Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d34949bd125a2b95efcd70635590038fc0030295.cer
File:                     d34949bd125a2b95efcd70635590038fc0030295.cer (raw, json)
Hash identifier:          oFBEYXh6mlwHLgPNbMHF92Sh3G1PrY3Xp19f/nLbAe8=
Subject key identifier:   BC:01:7D:FE:F9:8D:5A:78:7A:01:BF:EA:25:AF:4D:BE:E4:9B:3D:DE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E41C23
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/d34949bd125a2b95efcd70635590038fc0030295.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 19 Oct 2020 19:15:05 +0000
Certificate not after:    Tue 07 May 2024 18:48:46 +0000
Subordinate resources:    AS: 61455
                          IP: 200.0.68.0/23
                          IP: 2801:14:a000::/47

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14949411 (0xe41c23)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 19 19:15:05 2020 GMT
            Not After : May  7 18:48:46 2024 GMT
        Subject: CN=d34949bd125a2b95efcd70635590038fc0030295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:9a:b2:a5:ca:2c:3d:01:61:7e:10:05:e8:25:
                    ec:a6:cd:a7:b4:4d:38:19:d4:54:ad:e6:08:ba:ca:
                    61:13:bd:25:36:6f:25:bd:dc:41:6a:3d:30:34:0e:
                    55:82:70:22:a6:7f:9c:fb:f2:3a:ac:9e:a8:62:25:
                    fc:4a:16:23:39:e9:5f:55:c9:22:eb:76:cc:57:1e:
                    c6:3d:87:78:af:29:75:80:74:42:8e:b8:20:c5:c5:
                    eb:a9:22:00:aa:6e:03:fc:75:f2:00:cc:72:53:d0:
                    cd:1c:44:cb:a2:cb:a3:8c:b3:2c:b4:d4:9b:18:59:
                    d2:ec:7f:94:64:e8:15:90:21:41:c9:b9:87:1c:fa:
                    37:1a:42:b4:8c:ed:c1:65:3a:c8:0c:55:8f:e0:67:
                    44:df:16:2a:3f:28:0a:2e:1f:84:e1:fd:4e:14:a7:
                    55:09:d2:b1:96:eb:27:22:b4:3a:fc:0d:38:87:b9:
                    29:73:76:70:85:0a:1d:56:db:0b:46:2d:07:6f:e9:
                    c3:e9:1c:21:4b:92:88:2a:b9:69:eb:8b:3d:a6:b5:
                    07:a5:e8:be:a3:8c:6c:da:d0:7b:06:ba:c1:f4:de:
                    e9:d1:62:53:81:51:fa:ce:c8:fb:ca:c5:3b:4a:74:
                    c4:48:7d:9c:c6:c3:04:90:a2:df:b0:9f:e1:17:ef:
                    ef:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:01:7D:FE:F9:8D:5A:78:7A:01:BF:EA:25:AF:4D:BE:E4:9B:3D:DE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b5a38d4a-898f-4df2-b221-2e56c5549ecd/d34949bd125a2b95efcd70635590038fc0030295.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.68.0/23
                IPv6:
                  2801:14:a000::/47

