Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.cer
File:                     adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.cer (raw, json)
Hash identifier:          dU6XvIWrt4usC593bwaV/Sp+o4fEJh/Eou5eTsR2YI8=
Subject key identifier:   5A:89:C0:83:EE:24:78:13:17:0C:71:9F:E7:2F:9B:FF:29:BA:1B:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB6581
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 17 Nov 2017 18:37:18 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.188.53.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16475521 (0xfb6581)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 17 18:37:18 2017 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f1:a7:f4:3a:cc:d8:ba:f4:33:b6:0b:85:52:
                    98:7f:33:ef:40:4e:54:af:8f:de:84:87:eb:1c:82:
                    68:b0:3c:8b:6b:e2:a5:73:b9:40:72:eb:bf:f0:73:
                    dd:89:bf:46:db:92:25:99:da:1e:ee:13:bd:25:db:
                    ab:2e:4c:e0:e4:6e:ea:d2:98:f9:c9:1e:b5:fd:3e:
                    cc:4d:f5:63:fd:ca:cb:28:7b:24:83:d3:96:19:5c:
                    b0:b3:0f:15:71:07:6c:9b:16:f9:bb:af:e3:52:ab:
                    07:39:b1:06:98:81:92:45:d1:23:ca:26:5b:44:21:
                    73:8e:7a:21:67:f7:78:bb:aa:3e:2d:b5:b7:ea:fc:
                    65:e7:95:f0:ed:35:54:6e:f5:94:24:50:c6:f1:04:
                    46:a6:c5:0a:a5:5c:c0:b5:ee:b9:d8:b7:e1:59:41:
                    db:4e:97:20:75:c0:c2:81:48:13:c7:9b:e5:52:37:
                    55:36:d2:ad:63:34:98:6a:0f:40:a2:f3:37:5c:72:
                    16:ab:68:3b:b3:f8:c2:51:f0:c2:3b:28:34:e6:ba:
                    f7:df:83:d4:33:2d:3c:ed:95:51:88:8d:33:22:ba:
                    56:86:30:24:d0:24:14:78:f3:08:5a:e6:e2:9d:20:
                    dd:f4:61:14:32:e5:81:0a:ff:34:89:98:a1:f5:47:
                    31:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:89:C0:83:EE:24:78:13:17:0C:71:9F:E7:2F:9B:FF:29:BA:1B:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9ef99fae-0e9b-4535-a493-7ac051dd282b/adffc1fe55cb36bf61e70ce0e1ed5cdb5d3f1ce8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.188.53.0/24

    Signature Algorithm: sha256WithRSAEncryption
         2d:22:70:f0:54:d8:9b:15:a6:1c:4b:e7:2d:4f:6d:42:6c:d6:
         05:9a:a5:12:66:ed:70:66:12:0e:85:5f:50:42:63:0d:1a:b9:
         be:e8:d2:a7:8a:c7:59:4c:a0:d2:6b:90:48:45:82:a7:b4:57:
         2f:94:7c:99:87:b0:74:bb:be:af:5e:25:38:66:93:eb:95:d7:
         20:fc:fc:7f:30:2b:8f:a2:de:b9:54:ec:69:e2:28:aa:4c:66:
         ec:ba:95:33:02:96:c1:21:61:f9:7d:f1:ed:ea:3d:ac:10:4c:
         fb:9c:d5:31:9a:e8:7b:4a:90:de:bf:c0:85:4e:42:37:85:fb:
         bd:b9:99:32:fc:dd:67:4e:57:cf:fd:9a:9e:82:a3:13:a0:f1:
         c9:e0:3e:0c:ae:f8:38:43:13:66:9c:86:5c:f8:8d:e2:b0:ca:
         51:51:7c:67:2e:ab:b2:83:8a:1c:0b:6b:fd:a1:30:15:ba:c7:
         ba:b5:9b:21:cb:d1:fc:b1:95:e2:9c:42:ff:6b:2c:f0:46:b7:
         72:64:bc:66:08:d9:ac:1c:49:a3:56:b5:eb:9b:77:ce:94:71:
         73:42:90:e6:88:5e:99:67:1f:e9:91:19:44:d3:5b:12:d6:13:
         a7:2f:83:f9:5f:b2:b3:53:18:47:e4:81:9d:ab:51:7b:9b:07:
         f4:07:2d:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:28 2024 by rpki-client on console-ams.rpki-client.org