Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb.cer
File:                     e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb.cer (raw, json)
Hash identifier:          7ebZTcjYYa2FnvVP+pkD7vnSr9BBNa+VRiwFor7MhxY=
Subject key identifier:   06:E5:C1:F1:E1:D1:08:A5:93:47:BE:A9:83:25:8D:B8:EA:43:19:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D6ED10
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8befd240-ab40-48b2-843f-b47834f3571f/e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8befd240-ab40-48b2-843f-b47834f3571f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 09 Nov 2022 20:53:14 +0000
Certificate not after:    Tue 09 Jul 2024 06:00:00 +0000
Subordinate resources:    IP: 2801:14:d800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14085392 (0xd6ed10)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  9 20:53:14 2022 GMT
            Not After : Jul  9 06:00:00 2024 GMT
        Subject: CN=e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:87:df:9b:e8:71:a4:72:45:3e:ff:32:6b:bd:
                    0a:9d:af:24:a2:38:2a:a5:c4:4e:ad:a9:d1:e0:32:
                    1d:83:a3:6d:90:bd:bd:1d:6e:8d:7d:78:d3:c2:26:
                    6d:80:b1:8f:df:15:e3:97:01:12:82:58:e0:f5:1d:
                    d5:ce:68:6d:e2:36:3e:6e:65:34:8d:72:c5:4b:c0:
                    a8:7c:bf:40:36:41:0f:92:12:7e:16:4f:c9:c7:cf:
                    72:af:bd:30:9c:6f:a3:26:04:d6:40:4d:35:9a:1c:
                    b6:4e:88:f5:1d:7b:bc:ae:38:6c:03:5f:8d:10:d5:
                    92:99:04:8c:9a:ea:d8:cc:ef:d8:e4:f5:4d:80:9e:
                    b5:64:c3:58:1b:43:9e:28:7d:ba:ff:6b:1a:ce:7f:
                    89:6e:b3:05:cb:93:d7:e9:49:8d:d7:3c:a5:73:d4:
                    4f:4c:12:bf:04:37:23:d3:4a:d4:b6:1b:c8:05:ab:
                    cb:24:5a:b6:67:37:ad:81:40:ff:42:a1:35:2c:d5:
                    ca:12:f4:12:6f:0d:c3:40:b8:21:d2:8e:55:30:fe:
                    1c:1d:e6:41:1f:8a:4b:6d:8f:1f:07:df:0a:41:4e:
                    33:5b:4b:ce:aa:74:06:b0:a9:c0:51:37:ef:93:c8:
                    4e:24:39:54:e2:e7:3f:08:15:35:02:a1:fa:f2:66:
                    94:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:E5:C1:F1:E1:D1:08:A5:93:47:BE:A9:83:25:8D:B8:EA:43:19:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8befd240-ab40-48b2-843f-b47834f3571f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8befd240-ab40-48b2-843f-b47834f3571f/e4fbc98ff762e8a6fa8db401739c63d30ff8a1cb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:14:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         95:a7:20:b8:77:02:23:3b:20:22:14:b4:90:17:47:da:18:de:
         38:f7:23:e7:0f:6c:a6:6c:cf:61:1a:01:92:d9:d3:e1:79:0b:
         09:ca:69:76:c2:19:35:cb:7b:54:63:a4:a4:25:0b:ce:fb:7d:
         3b:8b:e6:ea:bd:5c:72:fb:88:f4:79:ae:bd:4d:de:b4:6f:aa:
         25:d5:76:25:47:30:93:21:11:18:c8:e5:52:3b:b4:ba:ce:cd:
         a9:ba:9d:dc:cc:3c:05:96:e3:f8:50:74:13:84:17:11:65:16:
         0f:a0:9f:38:ad:4f:6f:6f:7e:16:5f:33:b7:d6:0b:36:fa:4d:
         83:8e:20:5f:09:80:b9:04:64:8c:5e:e5:c8:d3:f7:da:70:18:
         3d:dd:7e:46:d4:36:65:d0:8f:d0:ab:e1:4b:87:ed:1a:38:69:
         49:8a:a6:d6:4c:e9:65:6d:8a:63:4d:13:8a:a1:93:ba:e9:b3:
         7f:02:07:1d:4a:1b:7f:1b:c3:90:8e:f5:36:d0:d5:81:62:d5:
         a5:aa:2d:be:37:d3:46:a0:fb:12:2f:69:2b:3b:9d:a1:9d:4a:
         98:a9:38:c6:f5:80:22:92:07:23:59:6f:a1:5f:6a:3f:5b:73:
         7b:1b:0b:98:71:5d:d6:86:9c:b1:c9:0a:e4:2d:60:af:d5:cb:
         a7:ab:0d:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:30 2024 by rpki-client on console-ams.rpki-client.org