Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab1b0e45d845547803c889b28c3794194a13977f.cer
File:                     ab1b0e45d845547803c889b28c3794194a13977f.cer (raw, json)
Hash identifier:          YYGR3X66VHjbWqnLpTSGAk/g8z12O+o81yPM+zaMOAo=
Subject key identifier:   20:3A:0E:39:0D:58:D6:6A:E2:F8:9F:83:FE:0F:C5:54:23:B8:B1:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107ACBE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7f058db8-af4a-4764-a21a-5b5ce3b2d93d/ab1b0e45d845547803c889b28c3794194a13977f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7f058db8-af4a-4764-a21a-5b5ce3b2d93d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 Jan 2024 14:42:06 +0000
Certificate not after:    Sun 15 Jun 2025 06:00:00 +0000
Subordinate resources:    AS: 27782
                          IP: 200.1.8.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17280190 (0x107acbe)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 22 14:42:06 2024 GMT
            Not After : Jun 15 06:00:00 2025 GMT
        Subject: CN=ab1b0e45d845547803c889b28c3794194a13977f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:b8:31:f3:23:c0:e1:1a:29:ca:3b:2b:57:aa:
                    c1:a7:76:f6:c1:54:06:fc:6e:43:ad:b2:ed:40:39:
                    e9:dd:18:68:74:8c:19:6a:0b:e7:26:af:ed:39:b1:
                    8f:4e:55:05:4d:b9:39:cd:47:99:68:8a:ab:a3:de:
                    d0:2e:f7:2a:68:45:28:ec:85:a2:aa:f5:fe:6b:4d:
                    c7:16:57:3a:4d:57:57:96:eb:a7:7d:66:bc:81:3b:
                    b7:ac:6c:8b:a0:b4:bb:08:dd:15:26:10:88:c1:bf:
                    15:8e:25:1b:86:87:e4:a6:5d:c3:c5:d4:10:4d:60:
                    73:81:9e:0e:56:bf:87:fc:2c:56:c8:18:0e:cc:73:
                    26:22:44:57:2d:a8:a6:73:c7:0e:d2:56:56:c1:52:
                    3b:6a:6d:a2:cb:d9:ac:c6:66:0d:39:4d:c3:ed:69:
                    53:2a:53:d5:25:36:76:7b:a6:52:11:aa:56:e8:d3:
                    e7:c6:5e:5f:7d:ab:a9:13:02:d0:62:be:b1:dd:00:
                    f3:3e:93:fc:46:86:50:51:a1:de:24:c0:90:b9:91:
                    51:2d:0c:88:58:9b:bf:05:6e:4f:04:2e:d3:e3:4a:
                    1a:e8:82:30:3a:9d:ec:20:6c:25:ff:f5:3e:63:d7:
                    82:32:e5:66:fd:2f:4c:64:72:98:15:19:3a:c1:82:
                    ba:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:3A:0E:39:0D:58:D6:6A:E2:F8:9F:83:FE:0F:C5:54:23:B8:B1:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7f058db8-af4a-4764-a21a-5b5ce3b2d93d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7f058db8-af4a-4764-a21a-5b5ce3b2d93d/ab1b0e45d845547803c889b28c3794194a13977f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.8.0/21

