47:b2:d2:df:b2:46:21:9c:
         16:40:0d:08:fd:67:c6:47:85:41:18:bf:37:cf:36:10:f6:bd:
         d3:36:65:10:a9:e0:da:89:c6:4c:a3:71:58:c6:c0:86:ee:f0:
         03:16:91:42:23:82:da:57:b3:bd:de:2b:bd:ff:a3:31:d7:a8:
         05:1a:43:c1:dc:b4:1b:87:57:8c:27:72:c0:16:7b:5a:cc:f3:
         a9:6d:14:fc:8a:c3:e8:c0:7d:d1:48:a6:c6:79:9a:eb:ec:bd:
         a8:08:24:ec:f8:e4:e4:a9:b7:6d:66:e8:19:f3:6c:b3:91:52:
         02:44:c5:fb:85:96:9d:8f:82:00:6a:bc:79:e0:62:df:5b:6c:
         9f:13:b7:9d:58:fd:53:65:6f:1d:52:5d:19:70:96:ea:52:44:
         56:80:65:16:4c:3e:c7:51:2d:37:6e:96:51:72:2b:cc:ba:97:
         27:e8:bb:22:6b:b7:d0:fa:41:c7:51:b6:c0:49:fa:cf:8a:0a:
         b6:78:82:f5:b5:19:a4:9d:dd:9d:e4:0e:d4:7a:be:70:bc:37:
         d0:18:3e:25:dc:2e:cd:ae:f5:22:e6:f8:74:6f:09:a9:f0:45:
         bb:de:05:00:4c:55:a9:9d:19:11:54:02:33:a0:7b:ce:b4:38:
         99:8f:65:b2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:35 2024 by rpki-client on console-fra.rpki-client.org