Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1ebdf5fae04f1648339337b38e4ad29e0799651.cer
File:                     d1ebdf5fae04f1648339337b38e4ad29e0799651.cer (raw, json)
Hash identifier:          2jwGr+uhEAhvwbPx9y8Z1VCfs9UwSjZZ7UkmiCze5jI=
Subject key identifier:   A0:E0:5F:48:FD:3F:E0:01:67:E5:EA:FD:B5:25:31:61:63:B7:E4:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DE6B21
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/54a16254-3992-49ae-8d07-374d5f2cfca9/d1ebdf5fae04f1648339337b38e4ad29e0799651.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/54a16254-3992-49ae-8d07-374d5f2cfca9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Feb 2023 19:02:27 +0000
Certificate not after:    Sun 24 Nov 2024 20:16:56 +0000
Subordinate resources:    AS: 28452

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14576417 (0xde6b21)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  9 19:02:27 2023 GMT
            Not After : Nov 24 20:16:56 2024 GMT
        Subject: CN=d1ebdf5fae04f1648339337b38e4ad29e0799651
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f8:b7:f1:5d:25:7a:75:8c:a6:f6:fc:e2:3b:
                    3d:4a:d3:f7:ac:a9:84:71:b7:bf:17:59:d3:c6:bb:
                    76:03:e9:07:1b:7b:2e:b6:a6:d3:28:6c:89:1e:66:
                    9c:2b:af:a1:9a:65:55:b5:ce:7c:38:fe:4a:18:df:
                    86:4b:40:a5:a2:5a:96:bf:4f:c7:0c:46:c0:e5:e3:
                    d6:b6:ca:60:b3:8d:95:62:91:ec:d1:da:ed:69:37:
                    3e:db:1f:0e:02:b6:22:05:e3:4c:0c:5b:fd:ae:93:
                    c2:7a:74:fe:62:dd:d4:be:24:a6:b1:93:e5:16:7b:
                    4b:8c:e4:2c:b5:a8:10:6c:8e:8b:a1:4e:69:f3:28:
                    1e:fc:b0:f6:21:eb:64:e9:54:ac:be:f4:15:59:d1:
                    02:44:55:3e:d1:e7:f6:37:6b:57:dc:fa:23:e3:12:
                    64:5f:a4:b5:fe:4a:ef:de:ed:54:3f:da:cc:b2:99:
                    6b:43:3c:24:be:38:8a:61:47:57:61:5a:3c:2b:44:
                    34:65:d8:30:0e:bc:a4:2d:9c:48:d0:ba:df:50:91:
                    92:ab:d9:1b:c3:5d:a0:22:f4:7f:ac:b0:b9:dd:a1:
                    85:7e:bb:29:f5:16:68:67:23:e4:e5:d0:50:6f:8c:
                    83:4a:01:72:11:48:d3:7c:36:2d:35:b3:ea:d2:2c:
                    e3:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:E0:5F:48:FD:3F:E0:01:67:E5:EA:FD:B5:25:31:61:63:B7:E4:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/54a16254-3992-49ae-8d07-374d5f2cfca9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/54a16254-3992-49ae-8d07-374d5f2cfca9/d1ebdf5fae04f1648339337b38e4ad29e0799651.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28452

    Signature Algorithm: sha256WithRSAEncryption
         39:56:48:b5:8a:ad:57:b7:02:e2:8e:9f:f5:c9:29:8f:cd:7e:
         94:5d:f8:6e:1f:eb:5a:c6:c3:77:a1:d6:23:45:b2:74:24:3d:
         45:33:8a:90:c1:3f:ba:d7:1f:c3:7a:a9:c1:3c:fe:0b:2a:65:
         d5:f2:d1:9c:48:80:5c:d7:f9:8a:eb:eb:f4:06:e9:d6:e8:af:
         09:63:d3:e1:be:1a:55:3a:67:c0:01:b6:89:6c:bd:d9:8c:12:
         1e:a8:ba:09:d9:ce:1a:e2:1e:5d:38:51:04:0b:01:bb:f3:7e:
         d5:b1:aa:d6:fe:e9:33:23:72:3f:9a:6d:55:38:35:49:d1:0d:
         10:c8:72:a5:89:bc:01:03:bd:a3:78:df:bc:3f:92:c9:3c:24:
         2c:cf:ec:42:8b:56:15:a7:01:32:b1:db:6e:11:ff:be:d3:0a:
         33:20:06:0f:04:5a:38:b1:bd:76:4f:dc:f7:d2:4b:d0:7b:a8:
         df:0a:f1:7d:a3:c2:db:3a:a0:ba:cc:96:57:6e:5d:83:72:4f:
         d6:13:bd:cd:5b:15:46:91:b1:2d:98:12:cd:f7:16:8d:d3:dc:
         02:22:d2:ff:ca:ec:1f:ab:c8:b8:74:02:02:57:48:0a:32:66:
         b8:e7:e9:6f:d6:77:f8:3f:c3:d3:22:6e:96:2d:26:e7:99:0b:
         fd:26:ea:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org