Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a465c29fb9e7231856aa41083500d2012da1e9c0.cer
File:                     a465c29fb9e7231856aa41083500d2012da1e9c0.cer (raw, json)
Hash identifier:          18EgP/OQbRN1sAYeKCv39SsCqx6DIdhSieGP3QUJ/gI=
Subject key identifier:   85:D6:A2:AB:8A:DA:AD:A3:1E:CB:26:CE:25:63:67:6B:3D:51:C4:F6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7E7A7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/239b7787-c57f-45ca-bf97-1fa6683444b9/a465c29fb9e7231856aa41083500d2012da1e9c0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/239b7787-c57f-45ca-bf97-1fa6683444b9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Dec 2020 15:25:10 +0000
Certificate not after:    Thu 03 Oct 2024 17:48:28 +0000
Subordinate resources:    IP: 2801:196::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16246695 (0xf7e7a7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  7 15:25:10 2020 GMT
            Not After : Oct  3 17:48:28 2024 GMT
        Subject: CN=a465c29fb9e7231856aa41083500d2012da1e9c0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:68:12:c0:a1:ef:96:59:f4:19:de:f0:0d:2b:
                    6f:1e:a6:cc:e4:cd:13:8f:bb:5c:db:b9:e7:5b:22:
                    31:1c:65:d4:5f:1d:f8:46:d2:96:1c:b5:9f:65:db:
                    34:08:f1:ce:e9:9a:b6:bc:88:be:b9:58:51:6e:57:
                    49:56:d8:4b:75:c2:a5:d1:99:a8:8b:03:d7:20:b6:
                    af:16:b3:a6:45:dd:f0:ec:cd:e8:23:16:77:97:89:
                    0b:5f:63:49:e7:d9:8d:03:59:eb:a7:4b:7b:e3:e6:
                    6e:f0:0b:de:34:e6:45:85:3f:6c:58:d9:b1:b7:5a:
                    f9:53:c6:45:2e:6d:b1:dd:4b:65:15:e6:a3:71:02:
                    c3:87:da:45:a7:3e:9f:b9:e2:21:0c:6c:b9:7c:ef:
                    71:bf:69:78:82:78:41:0d:a7:84:04:c2:1c:69:b1:
                    b0:ca:27:b5:ee:ca:4a:2e:2a:d7:95:46:45:5f:de:
                    51:38:d1:6b:ab:e4:9f:2b:ad:17:8a:a0:ac:62:f8:
                    fd:e3:44:2e:30:61:9c:4f:8c:45:87:c6:c0:c1:98:
                    24:09:50:bc:3a:73:b0:31:43:09:ee:3c:f4:25:77:
                    63:47:34:62:e3:a4:09:2c:5c:e7:b9:af:d6:32:f9:
                    3c:29:29:04:a2:8a:32:94:77:98:3a:47:84:17:4d:
                    5b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:D6:A2:AB:8A:DA:AD:A3:1E:CB:26:CE:25:63:67:6B:3D:51:C4:F6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/239b7787-c57f-45ca-bf97-1fa6683444b9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/239b7787-c57f-45ca-bf97-1fa6683444b9/a465c29fb9e7231856aa41083500d2012da1e9c0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:196::/44

