Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb92d8677fc5f214f7e531f0c7bf96ba2b6dc432.cer
File:                     eb92d8677fc5f214f7e531f0c7bf96ba2b6dc432.cer (raw, json)
Hash identifier:          jRXU6dFZyFYTTORZ/XmozdewpYqlNAgen/KQJqz4Tow=
Subject key identifier:   88:BE:C6:8B:D2:EE:34:F6:13:F5:6A:2E:F8:ED:07:12:C8:92:3B:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7200C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/439ae05f-ae99-43cf-aaf6-1eafd3b2402a/eb92d8677fc5f214f7e531f0c7bf96ba2b6dc432.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/439ae05f-ae99-43cf-aaf6-1eafd3b2402a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 23:59:27 +0000
Certificate not after:    Wed 06 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 28078
                          IP: 190.102.96.0/22
                          IP: 190.102.112.0/21
                          IP: 190.124.40.0/22
                          IP: 2803:d000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15147020 (0xe7200c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 23:59:27 2023 GMT
            Not After : Nov  6 04:00:00 2024 GMT
        Subject: CN=eb92d8677fc5f214f7e531f0c7bf96ba2b6dc432
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:41:ba:20:51:73:2e:ca:3d:a0:de:c2:5d:10:
                    3b:49:24:26:b8:5c:85:0f:d4:27:3f:47:4d:6f:31:
                    c7:fe:3d:1b:9b:fc:f8:2f:ce:0c:f6:f3:0c:37:77:
                    a9:e0:61:4c:6d:4c:a8:23:52:5a:5e:f7:38:af:73:
                    d8:cc:f5:4a:70:68:65:7b:b5:18:c9:c5:37:91:f9:
                    d7:52:e7:14:13:ce:1b:2f:af:00:24:68:38:5e:ec:
                    db:bc:75:a5:23:ed:a2:0e:2f:af:af:a1:3b:96:40:
                    2d:3b:3e:be:b3:c4:ae:6d:ba:2b:c5:cc:2a:11:9b:
                    36:0f:4c:73:8e:82:12:68:da:3f:c9:9e:fb:e6:25:
                    30:7c:b9:bf:86:73:85:25:71:25:5b:a2:79:e4:3a:
                    66:bb:68:c3:13:cc:97:96:ff:97:63:d9:2e:6b:6b:
                    73:df:61:44:4f:bf:63:36:35:05:25:55:b1:fd:25:
                    92:0d:71:fd:79:9b:14:09:95:c0:71:ae:5e:98:01:
                    d8:f0:3c:e9:45:00:e9:50:5c:c4:cb:aa:17:77:19:
                    d2:8a:5e:53:fb:df:ee:04:67:f7:d8:cf:00:b3:4d:
                    b4:a2:c6:82:38:91:49:68:d0:e7:cf:3e:69:85:d3:
                    59:44:3d:3f:8e:fd:64:d6:37:c8:c1:36:5f:f5:1e:
                    c3:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:BE:C6:8B:D2:EE:34:F6:13:F5:6A:2E:F8:ED:07:12:C8:92:3B:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/439ae05f-ae99-43cf-aaf6-1eafd3b2402a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/439ae05f-ae99-43cf-aaf6-1eafd3b2402a/eb92d8677fc5f214f7e531f0c7bf96ba2b6dc432.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.102.96.0/22
