Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cc1e84cc9e304aced62b019d9b2c50e9387e605f.cer
File:                     cc1e84cc9e304aced62b019d9b2c50e9387e605f.cer (raw, json)
Hash identifier:          cJ4NsMnotitJ5B4D+GQ3IM6lyN3+P6Ns2lcOhezX6/Q=
Subject key identifier:   F6:BA:F4:16:80:14:29:12:8C:64:54:AB:D0:5B:4F:11:A8:AF:EB:10
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4E403
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/cc1e84cc9e304aced62b019d9b2c50e9387e605f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 13 Jun 2022 23:33:00 +0000
Certificate not after:    Thu 12 Sep 2024 16:35:47 +0000
Subordinate resources:    IP: 132.255.8.0/22
                          IP: 2803:fb80::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16049155 (0xf4e403)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 13 23:33:00 2022 GMT
            Not After : Sep 12 16:35:47 2024 GMT
        Subject: CN=cc1e84cc9e304aced62b019d9b2c50e9387e605f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:9b:9a:49:8d:91:bb:94:49:8f:65:1d:b2:be:
                    99:0e:fb:af:71:56:e1:52:88:0b:a5:30:b5:40:87:
                    38:87:45:d5:f4:51:d7:2d:c9:84:4e:98:1e:a5:10:
                    56:60:8a:cb:99:bd:34:4f:00:9e:7e:1e:d7:4f:83:
                    7a:ac:33:0b:51:de:bb:a5:1b:df:e1:b4:52:4f:ff:
                    66:42:ee:dd:99:d6:d2:ad:46:06:65:ce:d3:46:52:
                    26:24:22:30:01:78:cf:5b:b1:82:19:26:5a:04:b3:
                    a7:1d:da:8b:e2:da:cf:54:8a:57:b7:13:63:c4:ae:
                    48:d9:03:1e:5a:64:d9:df:4e:5d:df:c1:00:ca:ed:
                    4f:d5:81:67:d3:bd:08:ef:35:9b:94:2e:71:fb:46:
                    a5:ff:e6:55:04:4c:fb:62:1c:29:b6:1e:fd:93:e1:
                    b3:fb:e8:56:d3:78:a7:76:dd:2f:54:fa:b8:7f:2a:
                    9f:ce:62:a8:43:52:ad:4d:35:69:4b:67:a4:1d:31:
                    7d:fe:82:79:a7:94:dc:32:68:d1:e1:c9:33:b1:da:
                    da:8b:75:51:d2:6d:3f:5e:b4:72:be:87:34:68:e6:
                    df:92:25:36:10:92:0d:b5:36:32:62:1a:e8:c4:d4:
                    49:29:fc:40:c4:a2:dc:55:b6:ed:0d:2a:37:75:7f:
                    32:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:BA:F4:16:80:14:29:12:8C:64:54:AB:D0:5B:4F:11:A8:AF:EB:10
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9ee6f3e2-9850-4ca1-9c4c-61609c5eb346/cc1e84cc9e304aced62b019d9b2c50e9387e605f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  132.255.8.0/22
                IPv6:
                  2803:fb80::/32

    Signature Algorithm: sha256WithRSAEncryption
         48:57:2f:3f:8c:3e:7c:15:67:28:6a:16:98:e2:9e:5f:f5:85:
         b9:ea:0f:55:8f:f2:f8:97:8e:bd:67:63:b6:c9:fb:3e:08:5d:
         39:85:b3:59:a5:d5:d7:c6:55:1c:83:f5:21:3f:7e:57:8e:51:
         1e:91:50:3a:36:4c:d5:47:24:cc:91:c1:8a:e6:28:f8:b8:14:
         7c:77:31:d8:9c:1e:3e:2e:b4:e3:62:4f:79:5e:fb:6a:96:eb:
         c9:91:d0:f1:03:c5:7a:5a:64:9f:d1:36:f0:08:97:7a:53:03:
         10:15:9e:b8:91:09:88:87:94:98:41:fd:0e:41:7c:2a:e8:f8:
         a7:3e:c4:6b:1e:47:39:92:33:d1:e8:da:36:08:8e:f5:46:9f:
         8b:10:a7:eb:ad:c2:3e:1e:fe:5f:6d:15:95:cb:f0:d2:ad:17:
         d7:34:66:a8:18:78:c6:48:7e:0b:1d:30:60:9b:77:b1:56:a5:
         10:96:c0:fd:90:5d:51:2d:04:9e:e2:c0:b2:35:c5:3b:5f:47:
         a8:10:f4:f1:c8:8e:95:1f:fa:1a:5f:71:cd:d3:fd:c2:b8:db:
         ee:6f:ac:43:0c:3c:b8:63:78:cd:4b:c2:ef:8c:c2:c2:bd:ea:
         a0:47:1c:77:db:cf:7f:ac:32:cb:e6:e0:9f:2d:4d:d1:9e:c4:
         12:54:c4:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org