Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a5d84d64584f2122b17de2fba26eed1aac7bf44c.cer
File:                     a5d84d64584f2122b17de2fba26eed1aac7bf44c.cer (raw, json)
Hash identifier:          vgP70+IMWP9+hTQ0c5xHkxW+zmxzw+8p914R2vWqkUg=
Subject key identifier:   E5:48:B3:A0:2C:D0:43:06:A9:F8:0C:FB:29:3C:2A:90:9A:54:6A:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E790E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/983c5a36-d944-4aa0-bd4a-23220e3fb9e2/a5d84d64584f2122b17de2fba26eed1aac7bf44c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/983c5a36-d944-4aa0-bd4a-23220e3fb9e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 18:27:19 +0000
Certificate not after:    Thu 18 Apr 2024 21:10:09 +0000
Subordinate resources:    AS: 270164
                          IP: 2806:3ea::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15175905 (0xe790e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 27 18:27:19 2023 GMT
            Not After : Apr 18 21:10:09 2024 GMT
        Subject: CN=a5d84d64584f2122b17de2fba26eed1aac7bf44c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:b8:9d:e6:64:a2:d0:c7:e8:ca:9e:e8:69:e4:
                    e9:29:7f:9d:e0:98:72:c4:50:02:62:52:d6:76:e7:
                    e7:76:5b:91:9f:cb:e4:aa:f3:a2:78:1d:96:f0:a2:
                    d0:48:ed:56:e7:2b:23:60:21:7f:31:71:a4:2c:73:
                    1d:68:41:26:7a:c5:00:17:27:17:e3:66:33:b4:89:
                    81:cf:75:49:a4:69:61:4b:6f:74:80:af:df:df:6d:
                    bf:87:e4:75:f9:9a:31:48:56:f6:46:8b:01:d2:f2:
                    eb:5e:ff:d9:72:c2:76:79:e1:2b:7b:99:85:f5:5c:
                    74:34:2f:c9:1d:ad:83:37:cc:f5:3b:5d:50:c2:97:
                    f9:97:c4:55:fb:cf:dc:6c:d0:73:99:24:1c:03:4a:
                    39:1d:e9:d7:4b:23:a3:58:ec:b7:1d:2a:71:3e:d4:
                    2b:59:f6:36:0d:6a:8f:81:82:ed:ca:5c:81:ee:5e:
                    19:02:0d:d2:38:14:d7:82:3b:66:11:e0:75:9f:bc:
                    51:6b:13:16:9a:6e:00:68:af:33:bd:a2:34:d8:cc:
                    e0:b9:b3:de:73:c1:59:6d:da:10:df:7c:63:fa:f1:
                    3e:b3:99:d7:5e:d7:34:10:d6:50:bf:6c:0f:b1:56:
                    a1:79:23:b7:94:b8:33:10:33:19:2d:d0:7b:c4:2e:
                    e4:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E5:48:B3:A0:2C:D0:43:06:A9:F8:0C:FB:29:3C:2A:90:9A:54:6A:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/983c5a36-d944-4aa0-bd4a-23220e3fb9e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/983c5a36-d944-4aa0-bd4a-23220e3fb9e2/a5d84d64584f2122b17de2fba26eed1aac7bf44c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:3ea::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270164

    Signature Algorithm: sha256WithRSAEncryption
         57:58:e9:45:9e:a5:e5:a1:cf:09:4d:b0:6a:81:1a:dd:73:da:
         f9:26:43:d0:0e:4b:32:63:c3:d7:e7:8c:ed:9d:9e:6a:f8:ac:
         d4:4c:92:56:33:7f:0d:99:6e:67:81:3e:06:7b:5a:c0:65:e6:
         db:3c:cb:d1:72:1e:25:c2:2b:37:58:b5:9f:d0:6d:e4:68:21:
         20:b2:f8:29:46:f3:2b:5f:ff:43:d2:6d:0d:d5:cf:af:dc:b9:
         b6:e2:51:73:5b:af:92:d8:e4:46:92:c5:e9:1d:ce:09:8a:e4:
         6e:b8:be:dc:25:7a:b8:09:85:8c:12:02:89:95:a1:2c:b5:22:
         3f:8e:b7:4d:c8:33:94:fb:b3:4a:81:98:88:b8:f9:26:a2:c2:
         b3:dc:d8:f2:10:fb:e1:26:7f:1e:fa:ea:36:c8:44:87:a4:a6:
         98:38:46:01:43:c8:b5:c1:63:55:16:69:27:56:4b:b0:12:4e:
         28:aa:8f:f7:7e:b9:6f:0c:6f:18:f8:09:4d:42:9e:5b:5c:72:
         5e:90:4c:37:e0:37:f4:8b:44:34:c3:41:42:8b:13:02:ce:8a:
         3f:67:4c:22:03:8e:db:23:08:c5:db:73:e6:7c:14:dd:d5:3d:
         3d:21:23:32:3d:74:a6:28:89:70:0c:be:47:32:24:ba:29:a5:
         66:b2:4d:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:28 2024 by rpki-client on console-ams.rpki-client.org