                  190.102.112.0/21
                  190.124.40.0/22
                IPv6:
                  2803:d000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28078

    Signature Algorithm: sha256WithRSAEncryption
         30:4e:18:55:f7:75:18:b1:9b:ae:5c:44:4a:9e:c0:6f:12:0c:
         7d:57:b4:a7:8f:8d:90:cc:8e:57:c6:d5:b4:33:9c:17:a2:49:
         8d:b9:ed:91:60:4a:53:e3:04:73:b7:5d:99:0f:7a:5c:b4:ef:
         ff:b2:a7:51:bb:31:61:1a:2f:c1:4e:d7:d8:56:31:cf:d0:0a:
         85:86:5d:ea:29:82:a9:0c:b7:a5:82:ff:89:62:ed:41:e2:5b:
         5a:a6:82:36:a4:e0:6b:67:74:cb:11:74:c5:bb:77:e3:8f:19:
         bf:2c:17:94:bf:79:1b:41:56:e5:5d:12:37:fd:72:90:c5:92:
         19:5c:d9:95:35:ce:48:bd:e8:66:08:bf:d2:6c:c6:af:b9:17:
         37:ff:e0:02:0e:c8:08:ec:26:c3:0f:8c:b2:31:36:92:47:a2:
         40:61:63:4a:ba:e4:0b:e2:05:24:33:fd:e8:72:35:ec:92:2e:
         74:86:f5:c6:e2:66:bc:94:93:86:b0:e4:b3:32:cb:10:c0:77:
         b1:9d:16:22:cc:5e:81:49:e8:a4:7f:99:6c:01:be:03:c4:eb:
         e8:12:9c:bb:20:4d:65:89:5d:d1:80:c6:6f:b7:ce:95:c3:31:
         98:b8:40:ee:96:7f:66:aa:89:f6:a9:3c:b0:79:1b:1c:df:b5:
         c8:4d:42:8f
-----BEGIN CERTIFICATE-----
MIIF5TCCBM2gAwIBAgIEAOcgDDANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDQyNDIzNTkyN1oXDTI0MTEwNjA0MDAw
MFowMzExMC8GA1UEAxMoZWI5MmQ4Njc3ZmM1ZjIxNGY3ZTUzMWYwYzdiZjk2YmEy
YjZkYzQzMjCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAPdBuiBRcy7K
PaDewl0QO0kkJrhchQ/UJz9HTW8xx/49G5v8+C/ODPbzDDd3qeBhTG1MqCNSWl73
OK9z2Mz1SnBoZXu1GMnFN5H511LnFBPOGy+vACRoOF7s27x1pSPtog4vr6+hO5ZA
LTs+vrPErm26K8XMKhGbNg9Mc46CEmjaP8me++YlMHy5v4ZzhSVxJVuieeQ6Zrto
wxPMl5b/l2PZLmtrc99hRE+/YzY1BSVVsf0lkg1x/XmbFAmVwHGuXpgB2PA86UUA
6VBcxMuqF3cZ0opeU/vf7gRn99jPALNNtKLGgjiRSWjQ588+aYXTWUQ9P479ZNY3
yME2X/Uew98CAwEAAaOCAxQwggMQMB0GA1UdDgQWBBSIvsaL0u409hP1ai747QcS
yJI7wTAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80MzlhZTA1Zi1hZTk5
LTQzY2YtYWFmNi0xZWFmZDNiMjQwMmEvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvNDM5YWUwNWYtYWU5OS00
M2NmLWFhZjYtMWVhZmQzYjI0MDJhL2ViOTJkODY3N2ZjNWYyMTRmN2U1MzFmMGM3
YmY5NmJhMmI2ZGM0MzIubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjA6
BggrBgEFBQcBBwEB/wQrMCkwGAQCAAEwEgMEAr5mYAMEA75mcAMEAr58KDANBAIA
AjAHAwUAKAPQADAZBggrBgEFBQcBCAEB/wQKMAigBjAEAgJtrjANBgkqhkiG9w0B
AQsFAAOCAQEAME4YVfd1GLGbrlxESp7AbxIMfVe0p4+NkMyOV8bVtDOcF6JJjbnt
kWBKU+MEc7ddmQ96XLTv/7KnUbsxYRovwU7X2FYxz9AKhYZd6imCqQy3pYL/iWLt
QeJbWqaCNqTga2d0yxF0xbt3448ZvywXlL95G0FW5V0SN/1ykMWSGVzZlTXOSL3o
Zgi/0mzGr7kXN//gAg7ICOwmww+MsjE2kkeiQGFjSrrkC+IFJDP96HI17JIudIb1
xuJmvJSThrDkszLLEMB3sZ0WIsxegUnopH+ZbAG+A8Tr6BKcuyBNZYld0YDGb7fO
lcMxmLhA7pZ/ZqqJ9qk8sHkbHN+1yE1Cjw==
-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org