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27782

    Signature Algorithm: sha256WithRSAEncryption
         1b:06:38:a7:d2:63:c7:a6:ad:aa:82:4a:e0:e5:5e:12:ff:f2:
         a4:15:f7:ac:7d:63:d7:47:e7:5a:d3:6a:2a:75:57:75:8a:85:
         bf:48:37:9a:78:8f:7b:3d:80:3e:d4:71:06:83:88:d3:d0:09:
         90:d9:63:d1:e0:4f:cc:a2:5b:fd:dc:10:8d:3a:8e:83:e9:04:
         35:e4:00:10:a0:d5:50:32:d3:ac:dc:1a:a8:67:1a:96:a7:0a:
         1a:7f:cc:e2:f2:89:58:3a:4b:0d:51:a1:2e:0b:03:83:6a:e6:
         6d:16:89:08:2f:05:4a:cc:87:35:46:cc:02:19:d7:03:b9:c1:
         e5:1f:8d:c9:9a:35:ec:1e:09:db:ef:94:fc:bc:90:14:89:d8:
         9c:11:a3:a0:6b:97:6f:95:c5:20:51:07:10:d0:12:c3:e5:7a:
         54:bb:79:71:4f:b7:25:eb:8b:78:50:be:19:95:b8:b0:62:64:
         a2:c1:bd:87:65:ef:89:4c:c5:84:c6:bc:83:56:2b:da:b1:05:
         85:07:a7:ee:70:68:d6:86:c5:9c:60:df:7b:2f:c7:a1:6f:1e:
         74:8c:eb:03:bd:c9:32:34:8c:cc:23:38:4d:4d:39:d7:4f:65:
         51:4c:de:9a:71:b2:99:91:f8:4e:23:2b:9b:0d:e6:2a:6a:30:
         96:bd:38:c6
-----BEGIN CERTIFICATE-----
MIIFyjCCBLKgAwIBAgIEAQesvjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDEyMjE0NDIwNloXDTI1MDYxNTA2MDAw
MFowMzExMC8GA1UEAxMoYWIxYjBlNDVkODQ1NTQ3ODAzYzg4OWIyOGMzNzk0MTk0
YTEzOTc3ZjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBALG4MfMjwOEa
Kco7K1eqwad29sFUBvxuQ62y7UA56d0YaHSMGWoL5yav7Tmxj05VBU25Oc1HmWiK
q6Pe0C73KmhFKOyFoqr1/mtNxxZXOk1XV5brp31mvIE7t6xsi6C0uwjdFSYQiMG/
FY4lG4aH5KZdw8XUEE1gc4GeDla/h/wsVsgYDsxzJiJEVy2opnPHDtJWVsFSO2pt
osvZrMZmDTlNw+1pUypT1SU2dnumUhGqVujT58ZeX32rqRMC0GK+sd0A8z6T/EaG
UFGh3iTAkLmRUS0MiFibvwVuTwQu0+NKGuiCMDqd7CBsJf/1PmPXgjLlZv0vTGRy
mBUZOsGCuqkCAwEAAaOCAvkwggL1MB0GA1UdDgQWBBQgOg45DVjWauL4n4P+D8VU
I7ixszAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83ZjA1OGRiOC1hZjRh
LTQ3NjQtYTIxYS01YjVjZTNiMmQ5M2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN2YwNThkYjgtYWY0YS00
NzY0LWEyMWEtNWI1Y2UzYjJkOTNkL2FiMWIwZTQ1ZDg0NTU0NzgwM2M4ODliMjhj
Mzc5NDE5NGExMzk3N2YubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEA8gBCDAZBggrBgEFBQcBCAEB/wQK
MAigBjAEAgJshjANBgkqhkiG9w0BAQsFAAOCAQEAGwY4p9Jjx6atqoJK4OVeEv/y
pBX3rH1j10fnWtNqKnVXdYqFv0g3mniPez2APtRxBoOI09AJkNlj0eBPzKJb/dwQ
jTqOg+kENeQAEKDVUDLTrNwaqGcalqcKGn/M4vKJWDpLDVGhLgsDg2rmbRaJCC8F
SsyHNUbMAhnXA7nB5R+NyZo17B4J2++U/LyQFInYnBGjoGuXb5XFIFEHENASw+V6
VLt5cU+3JeuLeFC+GZW4sGJkosG9h2XviUzFhMa8g1Yr2rEFhQen7nBo1obFnGDf
ey/HoW8edIzrA73JMjSMzCM4TU05109lUUzemnGymZH4TiMrmw3mKmowlr04xg==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:28 2024 by rpki-client on console-ams.rpki-client.org