Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dcb64d54343b10350dc7c0a73f06b0cec071b5be.cer
File:                     dcb64d54343b10350dc7c0a73f06b0cec071b5be.cer (raw, json)
Hash identifier:          w2++YwJzOdOnE98cftKf86xNM5K/gfpbaT3Spk2/HrY=
Subject key identifier:   7D:74:A8:F6:49:F6:C3:C2:C3:54:FF:29:7F:B6:B9:FE:A4:AF:E7:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01027F8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/dcb64d54343b10350dc7c0a73f06b0cec071b5be.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Jan 2021 02:25:03 +0000
Certificate not after:    Tue 01 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 28456
                          AS: 28474
                          IP: 192.100.178.0/24
                          IP: 200.23.24.0 -- 200.23.28.255
                          IP: 2801:c4:a5::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16940939 (0x1027f8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 13 02:25:03 2021 GMT
            Not After : Oct  1 05:00:00 2024 GMT
        Subject: CN=dcb64d54343b10350dc7c0a73f06b0cec071b5be
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:b5:1a:09:cf:4b:22:e6:f3:52:e2:ae:e1:91:
                    40:92:6e:bd:37:48:b5:59:02:c5:86:af:04:79:fa:
                    a4:18:7a:03:79:68:f7:0f:00:b4:6b:6f:cf:74:13:
                    29:dd:23:86:4a:8b:f7:ee:52:2a:c6:1d:45:13:ae:
                    d0:f9:4a:8f:ae:af:24:26:c4:c3:3b:02:43:b9:c5:
                    16:2e:aa:70:ad:e8:bb:a4:fe:67:4b:11:12:e2:f0:
                    a0:a7:f6:a2:57:99:ea:95:86:be:b4:74:19:18:1f:
                    dc:c1:0e:62:69:2f:02:e7:af:ed:a3:e1:e4:77:35:
                    02:bd:4f:97:04:30:6a:eb:70:41:fa:75:28:eb:de:
                    a7:3d:3c:da:1f:e0:31:82:43:9c:0d:55:9e:1a:cc:
                    48:ed:07:11:a3:ab:81:b3:94:0b:f8:9f:ad:26:2a:
                    3b:72:27:0f:b5:4d:a8:2d:20:d5:fa:78:51:a9:97:
                    c6:0c:35:99:82:ff:31:d4:f0:c7:55:9b:54:c9:14:
                    65:75:6a:56:43:c7:45:7a:20:4b:83:8b:77:ac:13:
                    11:dd:88:ba:9f:3c:db:b1:70:d9:0c:99:9f:c2:fd:
                    3c:e6:c0:47:24:16:a9:c5:3b:13:fd:c9:b7:61:04:
                    a6:56:22:c3:d7:8c:56:90:2f:6b:71:b4:b7:68:b3:
                    23:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:74:A8:F6:49:F6:C3:C2:C3:54:FF:29:7F:B6:B9:FE:A4:AF:E7:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4711b587-d968-4583-a00a-7a779f4d68a1/dcb64d54343b10350dc7c0a73f06b0cec071b5be.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.178.0/24
                  200.23.24.0-200.23.28.255
                IPv6:
                  2801:c4:a5::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28456
                  28474

    Signature Algorithm: sha256WithRSAEncryption
         7a:17:91:2b:9f:93:9d:1e:ea:13:21:e6:16:3e:34:7b:1e:4c:
         51:d7:1f:d2:5b:86:12:b7:ba:76:4a:25:54:34:c2:a2:94:44:
         6b:32:52:1a:95:34:9e:db:b6:b6:cc:21:9d:b2:7c:16:73:d9:
         ac:0d:f1:06:99:4d:36:9e:ac:be:26:ce:a4:0a:4b:1a:7b:59:
         b6:12:39:ef:77:e3:73:9e:97:de:3e:42:33:36:9b:01:eb:18:
         bb:9a:24:d4:d7:03:1d:8a:26:af:75:a2:04:d4:b3:6a:ab:a2:
         0e:86:1f:e1:35:08:e8:0d:4e:fc:6e:ad:95:ce:43:d2:44:68:
         db:fb:dc:87:8a:41:0b:e0:79:9c:af:7d:bd:fd:fb:72:b9:5c:
         a9:af:4f:49:5f:c1:3f:01:5d:71:e5:3a:88:34:f7:80:7f:cc:
         bb:44:03:7a:c7:bf:d7:8a:b7:50:5b:b4:76:01:b3:52:e0:3b:
         81:86:12:ee:23:47:14:49:26:ec:fa:e0:04:d9:d2:fb:ac:cb:
         e2:85:46:25:b7:ab:8e:b7:31:84:0f:df:5c:d4:a9:42:55:a1:
         8b:93:cf:0a:4b:bd:39:9c:fc:9c:d2:8c:98:fb:a1:ee:68:a6:
         c5:3f:01:97:4a:17:12:c7:dd:0c:b3:ea:5e:b9:d6:4a:01:52:
         ab:ea:6b:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:39 2024 by rpki-client on console-fra.rpki-client.org