Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f7d11af696c77914c8c0010e03bd7fa7ec4d2b9a.cer
File:                     f7d11af696c77914c8c0010e03bd7fa7ec4d2b9a.cer (raw, json)
Hash identifier:          zR1ltyMd3p+goMoYGTlyL0zynGNCFRmMc6hFOx5wb+M=
Subject key identifier:   A1:3A:35:7A:12:D2:5F:03:89:C0:0D:F8:36:40:CD:0A:0E:94:8B:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01029BA8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e6f133a0-b32f-4d04-a7c9-2909454b36e6/f7d11af696c77914c8c0010e03bd7fa7ec4d2b9a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e6f133a0-b32f-4d04-a7c9-2909454b36e6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 30 Nov 2023 18:38:33 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    IP: 200.0.160.0/22

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16948136 (0x1029ba8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 30 18:38:33 2023 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=f7d11af696c77914c8c0010e03bd7fa7ec4d2b9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:99:13:dc:6d:e8:c8:c0:cb:e5:c7:3e:4d:3a:
                    88:e5:57:63:20:ce:fc:5e:e7:4c:75:de:bd:74:53:
                    39:fa:32:a0:40:28:8a:3e:e9:ff:63:86:ef:73:25:
                    d6:93:da:c0:05:6e:b4:b3:b0:f8:ea:4e:b8:6a:c9:
                    cf:59:e0:04:af:a8:ac:fb:f2:8e:c5:57:08:af:63:
                    2c:65:bb:5f:cc:ce:0b:2d:fe:6d:29:f3:46:af:6a:
                    6a:46:c0:59:6e:70:00:db:7b:e7:40:99:69:70:9b:
                    46:91:ac:75:b0:61:ac:f4:d0:c1:7a:89:86:c5:42:
                    1f:e1:24:cd:ad:c8:b4:32:b5:ae:70:bc:54:21:aa:
                    02:fc:04:75:47:ca:c8:6d:8e:ae:f9:a4:9e:53:42:
                    5e:93:b9:4a:b4:53:e2:03:46:8c:1f:c2:58:25:ff:
                    3f:43:99:04:29:3e:af:bd:c7:73:da:22:84:78:e9:
                    5a:38:65:68:ff:94:c4:60:c4:3d:a7:3e:20:91:ef:
                    a3:4b:4c:0a:1b:17:f6:64:33:46:77:23:0f:d8:2e:
                    34:96:42:07:0c:1d:0a:14:2c:e1:ba:e2:37:73:45:
                    9f:30:42:c1:cc:95:9b:e9:81:5f:bb:2d:0d:f0:97:
                    65:1c:b0:5d:b6:cf:42:34:33:0e:47:da:f1:d4:3b:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:3A:35:7A:12:D2:5F:03:89:C0:0D:F8:36:40:CD:0A:0E:94:8B:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e6f133a0-b32f-4d04-a7c9-2909454b36e6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e6f133a0-b32f-4d04-a7c9-2909454b36e6/f7d11af696c77914c8c0010e03bd7fa7ec4d2b9a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.0.160.0/22

    Signature Algorithm: sha256WithRSAEncryption
         46:62:c6:a4:a0:2f:43:04:71:b4:28:b7:ff:25:c2:3b:12:bc:
         42:35:fa:2b:ac:d0:84:5a:e5:94:fd:10:57:8a:42:c6:74:4a:
         cd:44:a9:56:0a:7d:09:96:fc:3b:43:06:6f:05:1f:12:60:12:
         79:82:f8:1a:e0:e6:e2:5e:b3:f5:04:2e:63:8f:98:bc:0b:40:
         b2:ca:4e:17:77:26:a0:db:7a:89:61:30:fe:9b:db:32:71:43:
         03:72:59:1c:44:93:94:ea:0d:1a:2f:b8:0c:6e:79:7f:42:13:
         b2:dc:96:a4:95:81:f2:90:7d:c7:49:5b:aa:65:68:33:b9:f9:
         8c:e5:14:1d:73:52:38:50:61:a7:73:c1:94:4c:4e:67:d9:74:
         53:5b:19:14:51:20:3d:90:19:ae:02:3b:28:e3:d6:5d:a4:c4:
         0b:95:7f:1f:8d:47:db:bb:49:4b:6e:3d:4f:3e:41:df:6b:c4:
         1e:bf:55:23:61:c0:9a:a6:55:dc:54:46:59:45:d1:3f:f5:aa:
         a3:20:13:c3:52:d8:c4:f9:98:1c:26:8a:d3:d7:95:85:7d:b7:
         67:b0:5c:02:04:d7:b4:d8:9b:6c:ce:97:ef:7d:65:c4:69:19:
         ec:3f:e2:3d:28:3f:96:c9:41:95:55:f1:51:5f:e0:c4:61:0b:
         2a:80:9d:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:37:40 2024 by rpki-client on console-fra.rpki-client.org