Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c7d6c65aee3b57cbb423e7b7c52b8029ffdb9571.cer
File:                     c7d6c65aee3b57cbb423e7b7c52b8029ffdb9571.cer (raw, json)
Hash identifier:          uPuj0EBE/qM3+JdiOplwJIlaxV0mOOG8jl59J5npTLg=
Subject key identifier:   ED:0B:B8:7C:7B:C6:E1:F8:5A:D1:58:0A:4A:A5:05:7D:80:A6:08:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010AB656
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dec34375-162d-4932-9b0f-a1c5503b0343/c7d6c65aee3b57cbb423e7b7c52b8029ffdb9571.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dec34375-162d-4932-9b0f-a1c5503b0343/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 16 Feb 2024 13:41:52 +0000
Certificate not after:    Fri 27 Dec 2024 21:34:57 +0000
Subordinate resources:    IP: 192.144.84.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17479254 (0x10ab656)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 16 13:41:52 2024 GMT
            Not After : Dec 27 21:34:57 2024 GMT
        Subject: CN=c7d6c65aee3b57cbb423e7b7c52b8029ffdb9571
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:37:d0:bb:e6:ed:eb:69:8b:08:44:f3:1e:09:
                    f8:06:37:e4:06:44:52:eb:8e:0f:d0:c5:13:d9:25:
                    a8:10:9d:49:14:95:86:56:62:2a:78:c9:cd:30:61:
                    4f:b4:95:ae:4f:a9:ac:e2:84:06:4d:25:b2:52:92:
                    7e:a0:f4:c6:7d:f8:ba:f1:d9:e5:2e:7e:c6:b6:b9:
                    ad:1c:ee:31:0f:d1:7b:69:b8:14:e9:5a:1e:9f:e0:
                    75:c5:4d:b8:cc:e5:e9:c5:ae:03:98:4c:e4:ac:d5:
                    8b:71:61:e1:8e:9d:9a:31:8c:3c:80:4f:8e:ff:41:
                    a0:8c:04:2f:bb:f6:63:c2:2d:f2:d8:e2:08:9d:26:
                    02:02:4a:2f:ad:35:e2:b6:b7:77:e2:a9:0e:eb:94:
                    7a:37:c1:fc:a2:a5:a3:62:cc:f1:9e:9f:40:7b:64:
                    d8:04:ec:59:2f:17:0a:4b:0e:a5:c8:e0:0d:68:30:
                    1a:ce:b4:ac:ea:3e:64:6d:01:f6:f8:38:9f:b8:f1:
                    fe:be:3c:51:8f:2b:cb:c2:23:00:00:8e:1a:63:dd:
                    65:68:de:91:ab:f1:da:37:17:cc:10:67:db:bc:43:
                    b5:c1:7a:b7:78:f2:90:8e:60:75:50:15:d4:6f:42:
                    79:05:af:ca:1f:22:9c:3c:57:c2:66:33:67:bb:9a:
                    de:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:0B:B8:7C:7B:C6:E1:F8:5A:D1:58:0A:4A:A5:05:7D:80:A6:08:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dec34375-162d-4932-9b0f-a1c5503b0343/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dec34375-162d-4932-9b0f-a1c5503b0343/c7d6c65aee3b57cbb423e7b7c52b8029ffdb9571.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.144.84.0/23

