Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d0770ddd551675937607f1d9793d3dafd3873a04.cer
File:                     d0770ddd551675937607f1d9793d3dafd3873a04.cer (raw, json)
Hash identifier:          9pGG+6zw+5zMtUO9vcdNZsCJjU+OuNGwOsE/h1jC6JI=
Subject key identifier:   F7:47:78:57:17:EC:F0:3C:86:56:79:51:47:C8:1B:4D:59:F9:02:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB8369
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/d0770ddd551675937607f1d9793d3dafd3873a04.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Jun 2022 19:35:37 +0000
Certificate not after:    Wed 11 Jun 2025 06:00:00 +0000
Subordinate resources:    IP: 200.2.8.0/21

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16483177 (0xfb8369)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 30 19:35:37 2022 GMT
            Not After : Jun 11 06:00:00 2025 GMT
        Subject: CN=d0770ddd551675937607f1d9793d3dafd3873a04
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:b6:0b:67:04:74:0a:c1:d3:71:ec:37:9c:f2:
                    2c:e1:b8:10:72:3e:46:a6:76:d8:4c:61:06:0b:19:
                    ac:25:26:e0:8e:f9:9f:cd:1a:0e:ac:58:b1:31:db:
                    20:33:61:8d:c3:c6:66:58:7b:57:23:bd:44:8c:67:
                    07:31:e6:a9:e6:b7:41:5e:70:54:a2:c6:00:4d:26:
                    27:79:80:28:ad:a7:a2:48:5a:82:3b:3a:15:6d:1b:
                    90:39:87:06:28:62:94:c1:75:41:5b:94:1b:ee:d8:
                    f2:de:0a:b4:30:8c:2b:bf:3c:28:04:b8:d9:c0:d1:
                    38:cb:a4:ba:65:05:75:7c:ec:a4:07:2c:1c:cf:14:
                    a8:34:27:0c:1f:b7:5c:89:90:24:ab:a2:e8:5c:e7:
                    64:31:8e:ff:e5:01:c7:7d:2c:38:ef:dc:c3:16:55:
                    2c:44:09:ac:0d:88:75:d5:c4:87:c0:0b:c7:72:46:
                    10:27:e0:b0:03:11:f5:81:40:5b:d5:14:a9:b6:d5:
                    27:c1:fa:a0:47:54:16:29:e6:42:45:8d:e4:18:17:
                    71:eb:16:b1:cc:48:4c:a0:f1:54:33:2e:17:6b:93:
                    eb:5d:79:9f:91:8e:d2:b2:07:33:95:21:e7:74:f4:
                    28:b5:87:fb:03:8f:d3:21:4e:83:f2:d3:fb:72:56:
                    4d:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:47:78:57:17:EC:F0:3C:86:56:79:51:47:C8:1B:4D:59:F9:02:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0fd9871d-bbc9-40ab-a40e-f07af2eeb6af/d0770ddd551675937607f1d9793d3dafd3873a04.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.2.8.0/21

    Signature Algorithm: sha256WithRSAEncryption
         00:63:83:a1:07:11:e2:31:e8:14:ff:2a:b0:4c:eb:96:34:cd:
         e4:20:33:7c:33:c6:5e:cf:2a:82:4b:b0:54:f7:cc:9c:86:79:
         eb:11:f3:0b:42:05:a4:ba:95:44:44:c0:d1:12:39:c1:f6:23:
         d4:8f:c8:de:2a:0b:1f:da:74:9a:53:5f:d6:fb:ed:0c:fc:5f:
         2b:f8:c7:39:88:58:d4:cd:48:00:c3:12:45:33:19:5d:18:20:
         19:20:f8:2e:19:36:89:c2:a8:b7:2c:68:56:d7:8c:c0:04:b3:
         d4:bd:08:48:74:18:31:e5:bf:eb:02:b9:70:5d:07:8d:52:69:
         65:3c:38:83:a9:f5:73:da:cf:c6:4b:fe:40:cf:46:cf:41:02:
         2b:30:df:ab:27:72:8f:29:44:cd:ea:4d:1f:0c:3e:38:70:33:
         90:df:2a:36:b0:75:1f:cc:74:8d:67:61:38:44:a5:0d:d1:f4:
         0c:a6:c3:bf:fc:99:03:72:77:65:00:18:15:36:ad:46:b4:c4:
         be:90:83:9b:a3:a6:37:30:5a:d6:cf:7a:bb:30:f2:73:86:f3:
         9f:a9:a1:b4:45:95:99:81:fe:e3:45:e7:fa:40:c8:c2:42:3b:
         61:b8:d4:4b:02:82:02:5a:50:75:2a:fc:65:a6:1e:f6:65:77:
         2f:b6:a7:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org