Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dd58e41b009fd9e35e9ce09a6e4942100de89f17.cer
File:                     dd58e41b009fd9e35e9ce09a6e4942100de89f17.cer (raw, json)
Hash identifier:          l1ZTitzDRt95UKeJEkDhVm+TwNw/Tw8k61LM3dy0b9k=
Subject key identifier:   7A:D7:69:74:D5:E4:A6:7E:04:7D:6B:C1:76:D4:A6:D8:36:B4:F1:D8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB8CE1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/37ac7a29-f48b-40cd-aa02-995ed7fa05e6/dd58e41b009fd9e35e9ce09a6e4942100de89f17.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/37ac7a29-f48b-40cd-aa02-995ed7fa05e6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 15 Feb 2019 13:06:27 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.6.14.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16485601 (0xfb8ce1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 15 13:06:27 2019 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=dd58e41b009fd9e35e9ce09a6e4942100de89f17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:27:37:3f:b1:e5:ae:07:f6:ac:1e:be:4e:66:
                    1e:58:4a:54:05:f5:09:37:32:4c:39:7d:d5:90:26:
                    90:d3:bc:27:99:95:8b:9d:b5:03:90:d3:3a:7d:cc:
                    51:31:e6:39:0b:ae:19:24:8e:e1:2b:93:e3:da:55:
                    4c:61:62:49:26:3a:73:21:08:92:aa:f5:e2:de:7f:
                    05:ef:69:ed:92:13:1d:98:dc:98:7b:01:e8:d0:f8:
                    10:77:c7:5a:6d:b8:33:9d:7a:dc:d5:51:95:31:80:
                    a7:84:30:76:1c:61:5c:9b:90:14:7e:55:32:46:62:
                    5b:dc:a8:b1:b7:b9:cc:8b:57:8b:ae:32:90:1c:86:
                    72:4c:1b:fa:8c:dd:10:b1:f2:5d:95:df:db:8b:65:
                    27:e7:6a:92:11:fc:bb:8b:ad:2e:0b:d6:06:9e:d9:
                    ca:e7:cc:55:ea:a0:53:9e:ab:e9:ed:cd:97:eb:ce:
                    03:89:8d:e4:f5:70:34:11:cc:6d:b3:10:0f:f6:68:
                    e1:a8:68:9c:99:a9:06:c2:71:cf:66:9a:ca:95:88:
                    2b:84:8a:5d:83:a3:fb:ba:fe:0c:04:15:01:66:8e:
                    f8:82:92:3b:5d:32:73:be:45:46:f0:94:8b:79:fe:
                    ee:b9:16:e0:07:50:73:df:eb:b6:5c:60:7b:d5:f9:
                    9f:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:D7:69:74:D5:E4:A6:7E:04:7D:6B:C1:76:D4:A6:D8:36:B4:F1:D8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/37ac7a29-f48b-40cd-aa02-995ed7fa05e6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/37ac7a29-f48b-40cd-aa02-995ed7fa05e6/dd58e41b009fd9e35e9ce09a6e4942100de89f17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.6.14.0/24

    Signature Algorithm: sha256WithRSAEncryption
         a1:a3:54:e9:59:c0:c8:e6:eb:5a:06:a9:5a:3d:48:2e:1a:69:
         a0:c8:d7:f6:66:32:fe:ef:61:71:9f:68:0d:69:a7:d1:42:e6:
         8c:16:6e:fc:d8:50:b6:5a:8b:38:ef:04:6a:6c:d2:63:8a:1f:
         13:59:d4:05:da:9f:24:19:f0:42:20:39:de:9c:f9:2d:90:88:
         e7:79:3f:64:86:a6:ee:8c:5f:de:40:61:ce:ac:7f:ed:32:4f:
         55:f2:a4:3b:8a:d0:7e:b9:e4:4a:ca:fb:ec:34:5f:84:e2:14:
         0d:95:7b:8c:15:2d:e3:d2:af:0c:a1:00:a2:f7:ec:21:6a:b6:
         87:cc:5f:e1:9e:fa:2a:44:84:1e:17:06:e9:d0:79:5b:03:3c:
         e9:36:b8:4c:fa:ac:36:01:ca:38:eb:1a:87:81:6f:ee:76:8e:
         09:b3:bf:ba:10:28:1f:f2:68:ae:b5:66:50:52:3b:c3:cb:83:
         80:6f:ca:5a:39:97:e2:88:54:ce:60:84:c5:d5:ce:8f:7a:cc:
         11:47:13:de:c5:16:3b:f6:e0:b5:b4:59:38:17:f6:87:be:2d:
         15:37:0c:f7:b6:c3:17:ba:d8:26:e6:6a:bd:22:0f:ae:05:80:
         e6:a8:dc:49:13:63:ea:0a:88:ae:23:ed:b9:d1:79:ac:63:c0:
         73:37:8c:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org