Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1f0151e990c492f4aab9536fe6888d049a972f7.cer
File:                     f1f0151e990c492f4aab9536fe6888d049a972f7.cer (raw, json)
Hash identifier:          xxLfDmtVTErrqsk1aYvUGbuHbKC+fnjKl5s1ApMDmPQ=
Subject key identifier:   07:42:10:C6:39:46:3F:D7:F3:50:41:54:F6:23:83:AE:AF:E9:24:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F76C6C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/f1f0151e990c492f4aab9536fe6888d049a972f7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16215148 (0xf76c6c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=f1f0151e990c492f4aab9536fe6888d049a972f7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:64:7b:75:87:40:35:11:1b:70:a8:c4:dd:d2:
                    f1:a8:1e:0f:30:b0:96:1a:96:b9:5d:c4:f6:e3:e3:
                    25:1c:66:05:65:07:6a:07:e0:95:56:ee:38:d3:0a:
                    b4:f9:a5:10:3c:70:87:04:68:2a:3f:a1:8d:e8:81:
                    71:be:ee:e8:aa:3c:7b:e4:ed:42:a2:a2:17:80:90:
                    04:d3:1a:e9:20:a6:69:95:e0:c6:11:bf:d4:9b:c9:
                    b2:1b:85:bc:2c:3d:42:7b:e3:67:07:2e:11:22:c4:
                    1d:b0:a1:37:a6:d0:ef:f6:0f:b9:80:a8:0e:e3:46:
                    a7:8a:f0:b2:49:63:96:e2:c2:f9:31:a4:92:ac:cc:
                    b0:00:07:3b:e7:7c:10:05:aa:51:29:26:a3:5b:0f:
                    f2:8f:b6:1b:0a:6b:6a:6f:b1:14:41:7f:8d:88:9d:
                    27:69:dd:d4:ed:16:41:60:41:41:34:01:67:a8:7a:
                    45:e4:ef:8f:d8:de:57:71:77:d1:46:9c:2e:53:ea:
                    9b:94:f8:20:76:3c:6e:7f:91:1b:9f:2c:7d:51:c7:
                    55:5f:6e:8d:26:f4:6f:c9:e4:d7:a5:24:4b:52:42:
                    dc:82:f4:39:5a:d7:1b:4d:3f:bb:66:ce:80:58:5b:
                    0e:21:91:32:a6:8a:78:5b:39:2b:5b:da:00:99:40:
                    7c:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:42:10:C6:39:46:3F:D7:F3:50:41:54:F6:23:83:AE:AF:E9:24:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/f1f0151e990c492f4aab9536fe6888d049a972f7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         c7:4b:76:7d:cb:59:d3:3b:e1:76:f7:90:4d:c6:a5:4b:d4:93:
         4a:ed:26:8e:5a:d7:ef:61:8b:8c:bb:d6:ae:51:28:b8:df:49:
         17:92:66:50:f8:b2:6a:7d:2a:d5:69:a3:a7:ed:8b:48:0e:37:
         ed:78:34:aa:1d:ae:72:82:88:60:d3:07:05:90:64:db:45:b0:
         8e:4b:b5:f9:fe:e6:2a:5b:7b:9d:97:f7:b1:52:a4:cc:ed:4c:
         4d:e8:6e:51:3f:6f:0e:af:03:69:6b:e3:7b:48:53:59:34:fa:
         ac:51:b8:04:01:68:36:ab:66:65:25:2d:f9:cd:3e:b7:7c:c8:
         13:23:0b:29:53:d7:8b:62:58:6e:f8:8c:e0:1a:0e:88:f1:7f:
         6e:e6:6e:60:98:41:f0:57:f9:66:22:96:c6:d1:9f:00:e2:29:
         5a:3b:0e:c6:2c:15:91:f7:b2:74:c3:d6:01:1b:0d:73:a8:ad:
         bd:3d:11:c5:94:a2:b5:26:6e:bd:30:be:68:c8:c9:4b:98:49:
         0b:99:6d:14:04:b2:9f:da:68:2d:42:79:ad:a3:0e:2f:cd:36:
         02:0e:32:3e:75:8a:f8:a6:f7:57:84:01:a8:d3:a2:7f:da:c2:
         37:70:e2:43:cf:d4:57:85:64:8b:11:9c:42:0b:65:dd:1e:8c:
         b0:3a:aa:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:37:37 2024 by rpki-client on console-ams.rpki-client.org