Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e138c8948a9ae00a7e788b3bedb67bbdffec7cf7.cer
File:                     e138c8948a9ae00a7e788b3bedb67bbdffec7cf7.cer (raw, json)
Hash identifier:          qH4CI/pkGvcqfePGNFhOfXymJGAat2ZSmc0w/s1RX70=
Subject key identifier:   66:68:09:FE:29:24:72:37:88:3E:76:3D:0E:46:FD:56:C5:A8:AD:2E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB5F49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1a42e863-e1d4-41ee-b3b7-2cae76427268/e138c8948a9ae00a7e788b3bedb67bbdffec7cf7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1a42e863-e1d4-41ee-b3b7-2cae76427268/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2018 21:10:11 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.0.144.0/23

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16473929 (0xfb5f49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  4 21:10:11 2018 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=e138c8948a9ae00a7e788b3bedb67bbdffec7cf7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:e1:f5:c8:12:3a:98:62:98:c8:98:7a:8b:92:
                    39:1c:9e:8c:db:ff:f2:a7:3d:e4:6d:68:b0:3f:85:
                    90:11:9d:c4:10:1a:e0:30:bf:69:34:01:9a:d1:cc:
                    68:19:25:f2:11:54:33:aa:c3:8a:fc:87:25:22:0d:
                    fa:6b:60:f9:4c:3b:1e:0e:40:8e:3a:1d:66:ee:b2:
                    af:36:14:3d:54:42:9d:67:de:8e:0c:76:ac:83:3d:
                    07:f8:7b:8a:10:b2:a5:aa:d5:40:f6:09:94:e0:ac:
                    d2:56:c0:8b:c3:07:45:8e:69:02:5c:29:e1:9b:ac:
                    53:9d:b6:8b:dd:ac:75:05:81:97:ea:d2:dc:98:23:
                    18:01:42:75:a1:99:51:c9:25:c7:03:f0:0d:d4:05:
                    63:0e:95:bb:ee:26:b3:46:c7:f4:32:22:ae:43:fc:
                    47:c5:7f:bb:89:47:42:2c:5e:37:c6:c7:1b:b1:da:
                    95:9f:b3:34:f3:04:39:43:d5:61:08:07:07:84:5d:
                    67:a5:8e:ee:82:01:a0:28:42:c7:71:de:7d:1d:78:
                    95:7d:30:a9:9d:41:34:15:96:fc:97:f3:a9:63:56:
                    94:d8:9c:90:32:d6:e3:69:26:3f:a1:9d:34:e7:c9:
                    94:30:01:b8:9b:3c:21:f8:2b:ea:b8:bd:48:52:ff:
                    a5:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:68:09:FE:29:24:72:37:88:3E:76:3D:0E:46:FD:56:C5:A8:AD:2E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1a42e863-e1d4-41ee-b3b7-2cae76427268/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1a42e863-e1d4-41ee-b3b7-2cae76427268/e138c8948a9ae00a7e788b3bedb67bbdffec7cf7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.144.0/23

    Signature Algorithm: sha256WithRSAEncryption
         3f:29:aa:c9:0d:78:18:d7:e9:c7:3c:62:19:fb:7e:df:a0:0a:
         11:a9:af:6a:d6:a1:e9:3e:fc:a7:dc:42:da:d0:b4:df:89:6b:
         12:a3:12:8d:98:ec:f9:10:da:a4:a7:95:bc:d3:9f:f9:9c:23:
         43:50:69:54:67:56:aa:c7:f2:0b:d0:e1:23:70:47:87:a9:c4:
         3a:53:ab:15:d1:c8:7c:fb:d1:2b:44:fb:24:a4:31:9f:f9:2c:
         84:7d:31:d1:cc:ac:47:94:83:8f:ac:a8:ab:08:7d:d5:74:80:
         cb:71:71:e7:02:b1:a8:a5:28:c2:cb:e4:ec:bb:1e:d6:15:25:
         90:9a:d6:ea:3b:45:c4:ba:8f:44:21:3e:a0:90:dc:9e:ad:95:
         c7:6f:ba:f9:93:ac:8a:c8:7c:90:d6:8b:60:e0:b8:45:de:5d:
         6a:2a:b9:23:c6:1c:51:1b:eb:98:f6:a4:5e:aa:cd:75:d6:6a:
         c8:53:15:bb:eb:90:b3:61:1f:a6:61:3a:c3:42:dd:8b:bd:b4:
         b4:87:b7:b1:8b:5a:5b:75:8f:8f:77:87:58:6d:7c:fa:21:4c:
         6b:a7:01:f9:9b:77:07:b4:91:e1:bc:52:6c:23:ca:94:af:07:
         3a:9d:80:d4:5c:c0:70:dc:aa:94:c7:02:6d:54:43:af:ef:59:
         66:5a:8f:63
-----BEGIN CERTIFICATE-----
MIIFrzCCBJegAwIBAgIEAPtfSTANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTE4MDEwNDIxMTAxMVoXDTI0MTEwMTE0MDAw
MFowMzExMC8GA1UEAxMoZTEzOGM4OTQ4YTlhZTAwYTdlNzg4YjNiZWRiNjdiYmRm
ZmVjN2NmNzCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAJ/h9cgSOphi
mMiYeouSORyejNv/8qc95G1osD+FkBGdxBAa4DC/aTQBmtHMaBkl8hFUM6rDivyH
JSIN+mtg+Uw7Hg5AjjodZu6yrzYUPVRCnWfejgx2rIM9B/h7ihCyparVQPYJlOCs
0lbAi8MHRY5pAlwp4ZusU522i92sdQWBl+rS3JgjGAFCdaGZUcklxwPwDdQFYw6V
u+4ms0bH9DIirkP8R8V/u4lHQixeN8bHG7HalZ+zNPMEOUPVYQgHB4RdZ6WO7oIB
oChCx3HefR14lX0wqZ1BNBWW/JfzqWNWlNickDLW42kmP6GdNOfJlDABuJs8Ifgr
6ri9SFL/pdkCAwEAAaOCAt4wggLaMB0GA1UdDgQWBBRmaAn+KSRyN4g+dj0ORv1W
xaitLjAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy8xYTQyZTg2My1lMWQ0
LTQxZWUtYjNiNy0yY2FlNzY0MjcyNjgvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvMWE0MmU4NjMtZTFkNC00
MWVlLWIzYjctMmNhZTc2NDI3MjY4L2UxMzhjODk0OGE5YWUwMGE3ZTc4OGIzYmVk
YjY3YmJkZmZlYzdjZjcubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAf
BggrBgEFBQcBBwEB/wQQMA4wDAQCAAEwBgMEAcgAkDANBgkqhkiG9w0BAQsFAAOC
AQEAPymqyQ14GNfpxzxiGft+36AKEamvatah6T78p9xC2tC034lrEqMSjZjs+RDa
pKeVvNOf+ZwjQ1BpVGdWqsfyC9DhI3BHh6nEOlOrFdHIfPvRK0T7JKQxn/kshH0x
0cysR5SDj6yoqwh91XSAy3Fx5wKxqKUowsvk7Lse1hUlkJrW6jtFxLqPRCE+oJDc
nq2Vx2+6+ZOsish8kNaLYOC4Rd5daiq5I8YcURvrmPakXqrNddZqyFMVu+uQs2Ef
pmE6w0Ldi720tIe3sYtaW3WPj3eHWG18+iFMa6cB+Zt3B7SR4bxSbCPKlK8HOp2A
1FzAcNyqlMcCbVRDr+9ZZlqPYw==
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:36 2024 by rpki-client on console-ams.rpki-client.org