Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c4d16db9e26037972373f13faf7de3ffe71410c7.cer
File:                     c4d16db9e26037972373f13faf7de3ffe71410c7.cer (raw, json)
Hash identifier:          jlgEYsDfnheofayQVO7eV4FGx8h5uKzbrkLKsh4VEms=
Subject key identifier:   7B:59:FE:41:A7:B3:1D:68:59:77:0A:8F:91:41:17:30:5E:36:D9:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7361C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d1dc0d5d-2f6a-4a8a-93b7-f11121347058/c4d16db9e26037972373f13faf7de3ffe71410c7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d1dc0d5d-2f6a-4a8a-93b7-f11121347058/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 15:59:58 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.184.0/23
                          IP: 192.100.216.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16201244 (0xf7361c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 15:59:58 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=c4d16db9e26037972373f13faf7de3ffe71410c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:2f:21:fd:df:c5:ea:94:47:2e:7b:61:a6:2b:
                    9a:27:9d:ee:c7:bc:4c:c6:40:38:de:c2:0a:87:72:
                    60:b9:12:61:84:ca:e9:06:b5:3a:42:97:d5:33:db:
                    c3:5b:c9:af:2b:de:76:6a:cb:8b:4f:1b:62:d4:12:
                    e1:16:a1:6e:ff:f8:dc:7d:73:79:7d:ec:45:ac:6c:
                    0c:75:20:51:1f:6b:d1:7e:98:18:35:48:db:d0:f3:
                    a9:be:89:69:b9:7f:57:d0:9f:ab:bd:98:47:b4:a5:
                    89:bc:13:b0:28:c4:9d:d5:65:26:b7:bb:71:6f:34:
                    58:81:61:65:9c:0b:25:76:ea:ae:fb:56:15:86:35:
                    9f:1f:ca:d3:2a:60:a4:ac:e6:90:9d:79:47:09:c5:
                    1c:e7:cc:dc:f3:c2:bf:f5:01:9c:87:e2:f2:3e:6e:
                    b5:7e:0a:ab:c3:07:aa:7f:b8:1d:33:35:8d:fa:9a:
                    7e:64:fd:48:ad:42:00:10:fa:b0:8d:93:df:ab:c9:
                    7f:a6:fe:aa:fb:56:36:a4:df:de:0a:4f:1b:63:45:
                    cb:53:88:b0:e2:6f:db:d1:40:8f:8f:a5:43:85:43:
                    53:6f:0e:1a:74:99:4f:2c:8d:47:2a:17:36:6e:fd:
                    58:05:54:44:66:49:14:ed:b8:e1:bb:e0:ad:17:55:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7B:59:FE:41:A7:B3:1D:68:59:77:0A:8F:91:41:17:30:5E:36:D9:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d1dc0d5d-2f6a-4a8a-93b7-f11121347058/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d1dc0d5d-2f6a-4a8a-93b7-f11121347058/c4d16db9e26037972373f13faf7de3ffe71410c7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.184.0/23
                  192.100.216.0/24

    Signature Algorithm: sha256WithRSAEncryption
         64:51:68:49:1b:ae:a8:ba:0e:71:58:11:c4:db:c0:4a:70:15:
         39:ca:2b:82:b4:76:cc:94:fa:31:80:9e:e6:d1:f9:42:f6:52:
         3d:a8:cd:e9:88:ce:4f:94:67:5a:92:e2:54:1e:7a:06:1d:b3:
         ea:00:b4:ef:c6:31:49:64:ac:17:21:e4:8c:a5:6a:ff:24:c3:
         d9:d5:69:c1:5a:9d:cd:51:9c:3d:b2:e3:e1:6e:8a:3e:cc:b8:
         66:8e:53:0c:49:e8:fb:b1:ff:65:0f:83:5b:b2:f8:5f:63:ca:
         03:c5:67:25:bf:b5:37:ae:c9:1c:3d:dc:a9:98:17:40:f4:c0:
         c0:d8:7f:9b:8a:b5:ec:b0:c9:f6:05:73:40:18:ef:90:0c:be:
         56:90:31:21:2f:69:8a:9e:f4:9d:0d:41:9e:ea:5f:70:e5:66:
         36:f2:e6:d5:f6:55:a1:cb:97:45:fd:c4:cc:f4:8f:fb:09:08:
         64:c6:24:0f:a0:db:00:75:de:b2:05:b6:f5:09:a8:10:6d:3f:
         2f:32:ad:7b:42:fb:83:67:41:b5:6e:76:71:55:d9:fc:c6:68:
         44:95:31:a3:ea:94:ab:fd:e5:43:e8:61:84:97:60:07:48:ac:
         be:a6:5c:84:20:21:b5:4e:f3:56:e2:39:04:40:66:b7:c3:86:
         8a:d0:b8:a6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org