Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cd8e69f945f24f98946e88bec3e3ed9b9c531ad7.cer
File:                     cd8e69f945f24f98946e88bec3e3ed9b9c531ad7.cer (raw, json)
Hash identifier:          tV4nHbelKCK6+LMLUilq+hgN0XI6CY3jZ8NNyKfYLGc=
Subject key identifier:   48:1C:3B:07:79:5B:CC:B2:29:17:22:D6:99:EF:DD:1B:87:9A:3D:6C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E845D8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/75981791-271f-44fe-b77f-c70da6407cc0/cd8e69f945f24f98946e88bec3e3ed9b9c531ad7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/75981791-271f-44fe-b77f-c70da6407cc0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 22:58:06 +0000
Certificate not after:    Thu 20 Feb 2025 06:00:00 +0000
Subordinate resources:    AS: 10452

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15222232 (0xe845d8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 22:58:06 2023 GMT
            Not After : Feb 20 06:00:00 2025 GMT
        Subject: CN=cd8e69f945f24f98946e88bec3e3ed9b9c531ad7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:a3:18:65:fe:e3:8d:ca:83:10:f3:19:d1:
                    1a:00:b2:b0:53:c3:ad:aa:87:da:52:0f:a6:6e:d3:
                    ea:dd:7f:01:df:c4:cf:46:a6:8d:46:1e:84:3d:3e:
                    ae:38:8e:13:00:de:09:8b:77:d8:19:f3:49:3a:26:
                    98:7d:03:66:35:19:93:1b:5f:1a:d1:72:0e:cc:95:
                    a9:51:1a:ab:82:dd:ec:fc:ce:e7:57:aa:04:01:0b:
                    36:d7:43:c7:51:1f:74:8a:dd:cf:05:00:79:51:92:
                    d7:23:ed:81:94:a0:05:f7:f9:15:d4:c5:7a:08:4a:
                    bf:3c:1c:71:7d:bb:3d:f1:33:3c:88:d6:ff:4b:9d:
                    e8:ba:3f:88:cf:30:1e:c5:36:2c:9a:c5:7f:e9:ea:
                    3f:fe:0b:01:dd:27:e0:95:82:87:3b:d1:a7:f2:75:
                    d4:55:47:45:1c:cf:b3:e0:6a:73:15:2f:0c:32:e0:
                    aa:92:14:18:7c:c6:21:e1:e2:ee:2c:19:a1:88:4b:
                    82:9b:f4:c8:90:bb:ae:c6:4b:32:55:a0:9e:be:e7:
                    d1:f1:05:85:c6:98:c6:86:04:2f:cc:72:81:33:1b:
                    00:19:35:e3:68:04:05:91:ed:80:a2:16:c3:79:69:
                    60:79:a9:58:b7:f1:c8:13:29:ab:43:c7:54:fc:83:
                    f5:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:1C:3B:07:79:5B:CC:B2:29:17:22:D6:99:EF:DD:1B:87:9A:3D:6C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/75981791-271f-44fe-b77f-c70da6407cc0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/75981791-271f-44fe-b77f-c70da6407cc0/cd8e69f945f24f98946e88bec3e3ed9b9c531ad7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  10452

    Signature Algorithm: sha256WithRSAEncryption
         48:f9:8c:c0:f3:f4:70:3b:90:96:d0:36:1b:85:c9:fe:39:cc:
         06:ff:b9:4a:9e:ee:5c:31:42:e3:1e:20:0d:9f:ba:9a:9b:96:
         a0:30:77:57:a6:e2:c0:f7:76:a0:60:76:be:ba:f2:1d:70:87:
         24:be:57:b9:f9:82:3e:37:b7:33:c5:66:42:4c:94:2a:67:78:
         42:07:4d:9d:0d:22:38:49:fc:48:17:e1:4c:4d:b7:3a:8f:72:
         03:2f:06:07:2f:d5:4e:e2:5c:d6:94:a6:d5:e7:be:64:3a:46:
         f8:3d:12:eb:8a:40:bc:1d:d3:7f:68:ed:71:98:f2:0d:29:7d:
         43:66:02:02:1a:5d:5d:25:0b:15:01:cf:a7:9b:d6:7e:9f:5d:
         9d:af:55:86:3d:15:0c:c1:16:b2:50:5e:ab:86:c2:a1:49:cf:
         82:b3:0a:7a:cb:1e:29:2a:0b:9e:54:18:e4:f2:a8:b0:8b:59:
         b0:e7:11:65:3a:67:a6:cf:7c:fd:f2:fa:71:5d:e7:fe:a8:f6:
         8a:72:82:a7:c2:1d:fc:ab:8a:19:b4:42:7e:0b:09:f5:39:01:
         0d:a4:79:3f:78:86:7d:5c:64:ec:33:a4:cd:d4:28:70:a4:22:
         15:8c:71:0d:0f:00:bd:27:89:ae:ef:b2:2f:5d:1a:94:0e:8c:
         95:e6:48:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org