Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c71df04d728c3e91096c8f18cce9f2bc293d9901.cer
File:                     c71df04d728c3e91096c8f18cce9f2bc293d9901.cer (raw, json)
Hash identifier:          4a0HawpnvpjMg9tyNFb0xI7N5mV9vxcvIjKBdTUFZwY=
Subject key identifier:   59:62:A6:51:FE:0D:4D:66:29:E5:E3:1D:95:3E:10:C0:5B:F2:FE:98
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE6916
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/61c6e4eb-9dc6-47b3-ac39-a6514b9b0654/c71df04d728c3e91096c8f18cce9f2bc293d9901.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/61c6e4eb-9dc6-47b3-ac39-a6514b9b0654/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 13:48:32 +0000
Certificate not after:    Thu 29 Aug 2024 15:00:00 +0000
Subordinate resources:    IP: 200.29.224.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15624470 (0xee6916)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 13:48:32 2023 GMT
            Not After : Aug 29 15:00:00 2024 GMT
        Subject: CN=c71df04d728c3e91096c8f18cce9f2bc293d9901
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:2e:57:fb:22:bf:d2:e0:22:96:67:44:b1:3f:
                    40:c3:6f:67:92:6e:4f:19:55:f2:11:7f:fa:2c:bc:
                    95:91:79:3f:cf:4c:6d:72:93:a1:6b:17:29:3d:96:
                    11:54:e2:66:60:e3:a8:50:ae:a1:59:72:f6:39:0d:
                    58:ac:3f:27:52:18:59:0d:32:dd:41:e6:b2:3f:d2:
                    3a:e2:38:7f:8d:b9:2c:0c:5b:99:61:cb:26:d7:4c:
                    5c:09:f6:9b:ef:cb:17:8e:47:91:50:c4:e0:7e:6b:
                    8b:11:6e:1c:18:20:5c:55:66:f6:11:8e:bf:96:5e:
                    15:9d:82:72:05:7f:3a:c1:e9:fa:3a:a8:3e:70:17:
                    af:8c:e4:52:05:8a:93:87:ab:3a:b6:a1:4c:0f:7f:
                    46:2c:f5:e6:4c:26:12:d7:7c:15:f5:b5:9c:64:a4:
                    22:a9:5f:29:a9:0a:5a:e5:f4:c3:51:75:ba:c7:66:
                    80:9b:dc:39:78:5a:9a:ee:e3:e7:e2:dc:ea:3c:57:
                    b3:33:05:2c:41:33:77:d4:a6:1f:bd:62:b1:f5:f9:
                    7b:41:b9:d9:6f:de:4e:d3:62:a8:72:01:79:e5:ab:
                    59:24:8f:10:2d:97:c7:4a:d2:6f:5b:08:43:ad:28:
                    eb:18:24:49:b0:c6:e1:aa:36:63:9a:65:f3:33:51:
                    21:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:62:A6:51:FE:0D:4D:66:29:E5:E3:1D:95:3E:10:C0:5B:F2:FE:98
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/61c6e4eb-9dc6-47b3-ac39-a6514b9b0654/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/61c6e4eb-9dc6-47b3-ac39-a6514b9b0654/c71df04d728c3e91096c8f18cce9f2bc293d9901.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.29.224.0/21

    Signature Algorithm: sha256WithRSAEncryption
         8a:bb:45:df:02:e0:b5:23:7f:bf:fd:a9:8b:15:c6:c2:96:ad:
         0c:a6:38:03:79:23:9c:fb:e5:af:b3:9c:29:7e:9a:05:47:51:
         26:5b:04:54:e9:23:77:4c:8f:09:86:a6:10:b9:6e:38:89:97:
         ad:1f:46:1d:17:df:ec:22:e3:d3:69:e8:04:9f:3f:f6:3d:1e:
         2c:14:fc:4b:fb:21:db:44:c2:22:8e:c2:97:6d:38:fc:7c:b3:
         07:65:ac:89:be:64:9e:2c:8d:19:81:fd:37:e3:b3:b3:d2:4c:
         c8:0f:7d:a2:f1:15:dc:92:dd:97:32:95:12:9f:4c:78:ac:c3:
         76:a5:fb:6f:bb:a0:74:c0:34:33:cd:76:4f:04:1a:85:26:e1:
         ed:ba:b8:80:a0:48:60:cc:b5:9a:fc:da:cc:47:c6:70:c6:45:
         cc:1c:32:91:bb:9f:22:38:49:4d:85:8a:b2:fd:a9:3f:4d:30:
         b2:c8:01:d4:c3:fa:33:71:c5:b0:92:ed:ce:c1:af:54:83:7c:
         06:82:01:44:dc:66:bf:3d:c1:da:2f:ad:8c:e7:7f:97:91:8b:
         b4:6a:55:a8:31:4b:d9:c3:81:04:ff:56:0d:d4:8b:8e:be:a7:
         7b:cb:cf:29:7e:52:06:b6:8e:19:66:5c:cf:6d:c6:43:d4:81:
         8e:62:bf:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:29 2024 by rpki-client on console-ams.rpki-client.org