Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ed28a844c91c4605c337c85be22e08c4e2a837dd.cer
File:                     ed28a844c91c4605c337c85be22e08c4e2a837dd.cer (raw, json)
Hash identifier:          bOL5BgmBeI5ZGo4A1D3C/2rJ7BBoKtjdTXiZM1s7cw8=
Subject key identifier:   AE:80:44:FC:37:C4:0A:3E:00:9E:CD:51:30:96:E5:A5:85:C4:98:E2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FDE304
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/ed28a844c91c4605c337c85be22e08c4e2a837dd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16638724 (0xfde304)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=ed28a844c91c4605c337c85be22e08c4e2a837dd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:54:25:b4:47:1c:b8:e2:10:84:41:a3:65:92:
                    86:c0:72:ec:d2:e0:b0:08:69:f1:cd:87:d4:91:59:
                    be:b1:0f:69:fc:d3:4d:c1:3b:b4:9d:f9:a5:b3:5b:
                    b8:3b:6b:f8:57:e3:ee:79:65:42:75:60:5d:7b:11:
                    f8:1f:fd:78:74:32:f0:94:8d:25:45:f9:05:bd:fe:
                    25:58:83:23:f6:a3:b8:69:0c:85:ae:d0:50:51:48:
                    71:b0:3e:ba:a5:dd:9d:a9:ff:f9:08:18:57:0e:dc:
                    55:c1:01:77:b6:69:49:25:f7:45:9f:64:a7:1c:24:
                    ca:3b:2f:6f:19:ba:aa:1a:5e:92:e4:9a:56:5a:50:
                    93:a7:d4:dd:8e:6c:59:77:55:89:7e:9d:22:1e:0f:
                    e9:75:72:3a:eb:08:9c:38:fb:2b:31:2a:cc:45:5a:
                    ed:80:7a:19:c0:93:5d:17:72:4d:09:6a:38:d9:ea:
                    6a:b4:b8:97:80:03:26:e8:02:15:47:01:e8:4f:b2:
                    f2:13:60:a9:eb:72:36:93:a5:83:18:ab:8a:2f:d9:
                    36:a8:68:41:26:82:c4:7b:b2:88:fa:db:00:5f:f0:
                    4c:35:9b:78:60:8c:cd:17:6e:fc:7f:7c:9c:ba:41:
                    11:af:78:d7:79:be:53:ee:01:a5:df:a6:e8:36:68:
                    b3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:80:44:FC:37:C4:0A:3E:00:9E:CD:51:30:96:E5:A5:85:C4:98:E2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/ed28a844c91c4605c337c85be22e08c4e2a837dd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         60:3f:51:7a:49:14:c2:86:9c:e3:51:b1:a1:55:53:37:fe:0d:
         f4:b4:ef:12:81:8b:85:49:e8:70:99:1f:9e:dd:d6:af:1b:ab:
         12:73:bc:59:6f:34:cc:ac:c5:48:60:8e:84:88:64:0a:d2:02:
         e0:fc:98:e9:d6:87:6f:a4:bd:a3:e9:cd:3c:f7:b1:3d:f1:89:
         b2:72:bc:e3:f6:6c:0e:2e:7e:3e:ab:96:47:8a:10:0d:d3:46:
         bf:8d:c2:02:ca:31:c0:a7:91:21:72:97:bc:c8:3d:74:3f:8f:
         33:88:92:ea:a7:27:1a:fa:78:47:41:80:82:b1:e4:67:26:a7:
         45:0a:b7:58:b1:c1:b4:fa:51:62:60:e3:07:27:d0:5b:a9:6d:
         12:e3:d4:21:ba:2e:91:20:72:e3:97:00:13:02:4c:be:1e:a2:
         7d:32:1f:6d:f4:f4:fd:70:98:31:b5:e8:7c:55:a2:3b:1a:9e:
         75:8a:fa:d8:4e:ab:e1:5f:3e:53:06:90:30:0b:47:9d:f9:78:
         c5:5a:81:28:6d:41:c2:5d:f0:28:38:0b:32:0f:37:10:2b:38:
         b6:b4:14:e4:e9:c7:c9:b1:f5:53:56:61:02:8d:13:af:f9:c4:
         dc:49:71:c3:d9:92:4a:87:99:bf:35:54:be:fb:08:80:00:39:
         4a:3b:8e:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:40 2024 by rpki-client on console-fra.rpki-client.org