    Signature Algorithm: sha256WithRSAEncryption
         59:3a:85:5f:e4:ca:57:1a:5f:ad:cb:27:b3:28:95:27:8e:d4:
         51:e1:0f:86:6b:e9:91:fd:25:88:32:ad:6c:92:5f:f8:2c:78:
         e5:8b:e3:6f:c0:f7:a0:67:49:44:61:7a:6b:49:f4:4f:29:56:
         ce:b3:43:5a:59:56:6e:40:cf:f0:99:a8:bb:c1:33:ad:87:49:
         84:76:0b:02:be:ed:2c:4f:fe:48:28:08:ee:12:4e:23:16:85:
         78:4d:85:0f:8c:e2:32:36:18:be:70:13:ae:b7:63:3a:20:0c:
         48:5d:ab:a7:34:19:65:f3:64:9f:20:82:fe:1f:a0:3e:25:c1:
         0e:38:cd:c6:f0:f5:4e:ec:eb:33:35:f7:72:4e:7b:6f:05:f4:
         41:f8:fd:39:f0:55:37:ca:ec:d9:6f:32:a9:cf:bf:46:ca:42:
         6a:80:6b:86:f6:76:39:28:cb:05:eb:83:3b:b5:10:c3:18:ee:
         a1:09:cd:a3:67:96:18:15:88:e6:e3:a6:9e:8c:ab:9c:af:d3:
         9f:ba:30:56:32:65:af:d3:ab:9b:2b:e4:a4:70:db:b9:13:3f:
         99:ff:04:e7:92:14:d4:5d:a7:e4:6e:ea:a5:ac:46:a8:6a:00:
         dd:d0:8d:14:96:32:f3:44:2b:b8:57:a3:10:19:0a:e6:d0:30:
         41:73:d9:c7
-----BEGIN CERTIFICATE-----
MIIFsjCCBJqgAwIBAgIEAPfnpzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTIwNzE1MjUxMFoXDTI0MTAwMzE3NDgy
OFowMzExMC8GA1UEAxMoYTQ2NWMyOWZiOWU3MjMxODU2YWE0MTA4MzUwMGQyMDEy
ZGExZTljMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAI5oEsCh75ZZ
9Bne8A0rbx6mzOTNE4+7XNu551siMRxl1F8d+EbSlhy1n2XbNAjxzumatryIvrlY
UW5XSVbYS3XCpdGZqIsD1yC2rxazpkXd8OzN6CMWd5eJC19jSefZjQNZ66dLe+Pm
bvAL3jTmRYU/bFjZsbda+VPGRS5tsd1LZRXmo3ECw4faRac+n7niIQxsuXzvcb9p
eIJ4QQ2nhATCHGmxsMonte7KSi4q15VGRV/eUTjRa6vknyutF4qgrGL4/eNELjBh
nE+MRYfGwMGYJAlQvDpzsDFDCe489CV3Y0c0YuOkCSxc57mv1jL5PCkpBKKKMpR3
mDpHhBdNWzsCAwEAAaOCAuEwggLdMB0GA1UdDgQWBBSF1qKritqtox7LJs4lY2dr
PVHE9jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8yMzliNzc4Ny1jNTdm
LTQ1Y2EtYmY5Ny0xZmE2NjgzNDQ0YjkvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMjM5Yjc3ODctYzU3Zi00
NWNhLWJmOTctMWZhNjY4MzQ0NGI5L2E0NjVjMjlmYjllNzIzMTg1NmFhNDEwODM1
MDBkMjAxMmRhMWU5YzAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAi
BggrBgEFBQcBBwEB/wQTMBEwDwQCAAIwCQMHBCgBAZYAADANBgkqhkiG9w0BAQsF
AAOCAQEAWTqFX+TKVxpfrcsnsyiVJ47UUeEPhmvpkf0liDKtbJJf+Cx45Yvjb8D3
oGdJRGF6a0n0TylWzrNDWllWbkDP8Jmou8EzrYdJhHYLAr7tLE/+SCgI7hJOIxaF
eE2FD4ziMjYYvnATrrdjOiAMSF2rpzQZZfNknyCC/h+gPiXBDjjNxvD1TuzrMzX3
ck57bwX0Qfj9OfBVN8rs2W8yqc+/RspCaoBrhvZ2OSjLBeuDO7UQwxjuoQnNo2eW
GBWI5uOmnoyrnK/Tn7owVjJlr9OrmyvkpHDbuRM/mf8E55IU1F2n5G7qpaxGqGoA
3dCNFJYy80QruFejEBkK5tAwQXPZxw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org