Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f056a85eed0a86de06a2f626f1430eadb94d0c25.cer
File:                     f056a85eed0a86de06a2f626f1430eadb94d0c25.cer (raw, json)
Hash identifier:          3GFS+hD9wsdccD6CiIsath7ezb4AbJ2OWJR9vZ/LWYc=
Subject key identifier:   AD:D4:AD:D6:A9:39:71:C9:CE:27:BC:40:62:62:9B:6A:54:9C:8E:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F00258
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/51192fd2-d6fc-469d-96cd-10cea9258141/f056a85eed0a86de06a2f626f1430eadb94d0c25.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/51192fd2-d6fc-469d-96cd-10cea9258141/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 01 Oct 2020 16:11:20 +0000
Certificate not after:    Tue 30 Jul 2024 16:47:53 +0000
Subordinate resources:    IP: 2801:15:a800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15729240 (0xf00258)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  1 16:11:20 2020 GMT
            Not After : Jul 30 16:47:53 2024 GMT
        Subject: CN=f056a85eed0a86de06a2f626f1430eadb94d0c25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:87:2c:98:13:78:67:34:98:6b:08:ca:82:b5:
                    c1:e9:ec:91:1d:b6:22:45:05:a6:61:cb:13:5f:63:
                    e3:65:18:86:78:8a:bf:0a:cf:bd:06:e8:53:8a:33:
                    e0:21:b4:87:8f:dd:3c:b0:23:44:89:48:18:27:92:
                    5a:be:d3:2e:f8:b7:ba:f8:11:94:ed:0e:7f:60:75:
                    f8:0a:6f:5d:ac:f9:e7:21:79:3e:92:75:11:b7:c9:
                    72:85:e2:28:47:1c:55:75:9d:cd:e7:a8:2c:73:72:
                    cf:af:fe:97:e7:0d:b1:5f:76:81:13:63:c1:a6:23:
                    e3:c9:61:3f:45:fe:eb:61:7f:07:d8:00:fb:fd:62:
                    23:5a:c6:b8:ef:4f:ad:73:ed:d8:a9:b2:1e:2b:f0:
                    2a:d8:1b:1c:3a:0c:4e:d8:ea:7e:77:9b:13:67:3b:
                    dd:c1:96:70:6a:f0:3a:11:28:56:7e:25:0b:95:18:
                    83:84:e4:82:6f:fb:2f:97:13:96:9f:40:24:d0:8a:
                    ab:da:22:dd:0b:1a:5f:83:08:4a:d1:9d:82:4f:03:
                    a1:1b:7b:66:30:47:8b:a8:03:a9:19:22:2b:d5:86:
                    76:69:5d:75:16:7f:83:9d:09:8f:b6:c1:f0:8e:63:
                    42:29:49:c0:ec:72:37:fd:6a:bc:8f:25:10:e0:fc:
                    24:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:D4:AD:D6:A9:39:71:C9:CE:27:BC:40:62:62:9B:6A:54:9C:8E:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/51192fd2-d6fc-469d-96cd-10cea9258141/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/51192fd2-d6fc-469d-96cd-10cea9258141/f056a85eed0a86de06a2f626f1430eadb94d0c25.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:15:a800::/48

    Signature Algorithm: sha256WithRSAEncryption
         61:c1:8a:92:9f:71:85:e5:6e:6f:7e:28:65:66:fe:b6:9e:6c:
         09:2f:c9:2b:81:3c:f0:87:5d:0b:2b:c5:80:6f:d4:41:ca:2d:
         d8:e2:91:a6:e0:34:c3:ef:93:c5:f0:cf:9e:70:99:d8:11:64:
         18:e2:c4:60:99:6d:9c:76:cd:c8:c6:df:6b:96:8f:e3:a7:44:
         0b:ce:28:98:e0:48:a7:ff:d5:fe:e2:6e:75:ed:ae:02:b7:9c:
         8c:b6:2b:95:f5:0e:85:80:89:ca:17:63:24:6a:b7:4b:8c:53:
         3e:d6:94:82:4a:fe:b3:a3:f3:19:fb:77:db:b5:18:d6:27:a6:
         0c:47:56:b4:60:a4:26:84:92:c2:57:7b:22:a5:bb:b7:c1:92:
         65:72:0b:e6:95:b2:1a:fc:d3:eb:10:20:86:20:a2:dd:83:a1:
         f4:6f:df:62:2e:b7:e9:87:d2:63:1c:d1:98:ab:e5:27:f6:23:
         ab:65:dc:e1:f4:08:b3:08:8f:d9:b2:d2:6b:63:e7:a6:58:7a:
         2a:6a:11:33:6f:7c:a8:84:e8:db:00:d9:56:8a:1b:b6:f9:95:
         62:38:c9:bc:59:a2:d8:24:21:a3:4d:9a:e6:c5:cb:5b:1b:6b:
         84:5c:1c:cc:f6:42:a7:48:5a:0d:60:98:fb:66:64:39:fc:40:
         34:ee:9c:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org