Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dde8c4431eccff427c82795998c2e957725b89e9.cer
File:                     dde8c4431eccff427c82795998c2e957725b89e9.cer (raw, json)
Hash identifier:          swPHJi1PNUtsprcDNjqMK7g+SDPlVI/gxSq1mwwBvMM=
Subject key identifier:   AB:32:C4:DE:BA:62:CB:C0:9C:67:63:48:19:D4:44:1B:B4:C3:8C:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E84892
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/dde8c4431eccff427c82795998c2e957725b89e9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 22:58:18 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 200.10.140.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15222930 (0xe84892)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 22:58:18 2023 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=dde8c4431eccff427c82795998c2e957725b89e9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fa:f4:32:a1:80:e8:85:a2:fc:f0:b1:b0:12:
                    f9:c8:8d:f0:7e:71:6b:dd:e5:af:ac:ef:e6:24:34:
                    a5:cb:97:9e:f4:6e:58:45:c4:28:45:06:15:6a:0e:
                    59:50:72:d7:40:8d:ed:71:5d:42:9d:4a:f2:9d:99:
                    62:f7:06:c2:03:a9:ef:a8:f6:4d:1a:77:c1:00:5f:
                    fd:e7:c7:89:06:18:e7:05:6b:e6:5d:7c:8e:99:b2:
                    50:e1:ae:d0:ee:a8:e8:61:a0:e6:a4:05:a7:a5:d2:
                    15:37:21:0c:9d:9e:12:2d:fc:e8:55:e9:ff:c8:bd:
                    af:59:77:74:14:af:8f:2a:a9:4c:92:46:05:47:8f:
                    49:31:df:61:43:ff:43:c8:23:07:9d:44:4e:69:73:
                    f9:fb:61:69:04:da:0e:34:3f:fe:e7:ad:93:b9:10:
                    29:65:b8:7d:ac:ca:88:b5:fe:a3:06:31:ef:a5:74:
                    f8:59:e9:5c:82:68:df:52:bf:e9:b5:4c:0f:ac:c2:
                    ad:ca:61:b0:39:09:f4:71:ba:69:c0:24:d8:d1:e5:
                    d4:13:5b:71:53:21:cd:66:d8:3d:21:98:0c:96:61:
                    7f:35:03:04:9b:ae:29:76:6d:ff:ac:d6:61:45:c4:
                    4b:10:37:43:62:eb:74:0e:c1:79:2c:a2:f9:66:22:
                    dc:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:32:C4:DE:BA:62:CB:C0:9C:67:63:48:19:D4:44:1B:B4:C3:8C:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/79997c08-b037-4667-9c12-c6e0a0f3de54/dde8c4431eccff427c82795998c2e957725b89e9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.10.140.0/24

    Signature Algorithm: sha256WithRSAEncryption
         25:42:5f:dd:e8:1a:08:f0:19:d3:75:44:cf:c7:9f:84:5a:a1:
         96:1f:d7:0b:5a:6c:48:c1:a9:df:08:cc:2f:13:d5:b9:fc:99:
         c5:49:89:5f:a5:7d:03:98:a9:ab:a3:b0:5e:65:d7:74:b8:8e:
         9f:bb:d5:9a:a5:52:8c:02:30:db:a9:05:ca:ba:52:dd:88:81:
         18:09:0b:47:f7:98:ef:48:b8:24:b2:66:fd:b0:57:fa:f9:8f:
         94:db:fd:09:b8:42:80:be:64:27:ce:22:83:66:0d:8a:c5:83:
         ce:c3:cc:58:04:3f:77:90:4f:ec:16:60:53:9e:b8:9a:b3:65:
         ac:18:f2:65:75:44:c5:7e:88:ae:0b:f6:19:d2:66:0d:a8:53:
         a9:71:01:63:53:19:64:2f:b6:b1:59:e7:cc:7d:b9:12:a7:b0:
         7a:3a:d3:b5:a2:f8:9c:93:69:a8:3c:20:95:67:a4:15:a2:47:
         3f:ed:3a:6e:c2:5c:10:18:0a:c3:6a:d5:9d:8c:a2:4f:4b:bf:
         9a:c4:68:00:db:61:c9:9a:ee:5b:eb:55:70:ff:bb:f3:6e:9c:
         bc:a4:43:df:5b:bd:81:4d:c7:3f:fe:d7:e6:c1:49:2a:57:53:
         91:fa:9b:cc:52:62:98:ca:65:01:81:c1:4f:ec:72:6b:8d:e4:
         03:6c:4f:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:29 2024 by rpki-client on console-ams.rpki-client.org