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61455

    Signature Algorithm: sha256WithRSAEncryption
         b5:47:3d:24:19:12:4a:50:30:b2:29:38:ef:1a:be:3f:2c:72:
         48:7d:8d:93:94:f2:a2:6a:7c:2a:4a:13:c2:92:ff:af:e4:12:
         7c:c8:df:d6:5a:8e:5b:b2:42:ed:1c:37:42:92:2d:f9:b6:3d:
         19:4a:31:05:8c:fb:85:38:6b:16:e7:2a:84:a1:de:a7:9e:77:
         9c:f2:c6:90:27:3b:15:55:19:91:93:1a:12:1d:73:77:c9:f2:
         13:1c:2a:0f:2a:f2:f0:f1:88:35:4c:33:a4:4c:86:51:da:00:
         0e:ff:2d:2d:c1:3a:6e:6d:04:81:80:ae:22:17:1d:05:01:1a:
         b3:d3:dc:ff:00:aa:47:b8:d6:23:b2:e0:c3:15:fe:b9:47:50:
         c5:b5:0f:c4:3e:64:7a:81:cd:a3:56:09:70:db:75:08:69:6c:
         31:d0:93:17:88:85:9e:4b:3b:1c:c9:51:e9:35:cc:45:2a:df:
         ff:cc:3f:80:a2:39:de:48:c6:2f:64:22:73:0e:7e:78:73:12:
         9e:d3:ca:1b:8b:e8:0f:9d:2e:ef:b8:7e:ec:e1:38:74:cb:ae:
         54:f4:43:9f:c0:49:b7:97:23:4a:32:cc:33:64:60:b1:07:bf:
         5a:eb:1d:91:c7:cc:de:aa:3c:c7:06:f7:fb:63:cd:a7:55:b8:
         03:3d:26:43
-----BEGIN CERTIFICATE-----
MIIF3DCCBMSgAwIBAgIEAOQcIzANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIwMTAxOTE5MTUwNVoXDTI0MDUwNzE4NDg0
NlowMzExMC8GA1UEAxMoZDM0OTQ5YmQxMjVhMmI5NWVmY2Q3MDYzNTU5MDAzOGZj
MDAzMDI5NTCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJKasqXKLD0B
YX4QBegl7KbNp7RNOBnUVK3mCLrKYRO9JTZvJb3cQWo9MDQOVYJwIqZ/nPvyOqye
qGIl/EoWIznpX1XJIut2zFcexj2HeK8pdYB0Qo64IMXF66kiAKpuA/x18gDMclPQ
zRxEy6LLo4yzLLTUmxhZ0ux/lGToFZAhQcm5hxz6NxpCtIztwWU6yAxVj+BnRN8W
Kj8oCi4fhOH9ThSnVQnSsZbrJyK0OvwNOIe5KXN2cIUKHVbbC0YtB2/pw+kcIUuS
iCq5aeuLPaa1B6XovqOMbNrQewa6wfTe6dFiU4FR+s7I+8rFO0p0xEh9nMbDBJCi
37Cf4Rfv750CAwEAAaOCAwswggMHMB0GA1UdDgQWBBS8AX3++Y1aeHoBv+olr02+
5Js93jAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9iNWEzOGQ0YS04OThm
LTRkZjItYjIyMS0yZTU2YzU1NDllY2QvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvYjVhMzhkNGEtODk4Zi00
ZGYyLWIyMjEtMmU1NmM1NTQ5ZWNkL2QzNDk0OWJkMTI1YTJiOTVlZmNkNzA2MzU1
OTAwMzhmYzAwMzAyOTUubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAw
BggrBgEFBQcBBwEB/wQhMB8wDAQCAAEwBgMEAcgARDAPBAIAAjAJAwcBKAEAFKAA
MBoGCCsGAQUFBwEIAQH/BAswCaAHMAUCAwDwDzANBgkqhkiG9w0BAQsFAAOCAQEA
tUc9JBkSSlAwsik47xq+PyxySH2Nk5Tyomp8KkoTwpL/r+QSfMjf1lqOW7JC7Rw3
QpIt+bY9GUoxBYz7hThrFucqhKHep553nPLGkCc7FVUZkZMaEh1zd8nyExwqDyry
8PGINUwzpEyGUdoADv8tLcE6bm0EgYCuIhcdBQEas9Pc/wCqR7jWI7LgwxX+uUdQ
xbUPxD5keoHNo1YJcNt1CGlsMdCTF4iFnks7HMlR6TXMRSrf/8w/gKI53kjGL2Qi
cw5+eHMSntPKG4voD50u77h+7OE4dMuuVPRDn8BJt5cjSjLMM2RgsQe/WusdkcfM
3qo8xwb3+2PNp1W4Az0mQw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org