Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aa00fde65142dd0e0b732a0eefe44d6f09afea83.cer
File:                     aa00fde65142dd0e0b732a0eefe44d6f09afea83.cer (raw, json)
Hash identifier:          gvh+tkVa8Cgh+Hp7qIr22TJGVphwbeC/BwoqmLJKxj0=
Subject key identifier:   9C:EA:2E:C7:A0:D7:C4:24:DB:32:9B:45:3A:F0:4C:C2:67:2C:FC:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DC2C63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/466b89b0-a1b3-4583-8eec-529963610f74/aa00fde65142dd0e0b732a0eefe44d6f09afea83.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/466b89b0-a1b3-4583-8eec-529963610f74/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 16 Jan 2023 14:48:52 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 10778

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14429283 (0xdc2c63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 14:48:52 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=aa00fde65142dd0e0b732a0eefe44d6f09afea83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:b0:f5:18:5b:bc:08:07:a6:4e:58:82:f1:1a:
                    a6:25:7c:fd:65:f8:ca:51:c7:de:76:59:83:0f:4f:
                    fc:e5:69:a5:e1:c1:1e:ae:a7:cd:82:95:e1:80:18:
                    66:b1:d8:e7:a9:d6:6d:b8:4d:84:bf:35:84:02:0d:
                    c3:34:29:6b:c2:d2:7e:57:78:0b:1a:35:6c:ad:16:
                    be:8a:c0:d4:1a:15:06:5f:fa:7a:74:1c:bb:fe:ac:
                    21:f0:9e:32:8a:e9:03:70:1f:ca:57:1a:dc:29:5d:
                    7a:95:72:ec:40:2c:74:20:51:f3:00:25:5c:0d:3e:
                    31:2f:93:a3:85:11:07:cc:0f:af:ee:81:39:3d:4a:
                    11:ab:2f:24:3e:ec:3c:26:c7:91:d8:b1:91:37:cb:
                    cc:8a:9e:65:6f:d7:97:fa:af:74:2d:65:d0:38:ce:
                    ea:fd:f8:3d:b7:51:5c:38:6b:23:87:88:67:c7:0a:
                    d2:c2:37:d3:5d:d4:94:66:06:ec:d0:84:21:39:b2:
                    7f:1a:32:3e:25:ac:03:d8:71:6a:26:7b:46:a9:82:
                    9a:47:74:00:7d:39:1a:6d:bd:b2:99:58:62:f5:44:
                    7b:ee:e8:6f:14:c5:8e:9c:34:12:74:38:bb:af:8d:
                    1e:50:b1:15:32:70:50:44:29:91:62:cd:4b:40:c1:
                    ed:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:EA:2E:C7:A0:D7:C4:24:DB:32:9B:45:3A:F0:4C:C2:67:2C:FC:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/466b89b0-a1b3-4583-8eec-529963610f74/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/466b89b0-a1b3-4583-8eec-529963610f74/aa00fde65142dd0e0b732a0eefe44d6f09afea83.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10778

    Signature Algorithm: sha256WithRSAEncryption
         c2:cf:25:a1:f6:d5:83:59:10:5b:8e:aa:25:7f:9b:13:1c:eb:
         c5:17:f1:58:65:49:8e:fb:df:6b:49:12:d2:ab:ae:7a:c0:63:
         8e:b9:b9:9c:c9:82:6b:5e:06:25:11:fe:68:26:70:de:23:00:
         e5:1b:59:e9:ca:3d:67:1e:7b:ec:c6:46:ab:cf:45:2e:45:69:
         20:22:70:87:03:d7:58:b4:c4:f4:28:3a:ca:1b:9d:67:55:1f:
         00:a8:59:15:71:ca:b8:d9:64:bf:63:ff:6d:87:50:31:7b:d0:
         23:80:22:ce:c4:da:df:8a:d7:6b:a5:0a:58:eb:06:fd:50:ef:
         b9:97:05:0c:00:a0:cf:0a:6b:46:a7:c0:60:7e:2e:44:5c:65:
         53:15:d7:2b:11:06:a4:7e:3f:92:36:98:2f:99:a7:aa:65:0e:
         29:6d:35:8f:03:ae:4e:45:b1:bd:16:8c:f8:40:88:94:a0:c6:
         21:2d:3a:5d:8b:1c:74:47:28:e0:ad:16:b3:63:a0:f6:ff:73:
         34:e9:20:05:43:b8:47:f5:14:0d:c6:51:15:b6:89:69:15:96:
         57:47:95:76:68:af:a8:8e:8a:25:8d:95:23:b2:15:bc:f0:bd:
         52:f8:e9:e2:c2:fa:75:03:f8:92:06:8c:b9:51:7a:f0:c3:ae:
         c3:df:5f:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:28 2024 by rpki-client on console-ams.rpki-client.org