Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3be8149ed8dcfe4494db5c75d2cf462f1424297.cer
File:                     c3be8149ed8dcfe4494db5c75d2cf462f1424297.cer (raw, json)
Hash identifier:          ym4eLB+NmfO3Pyy3SDOxOVtsaDHS/4v/6pK/mj3zbWE=
Subject key identifier:   D2:9D:52:02:F9:16:3B:FB:AB:A8:E8:E1:18:A8:49:25:5E:6A:5A:FB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F74B53
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7a5bc970-8465-4607-8d5d-7d5e845467ce/c3be8149ed8dcfe4494db5c75d2cf462f1424297.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7a5bc970-8465-4607-8d5d-7d5e845467ce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:01:56 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.249.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16206675 (0xf74b53)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:01:56 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=c3be8149ed8dcfe4494db5c75d2cf462f1424297
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:88:56:35:e6:04:4e:72:9b:89:52:ec:d8:ea:
                    fd:1f:51:fc:c9:ff:2c:2c:0e:88:55:c5:29:5b:2e:
                    78:fd:cf:e6:66:d9:54:1c:1d:64:f3:9f:7e:0e:8c:
                    2c:73:e9:36:13:a9:6c:46:f2:11:2a:82:d1:7c:17:
                    3b:15:f9:dd:ac:18:82:ca:11:c5:7e:c7:c4:ab:84:
                    8e:63:8c:5a:e1:20:45:ca:94:44:24:ac:b5:f3:26:
                    f3:f6:bb:4d:01:81:18:2b:9f:c8:e2:8c:f6:16:2a:
                    a6:88:85:98:65:5b:14:7b:13:2c:20:9a:81:9a:2f:
                    22:09:47:7e:86:13:d2:7c:be:20:d8:6a:b1:32:9c:
                    fc:b2:c5:f9:8e:b6:48:37:b7:78:8b:7c:90:38:4f:
                    de:42:c3:0f:dc:5b:aa:a7:4a:04:40:04:ab:bb:55:
                    f5:74:5e:22:44:44:f3:bf:ca:7f:1f:aa:72:7c:35:
                    9d:3b:41:f9:ff:ba:7c:9e:cb:ba:44:a4:fb:67:c3:
                    11:4a:d1:36:09:11:44:6d:80:b5:21:d8:b6:e8:f9:
                    81:ee:10:6a:6d:26:c8:9b:3f:e6:96:46:2d:d1:19:
                    cc:b0:45:85:eb:cc:ea:9c:9b:35:02:75:c6:05:3f:
                    56:6d:26:02:e7:e9:2d:3a:f4:a5:48:8d:25:90:c8:
                    bf:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:9D:52:02:F9:16:3B:FB:AB:A8:E8:E1:18:A8:49:25:5E:6A:5A:FB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7a5bc970-8465-4607-8d5d-7d5e845467ce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7a5bc970-8465-4607-8d5d-7d5e845467ce/c3be8149ed8dcfe4494db5c75d2cf462f1424297.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.249.0/24

    Signature Algorithm: sha256WithRSAEncryption
         75:3c:4d:d9:0f:d2:db:d1:0c:3d:bb:9b:9a:d7:9e:18:5f:c4:
         1e:db:f1:83:1b:7c:cb:88:21:6a:7a:04:29:9d:58:e8:34:7c:
         44:e6:e7:11:19:11:ad:b6:2e:fe:03:eb:31:58:b9:7e:81:56:
         d4:33:00:ce:f7:24:ce:03:94:11:a1:ce:ab:67:7a:8c:99:15:
         54:03:5c:1b:41:1c:a0:39:82:51:d4:56:5b:3a:2a:a3:24:00:
         18:ed:af:5a:8c:13:0e:db:b0:5b:40:23:b5:96:af:26:3c:96:
         ed:59:2b:75:26:89:22:d3:19:09:3c:b3:5a:10:1e:ac:88:1a:
         79:ea:12:3e:6a:b4:7e:e6:40:27:1a:a3:91:24:32:02:dc:84:
         75:6b:c6:ee:c4:5b:94:45:c3:ae:7a:ac:40:7f:50:6f:96:5d:
         0a:c1:3c:65:d1:86:c4:f8:8a:59:57:1e:1b:3e:eb:14:4d:d5:
         80:0d:9a:8b:b9:35:64:52:86:9c:f0:28:c4:ef:72:2b:96:90:
         b5:5a:1d:ae:51:c1:b3:83:89:69:c6:b7:fc:de:9f:6d:c4:48:
         b3:f2:5e:76:8b:19:e9:a8:bf:b0:ea:e2:7f:21:d6:76:ed:60:
         f9:8b:31:97:dd:6e:5d:82:4e:9a:17:97:e5:3e:dd:ab:3c:e6:
         28:c6:e3:bc
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAPdLUzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDgyOTE2MDE1NloXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoYzNiZTgxNDllZDhkY2ZlNDQ5NGRiNWM3NWQyY2Y0NjJm
MTQyNDI5NzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJeIVjXmBE5y
m4lS7Njq/R9R/Mn/LCwOiFXFKVsueP3P5mbZVBwdZPOffg6MLHPpNhOpbEbyESqC
0XwXOxX53awYgsoRxX7HxKuEjmOMWuEgRcqURCSstfMm8/a7TQGBGCufyOKM9hYq
poiFmGVbFHsTLCCagZovIglHfoYT0ny+INhqsTKc/LLF+Y62SDe3eIt8kDhP3kLD
D9xbqqdKBEAEq7tV9XReIkRE87/Kfx+qcnw1nTtB+f+6fJ7LukSk+2fDEUrRNgkR
RG2AtSHYtuj5ge4Qam0myJs/5pZGLdEZzLBFhevM6pybNQJ1xgU/Vm0mAufpLTr0
pUiNJZDIv5MCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBTSnVIC+RY7+6uo6OEYqEkl
Xmpa+zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy83YTViYzk3MC04NDY1
LTQ2MDctOGQ1ZC03ZDVlODQ1NDY3Y2UvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvN2E1YmM5NzAtODQ2NS00
NjA3LThkNWQtN2Q1ZTg0NTQ2N2NlL2MzYmU4MTQ5ZWQ4ZGNmZTQ0OTRkYjVjNzVk
MmNmNDYyZjE0MjQyOTcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAMBk+TANBgkqhkiG9w0BAQsFAAOC
AQEAdTxN2Q/S29EMPbubmteeGF/EHtvxgxt8y4ghanoEKZ1Y6DR8RObnERkRrbYu
/gPrMVi5foFW1DMAzvckzgOUEaHOq2d6jJkVVANcG0EcoDmCUdRWWzoqoyQAGO2v
WowTDtuwW0AjtZavJjyW7VkrdSaJItMZCTyzWhAerIgaeeoSPmq0fuZAJxqjkSQy
AtyEdWvG7sRblEXDrnqsQH9Qb5ZdCsE8ZdGGxPiKWVceGz7rFE3VgA2ai7k1ZFKG
nPAoxO9yK5aQtVodrlHBs4OJaca3/N6fbcRIs/JedosZ6ai/sOrifyHWdu1g+Ysx
l91uXYJOmheX5T7dqzzmKMbjvA==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:29 2024 by rpki-client on console-ams.rpki-client.org