Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fad769b54164718ce50139e16a39be2eac5c07a9.cer
File:                     fad769b54164718ce50139e16a39be2eac5c07a9.cer (raw, json)
Hash identifier:          FQxh7jtnzycxKZbv81cgYf9DWr2y693n6NI+QS/0kJk=
Subject key identifier:   4D:5A:B2:B6:98:06:F8:B7:06:BF:77:36:B0:52:A0:7A:63:99:C6:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAFAE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cae2f2d2-2428-4abd-bf78-cb2ed4e13d51/fad769b54164718ce50139e16a39be2eac5c07a9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cae2f2d2-2428-4abd-bf78-cb2ed4e13d51/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 27 Sep 2023 19:29:29 +0000
Certificate not after:    Sun 15 Jun 2025 06:00:00 +0000
Subordinate resources:    IP: 2801:1d:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16448224 (0xfafae0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 27 19:29:29 2023 GMT
            Not After : Jun 15 06:00:00 2025 GMT
        Subject: CN=fad769b54164718ce50139e16a39be2eac5c07a9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:23:75:62:57:09:a9:ed:5e:ad:a0:44:80:72:
                    f7:cf:c2:14:a7:c0:53:44:53:24:98:93:ca:a7:6d:
                    f9:ef:4d:dc:71:ea:0c:98:d2:fb:d6:ed:de:87:da:
                    06:6e:bc:cf:c0:8a:88:a6:a7:5c:d6:4f:8c:a3:0a:
                    d1:86:cb:2c:fc:df:2a:7b:8e:6b:53:8d:86:39:7a:
                    92:8e:7a:e3:d0:2c:25:33:5a:9c:08:a5:8c:f1:00:
                    a8:7e:64:bb:ff:be:66:f4:fc:e7:f4:6d:3c:75:be:
                    2d:8f:c9:70:b7:a0:ee:0d:74:bb:83:a6:bc:07:f9:
                    da:fe:e6:12:74:e1:56:ea:ef:c9:e3:3e:a2:f7:bc:
                    95:19:cb:0d:25:7d:11:54:0b:1c:b2:11:73:06:4b:
                    c6:4d:96:8a:08:dd:0c:24:5d:a4:74:8d:a4:15:6e:
                    4f:97:62:13:9b:80:9b:75:8d:7f:90:72:01:fb:d9:
                    2d:37:d3:b8:b1:81:c3:aa:d1:a0:2d:1b:07:8a:93:
                    c8:c9:93:1f:a6:ed:ca:6f:d7:73:4f:fc:92:b4:92:
                    ad:82:31:f9:04:13:50:ba:e1:8d:81:93:b0:34:83:
                    54:b9:25:1d:8d:8e:dd:ed:af:b4:fe:89:35:92:8f:
                    67:d4:62:de:7b:0b:48:8f:a5:b1:5f:92:0a:9f:f5:
                    9b:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:5A:B2:B6:98:06:F8:B7:06:BF:77:36:B0:52:A0:7A:63:99:C6:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cae2f2d2-2428-4abd-bf78-cb2ed4e13d51/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cae2f2d2-2428-4abd-bf78-cb2ed4e13d51/fad769b54164718ce50139e16a39be2eac5c07a9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1d:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:59:59:e3:b9:b6:00:11:2a:79:97:e0:bf:47:d2:fb:00:
         7f:b4:b1:dd:c5:8a:4a:82:e7:f2:82:f3:dd:9a:83:52:7d:11:
         66:d9:f8:07:70:fb:0e:8f:f7:d6:6c:a8:4c:b6:53:5a:33:bb:
         c5:57:46:ab:61:2b:3a:b5:79:5c:e5:f8:59:38:8d:e5:9f:7c:
         cd:2d:47:7d:45:e8:63:ac:af:13:05:31:2f:e0:50:61:d3:6a:
         f3:5c:01:3d:ec:52:5d:f0:b3:d0:7d:ea:80:03:48:46:28:5c:
         2c:63:df:fd:25:d7:b0:21:f0:52:f7:ae:41:e2:98:a0:63:f6:
         98:72:7e:a5:e5:15:43:46:99:d2:df:e5:a8:c5:f7:74:df:c1:
         ff:f9:34:db:12:f6:a7:ac:3f:b5:63:b7:00:0b:55:9d:5a:b1:
         aa:d5:81:b4:be:2f:47:b2:eb:8c:ea:bf:07:ce:8e:b1:2f:42:
         1d:95:3c:8a:cd:a4:30:49:65:f2:16:a4:0f:e9:14:84:ca:18:
         5f:9c:28:2c:3d:65:e3:4a:db:65:b4:34:f0:e9:21:4d:dc:48:
         be:7e:78:42:a0:53:dd:b6:99:3a:00:ff:cb:69:9e:6a:87:e9:
         1a:7d:8f:d4:9b:b7:e5:94:d4:a1:1f:7f:16:2a:6e:69:93:05:
         4c:b0:3f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:15 2024 by rpki-client on console-fra.rpki-client.org