Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b7cd8a77396d3fd88fb86c4162ecfefa8d61f675.cer
File:                     b7cd8a77396d3fd88fb86c4162ecfefa8d61f675.cer (raw, json)
Hash identifier:          KNHAsrXqsj3ko6RezFOIPQLUPUnvFL8dOEAx1wijlFI=
Subject key identifier:   77:6C:19:92:51:07:85:F2:6C:A3:7D:78:F9:35:DC:41:85:E6:71:D9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F73969
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bce81609-f87a-40d0-8be0-14aab71e1348/b7cd8a77396d3fd88fb86c4162ecfefa8d61f675.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bce81609-f87a-40d0-8be0-14aab71e1348/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:00:06 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.217.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16202089 (0xf73969)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:00:06 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=b7cd8a77396d3fd88fb86c4162ecfefa8d61f675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c6:04:eb:b2:c0:d7:16:98:f1:fc:bc:96:60:
                    78:2e:dd:d2:5e:a8:ab:a3:7f:27:cb:28:26:1f:93:
                    99:65:2b:d1:01:8f:59:75:d2:c0:7f:4d:50:9e:89:
                    59:98:8b:8b:1b:38:a1:45:9f:be:3c:e1:f8:ba:47:
                    11:33:f1:78:3e:3a:5e:33:11:e7:24:cb:d1:a2:79:
                    0b:9c:f1:08:21:a6:26:dd:db:f3:ee:83:20:c9:49:
                    b0:d7:e4:cd:49:4c:41:7b:9b:05:56:53:20:4c:75:
                    ff:35:ad:c9:67:e1:f6:6a:ea:a4:d8:6e:e3:03:39:
                    79:a1:26:0c:7a:df:76:09:6b:b7:21:59:f0:b9:12:
                    f0:fe:f3:45:4f:42:c3:c4:26:ac:2b:d4:f8:bd:56:
                    e2:0e:e4:d4:58:4b:d6:b6:74:61:fc:e1:65:e2:df:
                    82:14:1f:f0:ad:2e:76:9c:5a:cf:80:0b:29:d5:ae:
                    7a:20:eb:a9:22:df:f5:08:db:c2:2b:1c:53:47:3a:
                    9b:5f:2c:c8:d4:69:89:20:18:c3:66:14:22:86:f6:
                    7b:95:31:8e:45:31:b1:2e:44:da:56:c0:15:e0:8f:
                    87:c4:30:28:1b:d0:ee:7c:19:52:ea:a0:e4:85:03:
                    02:60:32:79:5f:ad:dc:d3:6b:8a:61:af:db:db:a7:
                    1d:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                77:6C:19:92:51:07:85:F2:6C:A3:7D:78:F9:35:DC:41:85:E6:71:D9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bce81609-f87a-40d0-8be0-14aab71e1348/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bce81609-f87a-40d0-8be0-14aab71e1348/b7cd8a77396d3fd88fb86c4162ecfefa8d61f675.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.217.0/24

    Signature Algorithm: sha256WithRSAEncryption
         6a:3c:78:b3:df:d1:47:b8:63:f6:ae:37:d4:76:33:26:f2:d4:
         5a:7f:6a:d7:c5:c8:dc:db:1a:c1:24:1c:4b:86:34:59:dd:68:
         86:b4:57:c1:56:76:db:31:8c:72:dc:61:3d:f2:90:5c:3c:bf:
         86:d5:ce:64:4e:5a:be:32:bc:39:0c:73:2f:02:5e:50:a0:b1:
         61:ed:30:55:20:f4:3d:1d:fd:97:13:a7:79:53:88:0f:8d:dd:
         31:1e:98:5c:32:8a:b9:a0:21:5c:32:61:72:8d:1d:cc:ac:ec:
         02:b5:02:12:b7:4b:0b:42:19:6d:57:cc:a6:71:d9:8b:4f:30:
         eb:e9:ce:d2:58:c0:c8:34:24:db:39:3c:d6:5c:f0:1b:31:4c:
         45:f9:6b:62:56:85:35:47:5c:6f:e4:43:26:33:04:00:55:a9:
         3e:26:0a:d5:ac:aa:3f:68:8a:09:97:a2:e4:1e:47:da:65:4a:
         04:d4:21:46:d3:ec:4b:bf:34:de:a9:ae:fd:e6:ba:23:95:37:
         94:14:4d:66:1d:18:84:46:dc:2a:88:47:61:2f:6a:3a:27:fc:
         fc:8b:6a:0c:b1:17:7b:26:0f:2f:4c:8a:dc:04:6b:e4:d6:bb:
         66:f0:2a:27:b4:de:68:4e:b8:ea:b1:56:ed:f9:c6:ff:27:c4:
         0b:20:4b:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org