Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer
File:                     a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.cer (raw, json)
Hash identifier:          FaHKs5L1jMaAAwrchEn+/rnTTt8qPlsPucMeHtvuAsA=
Subject key identifier:   5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F81125
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 19 Jun 2019 02:43:29 +0000
Certificate not after:    Sat 05 Oct 2024 15:00:00 +0000
Subordinate resources:    IP: 190.112.192.0/22
                          IP: 190.112.200.0/22
                          IP: 200.35.152.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16257317 (0xf81125)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 19 02:43:29 2019 GMT
            Not After : Oct  5 15:00:00 2024 GMT
        Subject: CN=a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:a7:ab:cf:87:df:af:66:aa:8b:0c:5f:ce:bf:
                    3b:46:c5:e3:38:10:de:e3:30:83:61:2d:8c:75:75:
                    0a:91:af:8b:7e:32:88:b8:e9:5a:13:f0:7c:88:2e:
                    03:26:6c:ae:7b:72:15:c2:dc:35:0d:80:6b:43:36:
                    99:36:eb:a2:64:e7:e1:0a:ee:04:6f:9e:62:d6:05:
                    9f:c9:e2:d7:b4:92:91:d4:5e:7e:c3:66:72:c6:50:
                    f8:8d:fc:29:b2:22:76:17:d4:e9:b8:3f:a7:d1:06:
                    fe:d0:3f:94:9d:09:27:b1:f9:1b:b6:17:dc:24:5a:
                    04:02:81:c0:4d:fc:de:68:e2:a5:0f:2f:d8:28:6a:
                    7f:62:15:5f:c4:a5:06:de:84:41:06:dc:e9:0a:c5:
                    ed:b2:ed:1d:0d:cd:75:17:27:df:b3:b0:b1:06:c6:
                    45:8d:06:a9:e1:76:80:db:4f:ef:ea:30:6d:c9:97:
                    48:f7:e7:9f:a5:fb:46:b6:93:9e:ca:48:f7:f6:b5:
                    8e:4e:71:90:fa:cd:09:d0:17:a5:2a:cd:33:67:37:
                    66:2d:2f:99:83:b7:ff:ce:dd:c0:7d:9b:a6:4e:ea:
                    28:b1:49:0a:0c:1c:77:53:09:a9:93:65:3f:03:13:
                    8f:62:bb:07:a5:fc:f4:78:76:3e:7d:41:a3:cd:bd:
                    5a:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:94:30:79:C7:A1:74:68:13:58:0E:18:03:59:DE:80:D9:A6:C3:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e44ef359-d377-4b5b-b68c-26efbbd7ebfc/a9a6cfe82a2c389b5e3fce81513d3ba0ddf3a8e7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.112.192.0/22
                  190.112.200.0/22
                  200.35.152.0/22

    Signature Algorithm: sha256WithRSAEncryption
         26:43:1a:98:1c:37:33:4c:57:ed:4c:bb:96:01:34:37:ae:67:
         41:ee:b9:24:01:ec:28:28:6c:ae:c9:bb:56:30:29:ea:86:e3:
         23:45:36:63:94:1b:06:a7:19:82:62:83:6f:68:b3:10:ac:8e:
         29:1a:30:c0:8f:23:1c:3a:3f:59:f9:f9:82:39:02:f3:b2:53:
         5c:15:53:c6:d3:76:0b:a0:9a:48:59:40:a2:87:9c:10:e9:8d:
         e6:49:1d:2e:f3:44:68:39:86:0a:f6:0d:7f:1a:3e:f8:8d:e0:
         d5:a7:b4:45:42:e1:bc:16:24:a9:0f:83:51:31:d0:99:4e:d1:
         51:3a:f9:ee:e4:9a:7e:c7:80:62:18:68:ad:ee:9f:ed:af:a8:
         a9:1d:1a:9e:9b:fd:56:43:85:d4:16:72:2c:9e:03:9e:17:26:
         ca:d8:54:a6:84:f1:f1:e8:be:c6:f1:72:81:2c:5a:b9:ef:48:
         7f:db:ce:12:21:f9:25:29:70:ab:a5:78:ef:19:4f:88:8d:8b:
         2a:29:31:d3:3a:5e:7c:7d:93:bb:50:b5:72:2f:bf:24:0c:21:
         3c:2d:14:7b:fb:38:cb:7e:fc:e2:43:43:b7:ce:27:58:af:d8:
         e8:60:2d:fb:2c:2d:a5:44:dc:1f:fa:87:19:e8:0a:24:06:a3:
         fd:58:ac:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:28 2024 by rpki-client on console-ams.rpki-client.org