Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d9b20b583befa0ff931cab41c33d390679dccd2b.cer
File:                     d9b20b583befa0ff931cab41c33d390679dccd2b.cer (raw, json)
Hash identifier:          anTxi1yPsNW/TDnGyFFV9ZqJ/th8SfejEWwLhAVTwOo=
Subject key identifier:   98:71:A2:90:9E:DF:1D:C1:54:C7:1D:77:6D:F6:3B:41:D1:CB:2C:65
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFFFC8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d44e84a2-798c-4a85-ae66-1abc97205a61/d9b20b583befa0ff931cab41c33d390679dccd2b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d44e84a2-798c-4a85-ae66-1abc97205a61/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Nov 2023 22:39:55 +0000
Certificate not after:    Fri 06 Sep 2024 05:00:00 +0000
Subordinate resources:    AS: 64102
                          IP: 144.22.0.0/15
                          IP: 198.49.164.0/24
                          IP: 200.9.209.0 -- 200.9.211.255
                          IP: 200.10.145.0/24
                          IP: 2801:1::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16777160 (0xffffc8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  1 22:39:55 2023 GMT
            Not After : Sep  6 05:00:00 2024 GMT
        Subject: CN=d9b20b583befa0ff931cab41c33d390679dccd2b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:61:6b:af:4b:3c:e2:1b:cc:b7:34:77:10:98:
                    3c:3b:b8:77:8e:58:9a:1f:e8:7a:d8:fa:df:0d:85:
                    6d:4f:d8:c8:a8:71:c3:97:00:67:84:79:68:47:fb:
                    ac:a0:fb:5e:75:23:e5:ca:70:fd:73:b7:c8:d8:b0:
                    ba:f7:6f:9c:89:83:bd:8f:55:62:4f:df:70:83:7b:
                    00:75:db:1e:a0:e1:56:d2:89:b5:75:d4:ac:83:24:
                    56:ba:61:ca:c2:94:73:b0:16:06:73:d1:79:d6:c3:
                    8d:ae:e4:d8:27:30:06:8d:e7:23:bc:26:fc:3c:f6:
                    92:fe:c7:77:bb:20:25:06:7a:d3:87:8c:70:41:e7:
                    32:41:96:aa:ca:51:38:0c:6f:35:56:fa:d7:53:c7:
                    7c:12:03:9f:3d:53:95:64:40:71:be:58:b6:a3:a3:
                    50:17:11:37:26:d2:3a:9a:80:29:4c:ea:50:f1:6d:
                    ce:7a:09:eb:b6:5c:bc:a9:eb:68:f1:4f:84:8e:73:
                    44:e0:aa:45:7d:5a:62:0b:26:ab:f3:84:87:cc:e1:
                    ac:aa:26:21:3f:b2:8a:08:58:ac:c7:01:64:ee:a9:
                    e7:ec:12:c7:01:93:52:43:55:95:2f:bf:c1:8a:99:
                    40:11:b4:34:1d:a1:ac:3a:d9:05:94:38:70:db:09:
                    94:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:71:A2:90:9E:DF:1D:C1:54:C7:1D:77:6D:F6:3B:41:D1:CB:2C:65
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d44e84a2-798c-4a85-ae66-1abc97205a61/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d44e84a2-798c-4a85-ae66-1abc97205a61/d9b20b583befa0ff931cab41c33d390679dccd2b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  144.22.0.0/15
                  198.49.164.0/24
                  200.9.209.0-200.9.211.255
                  200.10.145.0/24
                IPv6:
                  2801:1::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64102

    Signature Algorithm: sha256WithRSAEncryption
         0b:aa:d1:a5:e3:aa:e2:b5:fd:59:fc:ed:7d:26:e3:48:b5:e1:
         57:32:33:53:2d:88:d0:12:a9:73:7b:0a:ea:9b:d2:ae:c7:83:
         f2:25:83:4b:cb:8d:14:dd:34:f4:2a:a2:9e:02:cf:75:58:92:
         0e:e6:7e:dd:3e:24:68:53:b8:82:36:60:5c:c3:4d:a4:17:24:
         c5:11:98:4b:a1:ff:40:f5:ca:9c:e4:85:9a:7b:df:91:cf:03:
         8f:88:1b:d1:58:8a:2a:f2:c3:20:cf:f5:08:44:d5:0e:8f:0e:
         e3:6f:f9:4f:3e:9d:0c:6b:6d:93:a2:2d:ed:31:6c:b5:52:eb:
         d9:94:50:43:31:01:b6:35:ea:a7:bb:c2:01:d7:23:43:1b:cc:
         d1:26:58:d7:05:d5:54:13:a1:3c:b1:b9:a7:60:1c:1c:6e:ff:
         03:15:40:b7:bd:0d:0f:5b:4b:05:18:8b:ae:70:eb:ae:f6:1f:
         0e:c8:a7:4e:5a:a7:fc:fe:28:3e:5e:98:07:a4:4a:97:76:3f:
         15:53:ca:45:a8:dd:b7:1e:5f:b6:71:c9:31:71:d2:e3:f5:a8:
         1f:73:8b:bd:ea:c8:85:9f:04:d8:f5:13:88:24:01:f7:83:6a:
         d0:53:80:a3:39:79:4e:be:81:c7:2e:da:54:69:52:ed:ca:44:
         cc:c6:24:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org