Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b00787e44927a876cbce4a821c14b22c52096620.cer
File:                     b00787e44927a876cbce4a821c14b22c52096620.cer (raw, json)
Hash identifier:          9IV2WERnkYQQx+zvXMu7/7XtpW1a7RB2oN2XR2TVA9I=
Subject key identifier:   41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E43097
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 07 Apr 2023 18:20:32 +0000
Certificate not after:    Tue 09 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 16629
                          AS: 263208
                          IP: 181.118.160.0/20
                          IP: 190.171.128.0/18
                          IP: 200.54.0.0/16
                          IP: 200.68.0.0/18
                          IP: 2800:4e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14954647 (0xe43097)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  7 18:20:32 2023 GMT
            Not After : Apr  9 06:00:00 2024 GMT
        Subject: CN=b00787e44927a876cbce4a821c14b22c52096620
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:df:63:be:61:1f:ad:ea:b0:fd:c7:fd:ab:21:
                    c9:58:d5:0a:86:b1:6d:21:f1:13:e2:89:37:fa:93:
                    9d:ad:4f:76:cb:08:47:c8:11:7a:e5:08:a4:e5:e4:
                    a8:06:7e:3f:12:8d:0c:62:ab:3c:9b:30:46:fe:1e:
                    6e:ce:c8:27:09:27:ce:34:40:1a:18:8a:fd:6f:26:
                    91:25:9a:4e:af:8b:5e:28:e0:c6:b5:8d:04:c1:e1:
                    68:1d:ad:36:d1:7a:ab:53:1a:7a:5c:ed:8a:d8:19:
                    00:da:a7:d8:04:f9:12:84:ab:92:06:32:fd:0d:83:
                    3b:6d:25:16:64:d3:be:93:11:ad:45:e7:56:a4:40:
                    c3:31:26:78:af:b1:c6:71:ee:1c:b3:20:b0:44:53:
                    7d:1a:61:91:3e:d7:02:59:de:34:14:3b:57:75:23:
                    fd:63:ce:59:91:f5:0a:3c:52:9c:d4:09:82:51:cb:
                    41:ba:d4:2b:3c:63:03:5a:4c:50:8a:7e:96:d4:dd:
                    7b:d9:fb:c0:fa:82:62:d1:7e:cf:45:5d:e0:23:87:
                    0a:7f:58:d4:5a:31:8c:86:69:29:e6:88:73:cc:b6:
                    c7:6b:38:a7:c0:7e:8c:38:5c:a9:ea:1d:82:eb:ad:
                    b8:54:a9:22:67:94:e4:a4:1b:cf:2a:7e:6e:03:dc:
                    ae:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:7A:96:79:77:BB:79:16:A5:F6:7D:1B:CF:F9:38:AD:2F:A4:09:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/97bf1e39-dc15-4c2e-981d-acc9a7ff46fa/b00787e44927a876cbce4a821c14b22c52096620.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.118.160.0/20
                  190.171.128.0/18
                  200.54.0.0/16
                  200.68.0.0/18
                IPv6:
                  2800:4e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16629
                  263208

    Signature Algorithm: sha256WithRSAEncryption
         b8:d1:e3:bb:0e:14:41:07:95:87:e4:55:82:40:da:d1:67:99:
         d8:1c:ff:ce:15:03:ea:44:08:64:59:7d:15:7a:c2:9e:56:f7:
         3d:d7:4e:27:a9:02:bf:6a:45:6b:7e:39:b7:4c:0e:3c:84:3d:
         c3:98:ca:d9:71:cc:d4:6f:1c:c6:a5:7d:72:e6:9e:a1:40:0a:
         a1:0e:22:56:51:31:c3:c8:61:d0:8b:b9:72:6a:a9:d6:f0:c6:
         67:64:0a:5f:d4:9c:19:b6:d3:97:33:4f:fc:aa:eb:46:69:9f:
         28:58:81:f4:67:23:b8:58:36:6f:4c:fe:7b:64:28:d1:fd:62:
         52:89:82:91:a5:c1:0c:01:83:b1:df:e5:bf:48:a8:27:e1:eb:
         a6:c9:d6:87:54:df:21:fe:a7:93:c3:a2:16:90:30:ec:68:97:
         84:6d:5b:8d:a7:59:c4:d9:5a:50:16:53:cf:8a:8c:a1:52:3e:
         06:a4:df:8b:c5:c2:8e:a3:11:3b:b8:e4:29:ae:a5:0f:3e:f2:
         e3:0f:a6:b8:41:fa:67:f1:02:f0:ed:51:54:10:04:08:c9:9a:
         88:8d:b4:71:df:43:96:48:9a:9d:1d:7a:3b:91:0b:e2:85:54:
         01:37:83:f5:96:99:8f:14:e0:91:4f:cb:01:06:63:56:49:7c:
         18:34:55:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:36 2024 by rpki-client on console-fra.rpki-client.org