Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efac633551d1272446c06af77640e7198b0bb2ec.cer
File:                     efac633551d1272446c06af77640e7198b0bb2ec.cer (raw, json)
Hash identifier:          RCxH1D1SwmfWwn5PqFbAH5f8vMN2GOKCvgqvmQUUvRg=
Subject key identifier:   8B:3E:65:10:6A:E5:FE:1E:A4:8C:2B:32:48:63:D8:D2:EE:66:8E:61
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C197B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c93d9c2e-48ba-4e50-9eba-f548ddbbc4af/efac633551d1272446c06af77640e7198b0bb2ec.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c93d9c2e-48ba-4e50-9eba-f548ddbbc4af/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 22:09:04 +0000
Certificate not after:    Sun 09 Nov 2025 14:00:00 +0000
Subordinate resources:    AS: 27802

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17570171 (0x10c197b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 22:09:04 2024 GMT
            Not After : Nov  9 14:00:00 2025 GMT
        Subject: CN=efac633551d1272446c06af77640e7198b0bb2ec
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:f6:03:d6:88:c7:b2:86:b5:41:b1:76:6c:
                    76:8e:d5:16:77:65:95:d9:e7:fc:17:a9:12:23:44:
                    bf:bc:74:57:c9:fa:59:00:a0:69:d5:5c:7c:9b:eb:
                    88:3b:56:6a:b1:02:03:5e:b0:40:25:d0:12:d7:5d:
                    49:32:fd:34:3c:33:ca:fe:ea:b0:60:d9:1d:2e:55:
                    a5:dd:f2:4c:ad:3f:2d:65:c8:d9:91:56:f8:6a:bd:
                    2b:e6:d5:15:60:8d:a8:52:48:bc:bf:c9:9e:f2:90:
                    dc:9b:05:af:50:09:41:23:4c:51:94:2e:9b:58:05:
                    b4:7b:67:52:aa:67:0a:dd:07:83:aa:1c:7e:09:49:
                    13:28:d9:4e:cc:60:5a:9a:e6:10:8c:b1:64:42:a0:
                    59:cc:78:cf:e3:62:3a:3f:a6:e5:61:93:d6:27:2c:
                    65:d3:26:06:a8:08:fa:da:66:9b:f5:fc:61:33:23:
                    4f:f9:22:5e:d6:bb:45:1f:19:f0:ea:cc:cc:4e:58:
                    f5:ab:12:e6:fb:00:29:39:9e:78:f1:5b:5b:bd:d5:
                    b8:f1:de:8c:14:5d:2c:f7:10:32:86:11:9a:d5:70:
                    41:87:d9:e1:0b:ed:92:99:33:6c:4c:5c:37:8c:43:
                    e6:b4:36:ff:40:f2:5e:98:28:2f:ec:2c:93:98:ef:
                    d3:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:3E:65:10:6A:E5:FE:1E:A4:8C:2B:32:48:63:D8:D2:EE:66:8E:61
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c93d9c2e-48ba-4e50-9eba-f548ddbbc4af/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c93d9c2e-48ba-4e50-9eba-f548ddbbc4af/efac633551d1272446c06af77640e7198b0bb2ec.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27802

    Signature Algorithm: sha256WithRSAEncryption
         36:f9:fb:94:75:4a:23:58:66:b7:85:d1:fe:9a:07:b2:e4:0c:
         3a:13:86:71:4c:5e:a6:ba:df:77:9e:5e:52:f8:1a:c9:b9:7d:
         42:69:0b:87:00:50:9b:7e:fc:0f:b8:51:c7:99:18:a3:0c:03:
         18:a9:dd:df:5a:e1:f1:40:c0:17:65:87:81:7b:53:29:56:09:
         91:d5:a5:42:13:05:86:c0:39:6f:cc:de:67:42:69:a0:0a:66:
         e7:3c:f1:d9:2c:89:43:4a:24:7e:ef:06:b4:cc:01:b2:3f:b0:
         fe:dc:c1:83:7a:47:07:6d:ec:a8:1a:24:12:d5:c8:35:fd:e7:
         71:b2:aa:70:08:b7:8b:be:d7:fe:ed:b6:4b:de:59:78:26:66:
         7b:03:b9:82:40:2d:a6:05:7a:95:97:5c:ff:32:14:d3:86:f2:
         d7:48:96:1e:6c:b6:01:f3:c8:9f:55:9b:05:bf:fd:d5:eb:d4:
         2d:f0:9b:f6:3c:bc:54:c2:d3:18:9a:75:1d:45:c3:cf:0d:f7:
         a8:06:10:d9:db:08:e6:0f:89:25:ec:8b:79:0e:0b:4e:44:51:
         10:5b:06:02:cf:1a:d2:d4:f7:a5:46:e9:d9:0f:92:df:62:0d:
         05:8b:b9:06:64:54:d0:bd:b5:5f:c6:4a:b9:a5:40:05:c6:00:
         1c:51:ef:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org