    Signature Algorithm: sha256WithRSAEncryption
         05:58:1c:68:c9:6d:19:52:fe:2f:ce:c1:db:c3:b7:c0:80:c4:
         e5:97:d6:38:30:c4:32:c4:53:dd:f5:96:7b:bb:05:0b:ce:03:
         cf:b0:59:12:1d:a1:5c:6d:2e:6a:9d:c8:f6:1e:8e:90:66:fd:
         da:85:1d:cc:eb:70:cf:1f:3c:07:bc:1d:30:3d:6c:07:27:53:
         61:52:c6:9a:26:4a:6c:cd:1e:9b:c0:db:43:da:da:bf:61:9c:
         3c:0d:51:89:29:80:15:79:be:48:8a:a8:5e:3a:c6:5f:da:cd:
         b9:b5:85:2a:39:56:33:b2:76:07:7e:c2:e0:51:51:eb:9a:9d:
         be:3a:86:02:a7:12:4c:f9:8e:54:80:7e:c7:04:e4:04:1a:53:
         58:92:f9:a0:84:02:20:4c:c5:72:90:ae:7d:5a:4a:98:2d:ab:
         5f:e9:a6:3a:55:46:b1:99:21:e8:e6:22:9b:b5:86:d8:e4:f5:
         7f:67:0b:c1:da:cc:79:8d:f2:4b:bc:85:83:fc:e2:22:69:4c:
         cf:31:43:f9:0a:c8:85:50:82:0d:1f:2c:4e:a6:55:d5:6b:ac:
         91:76:31:8f:69:71:17:94:77:d0:49:4b:9f:23:55:d1:dd:57:
         31:40:e3:91:90:9c:03:f7:e8:75:bf:ed:45:92:a1:58:37:a6:
         cb:62:b3:d5
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAQq2VjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTI0MDIxNjEzNDE1MloXDTI0MTIyNzIxMzQ1
N1owMzExMC8GA1UEAxMoYzdkNmM2NWFlZTNiNTdjYmI0MjNlN2I3YzUyYjgwMjlm
ZmRiOTU3MTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ830Lvm7etp
iwhE8x4J+AY35AZEUuuOD9DFE9klqBCdSRSVhlZiKnjJzTBhT7SVrk+prOKEBk0l
slKSfqD0xn34uvHZ5S5+xra5rRzuMQ/Re2m4FOlaHp/gdcVNuMzl6cWuA5hM5KzV
i3Fh4Y6dmjGMPIBPjv9BoIwEL7v2Y8It8tjiCJ0mAgJKL6014ra3d+KpDuuUejfB
/KKlo2LM8Z6fQHtk2ATsWS8XCksOpcjgDWgwGs60rOo+ZG0B9vg4n7jx/r48UY8r
y8IjAACOGmPdZWjekavx2jcXzBBn27xDtcF6t3jykI5gdVAV1G9CeQWvyh8inDxX
wmYzZ7ua3h0CAwEAAaOCAt4wggLaMB0GA1UdDgQWBBTtC7h8e8bh+FrRWApKpQV9
gKYIkjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9kZWMzNDM3NS0xNjJk
LTQ5MzItOWIwZi1hMWM1NTAzYjAzNDMvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZGVjMzQzNzUtMTYyZC00
OTMyLTliMGYtYTFjNTUwM2IwMzQzL2M3ZDZjNjVhZWUzYjU3Y2JiNDIzZTdiN2M1
MmI4MDI5ZmZkYjk1NzEubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcCQVDANBgkqhkiG9w0BAQsFAAOC
AQEABVgcaMltGVL+L87B28O3wIDE5ZfWODDEMsRT3fWWe7sFC84Dz7BZEh2hXG0u
ap3I9h6OkGb92oUdzOtwzx88B7wdMD1sBydTYVLGmiZKbM0em8DbQ9rav2GcPA1R
iSmAFXm+SIqoXjrGX9rNubWFKjlWM7J2B37C4FFR65qdvjqGAqcSTPmOVIB+xwTk
BBpTWJL5oIQCIEzFcpCufVpKmC2rX+mmOlVGsZkh6OYim7WG2OT1f2cLwdrMeY3y
S7yFg/ziImlMzzFD+QrIhVCCDR8sTqZV1WuskXYxj2lxF5R30ElLnyNV0d1XMUDj
kZCcA/fodb/tRZKhWDemy2Kz1Q==
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:29 2024 by rpki-client on console-ams.rpki-client.org