Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e66f1959f20f7534c22d8e9a105154285d448eab.cer
File:                     e66f1959f20f7534c22d8e9a105154285d448eab.cer (raw, json)
Hash identifier:          pABa2ccd3ZjpO9QvxsW4YGP+E615I9YqLH3Krhp6TQ0=
Subject key identifier:   05:B6:B5:73:C0:95:AD:F9:93:3B:8A:36:EA:49:A1:E1:A6:38:A2:A9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108B215
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fbdd0c1b-1ef1-491a-aac1-40d8798dc415/e66f1959f20f7534c22d8e9a105154285d448eab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fbdd0c1b-1ef1-491a-aac1-40d8798dc415/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 15:55:13 +0000
Certificate not after:    Mon 06 Jan 2025 05:00:00 +0000
Subordinate resources:    IP: 146.164.0.0/16
                          IP: 192.80.209.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17347093 (0x108b215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 29 15:55:13 2024 GMT
            Not After : Jan  6 05:00:00 2025 GMT
        Subject: CN=e66f1959f20f7534c22d8e9a105154285d448eab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:1f:a4:62:6f:eb:b6:a8:27:f2:99:fd:8d:fc:
                    c1:e5:4f:c4:e6:06:b6:95:00:a1:76:dd:09:67:69:
                    e7:1a:3d:a9:8c:e8:c2:d5:5a:60:31:9f:59:fa:9d:
                    ba:bc:d3:bd:fa:09:cf:93:f4:13:72:45:ac:79:e6:
                    85:c0:b3:1d:21:f9:65:64:e0:ef:3f:ff:a9:84:dd:
                    32:fb:74:33:4e:47:a1:fd:e3:87:7b:e1:bf:a3:09:
                    a6:13:db:d2:cf:2d:57:d3:da:2e:85:5d:60:dc:67:
                    e8:2b:e6:9d:82:e8:b1:5a:dc:50:7f:14:05:09:85:
                    26:0c:4e:c5:34:71:8f:8c:c9:98:ea:cc:a9:f6:ad:
                    c9:4d:e8:6e:e0:a5:f3:ba:f3:ff:ca:5b:be:d7:07:
                    d9:5f:c2:90:96:ce:1f:08:bc:0b:23:9b:fb:19:5d:
                    9b:77:54:82:d8:49:d0:5e:3e:54:c1:9d:34:f3:fe:
                    50:8c:73:ef:1b:ba:1f:9e:b1:c7:7c:16:65:bc:f7:
                    4f:66:e6:11:cc:9e:5c:73:d3:9f:4a:a0:40:c1:fb:
                    7c:94:d5:d9:22:f7:75:2b:f5:ad:bf:b8:40:72:56:
                    a3:8e:9a:f6:e0:c8:a7:f0:18:ea:60:b6:1d:66:85:
                    48:69:d1:51:f1:4c:ac:b9:9d:73:6d:71:22:e0:cd:
                    35:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:B6:B5:73:C0:95:AD:F9:93:3B:8A:36:EA:49:A1:E1:A6:38:A2:A9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fbdd0c1b-1ef1-491a-aac1-40d8798dc415/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fbdd0c1b-1ef1-491a-aac1-40d8798dc415/e66f1959f20f7534c22d8e9a105154285d448eab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  146.164.0.0/16
                  192.80.209.0/24

    Signature Algorithm: sha256WithRSAEncryption
         80:d4:c0:10:6c:62:76:9a:d6:c9:66:37:6c:93:83:43:8e:c3:
         d5:b0:65:fa:20:3e:a7:bd:93:e2:f1:b4:07:c9:fa:50:a1:b5:
         78:56:5d:2f:a2:ec:4a:0f:f8:7a:c2:21:d8:57:9c:51:8f:37:
         72:bb:26:ca:94:d8:91:f6:6f:06:9e:dc:b6:8a:19:66:3c:2a:
         3f:2b:f1:5e:d8:30:5d:ff:20:a7:1f:01:db:bc:24:ec:4b:37:
         77:41:d9:8f:0b:8d:9e:ae:a3:68:36:97:ad:7d:0f:08:9b:08:
         94:79:d3:e5:95:0e:8a:35:84:4f:ce:b2:de:da:a5:04:a7:ac:
         7e:8a:f9:9f:92:7e:fc:21:fd:5b:5e:c0:38:f4:d1:57:23:09:
         b2:d6:60:97:64:3b:96:f3:f6:60:78:d2:cb:24:42:7f:c6:a4:
         6d:7c:04:90:93:40:e7:3c:c4:70:f6:7d:48:11:5e:99:ee:12:
         a9:b8:57:5f:13:35:36:d7:03:ee:c6:21:81:36:c4:3a:b8:f4:
         67:9a:da:de:39:86:72:16:bb:9b:e6:48:ab:4d:98:a2:2e:2d:
         db:df:ba:72:b1:49:0f:3b:ea:74:63:0f:8a:91:3d:5a:ff:b1:
         e4:05:cb:f2:c6:17:d1:d5:2c:d0:79:9f:dd:2c:00:bd:33:90:
         5d:27:87:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org