Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f51e04fd12c1c75b0547e3e4728d600c396de519.cer
File:                     f51e04fd12c1c75b0547e3e4728d600c396de519.cer (raw, json)
Hash identifier:          487+uqYnDkDwjsMV2q06EkBy3cavmQ49Su/F87AU7Ao=
Subject key identifier:   8B:89:BE:C4:5E:1B:10:75:C9:0D:A5:28:FD:D6:64:59:25:60:C6:FC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7232E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0b7e62e5-132f-4a39-ae34-5cbf1599e447/f51e04fd12c1c75b0547e3e4728d600c396de519.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0b7e62e5-132f-4a39-ae34-5cbf1599e447/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 15:59:18 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.167.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16196398 (0xf7232e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 15:59:18 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=f51e04fd12c1c75b0547e3e4728d600c396de519
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:18:11:f1:7b:a7:2f:af:84:43:80:d5:14:55:
                    d6:76:05:0e:7f:fb:ce:24:a2:8b:f1:5b:f6:81:44:
                    82:36:19:31:1a:15:db:c5:5e:59:3f:79:3a:37:90:
                    9a:ee:c9:e2:51:16:24:fd:5e:8b:fb:15:91:8c:d3:
                    74:4d:af:20:ff:4a:d9:6a:6c:46:1d:c4:bf:75:25:
                    7f:98:78:03:d8:e7:78:e4:d4:35:07:a2:26:58:37:
                    ce:5e:af:f2:c4:d9:3f:b2:de:fd:d2:b6:fa:f1:69:
                    11:e1:e8:17:d9:fa:7e:b7:7c:56:62:c8:19:09:37:
                    2a:3a:88:4e:ff:0f:d6:6e:49:68:0a:f2:6b:aa:1d:
                    b6:77:fa:a2:42:9c:c8:22:3b:33:d4:2c:73:1d:2d:
                    56:87:4e:66:db:e8:ba:70:9a:5b:16:31:8d:5f:cb:
                    76:da:60:ee:9a:fd:27:1d:0e:b5:9a:e3:d0:58:38:
                    e0:59:d2:a0:12:46:da:51:2f:bd:39:a8:9b:12:5d:
                    55:f6:c4:91:33:05:b1:b3:42:fd:84:01:b3:03:d4:
                    b8:04:2e:e6:8b:08:ed:75:ab:14:a1:65:96:bd:a2:
                    fc:97:54:c9:95:67:0e:88:61:00:e6:2d:76:d3:3f:
                    1b:bb:c3:68:cf:fb:be:c3:47:26:67:91:03:de:ef:
                    34:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:89:BE:C4:5E:1B:10:75:C9:0D:A5:28:FD:D6:64:59:25:60:C6:FC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0b7e62e5-132f-4a39-ae34-5cbf1599e447/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0b7e62e5-132f-4a39-ae34-5cbf1599e447/f51e04fd12c1c75b0547e3e4728d600c396de519.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.167.0/24

    Signature Algorithm: sha256WithRSAEncryption
         72:ca:8a:b1:32:d4:71:fd:2b:2f:b9:5d:c6:5c:ad:3e:05:f7:
         d4:b8:71:f1:74:96:e1:4d:04:89:0c:61:67:c4:f3:34:c3:8a:
         7b:4b:cd:7f:13:00:7a:5c:01:40:48:6d:4b:c9:4a:4c:4e:3b:
         3a:6a:e1:89:ee:36:a6:e4:80:52:6c:83:a2:c6:d0:54:8a:c2:
         df:8a:fe:b7:92:7c:83:96:9a:e0:9c:00:75:5e:08:6e:79:9a:
         25:cc:e7:1c:36:5b:b6:d3:f3:25:2b:e7:67:f2:03:4f:03:ac:
         23:51:98:79:74:56:a2:b6:01:66:00:37:26:c4:03:ed:6e:2a:
         fc:c3:4c:20:dd:60:f4:95:32:87:eb:b0:91:e3:f7:ac:be:a5:
         cb:ea:fb:15:f2:22:0f:fc:e9:2e:60:b7:80:94:a4:3b:99:dc:
         86:13:d0:e8:ec:c4:16:9c:9f:c7:72:22:45:13:5a:ed:a7:ec:
         29:28:d3:be:cb:c4:b1:b8:f6:dd:2e:6b:2b:36:92:1f:6e:25:
         d7:ec:db:6a:da:70:cf:94:14:4c:45:aa:c4:78:04:d0:bd:68:
         28:92:0e:25:6b:e7:2e:7e:bf:84:b7:0d:6c:0a:03:2b:22:1c:
         c9:fd:07:97:68:74:99:f0:6d:53:d6:e4:80:96:14:75:6e:00:
         12:1e:46:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:30 2024 by rpki-client on console-ams.rpki-client.org