Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3a498b1ce51fc7398249c05c0fecbb9ea278411.cer
File:                     f3a498b1ce51fc7398249c05c0fecbb9ea278411.cer (raw, json)
Hash identifier:          9dLl8Y80XqXdF/+daKoJK7J1hQ0ORJMZ9CIkAdbHeYk=
Subject key identifier:   03:6E:51:2D:A7:CF:48:B2:4A:6B:F6:68:00:37:29:FC:C9:8E:7B:47
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3A8DC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/94a9f702-1d4c-4965-9a6f-dde57648a10d/f3a498b1ce51fc7398249c05c0fecbb9ea278411.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/94a9f702-1d4c-4965-9a6f-dde57648a10d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 17:58:34 +0000
Certificate not after:    Sat 26 Oct 2024 04:00:00 +0000
Subordinate resources:    IP: 148.230.0.0/16

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15968476 (0xf3a8dc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  1 17:58:34 2023 GMT
            Not After : Oct 26 04:00:00 2024 GMT
        Subject: CN=f3a498b1ce51fc7398249c05c0fecbb9ea278411
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:f1:22:81:9b:67:60:ad:79:cf:a7:f3:10:0b:
                    2b:a0:45:4a:95:21:cd:44:78:45:e4:30:b9:70:6a:
                    5c:ea:d4:3a:71:4b:6e:d3:93:45:54:b6:19:70:a1:
                    62:95:6d:38:c4:d1:93:1b:f9:f0:8d:9d:86:4c:3c:
                    11:d2:8b:9a:42:9b:f6:f9:59:2f:15:7a:79:77:60:
                    f8:ac:05:ca:45:5f:ec:1b:f2:d8:a8:7a:6f:58:7d:
                    45:59:c9:61:19:59:4f:f0:6e:c5:88:f0:e1:91:a1:
                    f5:62:fd:09:a1:5d:1a:10:a8:bd:57:2e:be:14:75:
                    f9:d1:13:b1:f3:e3:2e:ba:96:0b:28:8b:32:83:a5:
                    d8:01:7e:14:56:94:72:62:98:7e:14:47:d1:92:6f:
                    b5:04:ac:dd:3f:ca:c1:36:6a:ef:80:bb:37:af:df:
                    da:0c:a7:60:95:26:43:95:0d:b5:18:f2:77:df:cc:
                    2b:63:7b:cd:bb:46:58:af:63:2a:c5:3c:f2:41:07:
                    e2:1f:cd:04:96:70:fb:60:72:e3:3c:85:05:ee:41:
                    55:2b:3a:3c:db:45:02:75:68:b7:a8:5b:b4:48:a6:
                    fb:e6:c4:f7:cc:cd:30:f2:f8:ae:41:b1:a8:8a:81:
                    97:a7:ac:16:e6:e8:f2:91:13:4a:a0:54:6e:1d:2e:
                    a2:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:6E:51:2D:A7:CF:48:B2:4A:6B:F6:68:00:37:29:FC:C9:8E:7B:47
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/94a9f702-1d4c-4965-9a6f-dde57648a10d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/94a9f702-1d4c-4965-9a6f-dde57648a10d/f3a498b1ce51fc7398249c05c0fecbb9ea278411.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.230.0.0/16

    Signature Algorithm: sha256WithRSAEncryption
         73:fc:d3:f9:78:2b:82:aa:79:99:94:ca:20:5d:e7:8b:b4:83:
         46:ca:99:7d:4e:f6:0f:0c:8f:d8:4b:ea:72:f3:19:50:84:3b:
         4a:56:51:22:bd:ae:73:dd:9c:d4:82:b2:91:3f:7c:94:6a:5c:
         c6:43:7d:c9:5a:2a:f4:27:40:4e:8c:42:59:5e:cf:af:8a:11:
         a5:cf:33:dc:1e:ec:9e:8f:8a:f3:3f:36:e9:bb:6e:7f:07:16:
         09:3c:02:ad:d0:63:9b:45:4e:88:a9:51:39:ec:1b:33:70:40:
         ce:86:c0:6b:4b:d2:75:49:8f:52:64:65:ee:bc:ac:e2:cc:9a:
         cc:fe:b3:8c:a0:2d:83:d2:c8:d5:56:b4:63:f8:b0:c3:02:20:
         a9:4f:9b:ab:0d:0f:0d:df:fb:6f:0e:fc:11:ff:ac:c3:cf:68:
         80:81:3f:d1:e1:d5:48:85:56:2f:6d:4d:7e:ad:1d:50:f4:05:
         ea:bd:8a:b6:b9:ac:c5:d7:e3:bd:5d:2d:b2:37:1b:d7:80:e5:
         9c:16:46:8d:57:39:8b:ba:db:90:58:b3:69:0e:8b:42:bd:0b:
         e2:eb:1d:77:d4:73:22:55:db:d8:a0:e4:bb:16:96:72:40:31:
         31:82:65:75:e9:21:1d:ad:21:09:4f:72:df:c4:41:5e:68:43:
         64:67:c4:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:40 2024 by rpki-client on console-fra.rpki-client.org