Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a6f2fcf78d2353d48f3cf11b7e4eb59bc392f152.cer
File:                     a6f2fcf78d2353d48f3cf11b7e4eb59bc392f152.cer (raw, json)
Hash identifier:          tKlhFLgXUReA1LmFV6RYwcv8qXXF955JmqeS/wBt0dk=
Subject key identifier:   88:A7:86:C9:4B:C1:A7:AA:70:0B:1B:26:FC:2C:A3:5E:F8:DA:53:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F572E6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/89c3a74d-57c3-4d8e-b45e-4810d57c8be8/a6f2fcf78d2353d48f3cf11b7e4eb59bc392f152.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/89c3a74d-57c3-4d8e-b45e-4810d57c8be8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 16 Aug 2023 14:12:18 +0000
Certificate not after:    Wed 23 Apr 2025 22:08:16 +0000
Subordinate resources:    AS: 264724

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16085734 (0xf572e6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 16 14:12:18 2023 GMT
            Not After : Apr 23 22:08:16 2025 GMT
        Subject: CN=a6f2fcf78d2353d48f3cf11b7e4eb59bc392f152
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:5f:49:92:fa:b4:fb:dc:31:32:97:8e:d0:f1:
                    1c:24:1e:b5:f4:24:2e:0c:3e:41:48:29:b5:49:fd:
                    8f:ce:be:08:1d:28:a1:eb:b0:47:56:26:34:95:43:
                    4c:04:bf:1f:29:d2:63:7f:72:db:91:f5:cd:6b:50:
                    ae:8b:a1:2b:af:75:53:26:f1:0b:fd:fb:96:c1:33:
                    5a:fd:fa:02:ab:22:a0:fd:d5:66:3e:9d:ac:70:a3:
                    85:b8:7e:63:15:4d:3d:3e:34:ff:f0:31:3b:ac:6a:
                    86:97:82:bd:5f:ba:e8:06:bf:a8:c9:19:d1:66:6d:
                    77:d1:55:95:b2:ec:62:f2:9c:57:1a:f0:a5:80:a1:
                    a4:6a:11:c8:95:ea:49:31:ed:ce:dd:30:65:a1:19:
                    0a:ff:36:72:5a:34:0c:95:7a:66:e0:a2:18:84:8c:
                    63:69:34:9b:e9:bc:0c:28:a0:25:4e:e7:72:cb:73:
                    b0:81:db:36:65:86:a1:8b:72:69:7b:0b:2d:aa:db:
                    b7:a0:cc:78:c8:37:60:3c:14:44:70:f9:60:b7:d2:
                    af:69:2e:7b:ff:5c:b5:21:f9:0a:f5:70:90:c5:5b:
                    f8:cd:cf:d4:78:48:d1:73:bc:7b:39:8e:9d:f8:48:
                    53:b7:34:8d:cf:8b:b8:d0:19:4d:85:49:2b:35:76:
                    c9:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:A7:86:C9:4B:C1:A7:AA:70:0B:1B:26:FC:2C:A3:5E:F8:DA:53:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/89c3a74d-57c3-4d8e-b45e-4810d57c8be8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/89c3a74d-57c3-4d8e-b45e-4810d57c8be8/a6f2fcf78d2353d48f3cf11b7e4eb59bc392f152.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264724

    Signature Algorithm: sha256WithRSAEncryption
         b5:eb:a0:70:da:44:4c:25:c0:67:00:d6:30:85:f3:51:da:71:
         b6:1f:de:b6:4e:83:b0:96:17:ec:8c:3b:2f:2f:0e:da:31:a4:
         53:d1:ff:f9:ff:b1:ce:3e:56:08:4a:22:89:ba:c9:35:a1:04:
         e6:32:8a:9d:79:e5:16:c2:66:4e:41:c5:0d:93:4c:fe:96:6f:
         8f:5a:20:72:d4:a7:72:44:46:89:d8:ca:c8:b1:d4:18:75:0b:
         26:a4:43:97:09:a1:3b:b1:79:48:7c:79:2a:32:e1:1b:57:aa:
         8f:3c:3d:0c:e7:d0:e9:01:a0:4c:93:bf:12:d6:54:a5:24:ac:
         b8:c4:23:10:e3:1b:07:4c:64:aa:c6:64:14:86:17:22:96:ad:
         97:26:4e:4c:59:aa:fe:ed:f4:c2:e6:d6:34:a0:ea:f5:1b:64:
         96:31:ed:39:5e:29:08:75:93:f6:5d:f2:1d:7d:b7:30:55:19:
         ce:eb:25:56:9c:f5:17:13:d6:39:1e:3e:93:4f:47:a2:1c:6a:
         92:dd:53:c3:95:39:05:eb:53:95:02:74:30:79:fa:fc:7c:33:
         9f:13:c5:b7:6e:59:d8:2f:e6:ba:09:50:84:6c:8b:df:8e:19:
         8e:ba:1c:7e:83:05:de:3a:a8:8f:bc:13:3d:ee:c0:d5:15:02:
         3f:9f:2e:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:13 2024 by rpki-client on console-fra.rpki-client.org