Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b91ee26129c1d8ff0af065516125851b1d7f2243.cer
File:                     b91ee26129c1d8ff0af065516125851b1d7f2243.cer (raw, json)
Hash identifier:          kQ3302P98IpFYD4WAdmG1M8WK3BQAKxQ7Obs83mQkDI=
Subject key identifier:   20:0B:7B:6B:58:7C:25:F8:FD:B2:67:B6:14:7C:3C:FA:87:F7:1C:97
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0101428F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7fa28c74-5449-4f1d-a165-0ef8c697954e/b91ee26129c1d8ff0af065516125851b1d7f2243.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7fa28c74-5449-4f1d-a165-0ef8c697954e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:09:13 +0000
Certificate not after:    Thu 10 Oct 2024 20:47:24 +0000
Subordinate resources:    AS: 53107
                          IP: 131.100.24.0/22
                          IP: 131.100.228.0/22
                          IP: 143.137.188.0/23
                          IP: 177.53.148.0/22
                          IP: 177.93.104.0/21
                          IP: 181.191.208.0/22
                          IP: 186.209.112.0/21
                          IP: 187.108.192.0/20
                          IP: 2804:1740::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16859791 (0x101428f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:09:13 2023 GMT
            Not After : Oct 10 20:47:24 2024 GMT
        Subject: CN=b91ee26129c1d8ff0af065516125851b1d7f2243
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:9f:be:5f:39:c2:90:6b:f8:eb:5a:5a:ec:c0:
                    d1:6b:25:4a:bc:c0:1f:79:11:b2:ca:ef:8d:bb:d3:
                    0d:56:a8:28:bc:1f:52:01:da:f6:88:20:1e:bc:92:
                    5f:55:53:89:e4:ed:e2:69:e0:a7:f3:b5:cd:e8:88:
                    97:bc:2f:2a:cc:3d:ca:67:38:bb:53:eb:39:a8:a0:
                    a1:5f:2a:3d:d3:0c:c7:9f:65:cc:fd:7c:22:9b:14:
                    fa:76:9b:a4:50:88:fa:73:ae:f6:e0:92:21:2c:b2:
                    c6:e0:80:85:d0:92:29:43:36:be:68:54:74:7f:c5:
                    b8:8e:a8:78:45:6e:43:e9:a5:da:fb:83:22:59:2d:
                    d6:3f:fc:a8:29:23:58:57:1e:34:f1:25:7f:a3:c8:
                    18:69:82:a7:1d:91:ca:01:78:4f:89:2b:3f:10:3c:
                    50:e5:e5:4a:42:5b:8d:28:f8:cd:3b:33:b3:f0:08:
                    b0:db:4b:c3:9f:a4:e2:92:c4:10:5c:45:72:80:cb:
                    90:53:f7:5a:7b:38:75:82:5c:95:b8:4b:32:2e:8d:
                    5e:a7:01:b4:d6:39:65:da:b3:f8:92:1b:5d:2d:ff:
                    75:85:e9:2e:9f:21:91:33:a1:dc:39:13:e7:f5:1a:
                    3c:69:ab:2a:bb:00:f6:30:d4:cb:62:4b:b2:11:b2:
                    69:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:0B:7B:6B:58:7C:25:F8:FD:B2:67:B6:14:7C:3C:FA:87:F7:1C:97
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7fa28c74-5449-4f1d-a165-0ef8c697954e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7fa28c74-5449-4f1d-a165-0ef8c697954e/b91ee26129c1d8ff0af065516125851b1d7f2243.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.24.0/22
                  131.100.228.0/22
                  143.137.188.0/23
                  177.53.148.0/22
                  177.93.104.0/21
                  181.191.208.0/22
                  186.209.112.0/21
                  187.108.192.0/20
                IPv6:
                  2804:1740::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  53107

    Signature Algorithm: sha256WithRSAEncryption
         04:f0:4a:b3:71:0f:f0:a6:89:39:f5:4d:bd:f5:fb:47:92:ac:
         25:79:32:46:2f:c8:64:d7:16:ac:34:b2:51:11:e1:9e:59:30:
         49:91:a3:d6:cc:a7:6b:9f:d1:77:2e:fb:96:a9:5e:d2:dc:36:
         34:91:a0:31:17:5a:73:5d:b6:7f:d9:a8:18:87:b9:ef:c1:9b:
         65:67:bf:15:f0:b2:fb:e7:9c:23:b9:50:80:09:eb:28:52:88:
         24:db:34:b3:93:8c:e7:b5:b7:e3:0a:20:f5:3f:c3:ac:47:f6:
         8b:a2:21:35:88:f3:2c:0b:fe:7a:f0:2d:fb:5f:be:11:41:bc:
         89:6d:39:9b:fe:60:00:be:1a:dd:47:54:75:d1:c8:8a:42:b5:
         f8:2b:65:f5:12:67:2a:85:46:4f:aa:58:a5:33:eb:af:ae:81:
         84:e0:37:0e:6e:b2:cf:a3:90:67:85:0b:0f:97:3f:0c:bc:59:
         2f:d5:bc:15:fc:c1:1d:5a:e2:37:a8:5d:51:8e:2f:70:c9:c5:
         52:83:c6:6a:aa:6a:71:fe:9f:1d:15:e1:97:c7:1f:5f:99:e9:
         37:1e:3e:80:8b:e9:39:09:7a:c8:72:30:2a:bb:12:6c:db:3e:
         1a:f9:2d:57:11:03:fe:a1:8c:b1:38:93:97:93:a3:ad:9b:52:
         03:8b:95:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org