Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fbdb833dea4d32f0ab8eda2458c8e1808ccb29c1.cer
File:                     fbdb833dea4d32f0ab8eda2458c8e1808ccb29c1.cer (raw, json)
Hash identifier:          J26CRcqGxQoINCOV1hp2GRzkyGCoRpZdU+aJwsKhlD0=
Subject key identifier:   23:6D:D9:B5:B0:EE:B8:E1:6B:1B:3F:A2:9F:57:21:E1:04:62:07:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECF269
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4ad37787-d8e9-4057-94e5-17666ebc68df/fbdb833dea4d32f0ab8eda2458c8e1808ccb29c1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4ad37787-d8e9-4057-94e5-17666ebc68df/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 21:22:56 +0000
Certificate not after:    Sat 27 Jul 2024 16:09:19 +0000
Subordinate resources:    AS: 52407
                          IP: 201.221.121.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15528553 (0xecf269)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 21:22:56 2023 GMT
            Not After : Jul 27 16:09:19 2024 GMT
        Subject: CN=fbdb833dea4d32f0ab8eda2458c8e1808ccb29c1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:82:36:d5:c6:8c:0b:e3:52:13:cf:7a:57:dd:
                    6b:36:74:c2:85:d7:57:ff:14:ec:9e:a3:35:a9:ca:
                    cf:c1:82:f4:89:af:79:fb:2d:ed:0d:4a:4b:a6:0d:
                    c3:0b:5d:3b:48:df:0a:84:40:7c:50:24:40:7e:3e:
                    72:82:d8:c4:c9:ee:ef:e0:49:76:44:57:3d:9a:c0:
                    cc:c0:07:b6:72:eb:9b:70:cb:6b:4d:e2:ac:ce:a6:
                    a2:bc:4d:56:da:47:26:04:35:09:ff:4a:80:2f:5f:
                    b8:95:1e:99:2e:2e:83:43:83:89:8c:16:cb:82:46:
                    ed:14:48:81:79:77:de:04:77:b8:b0:b4:20:63:74:
                    bd:29:d2:95:da:63:91:52:ec:0b:a5:ac:cd:e6:4d:
                    66:b2:36:18:e2:5a:cd:45:44:be:14:44:d0:1e:b2:
                    21:7f:a4:1a:c4:b4:0b:77:ae:b7:c4:62:2f:c9:5b:
                    dd:41:44:d6:cc:8a:49:ed:7c:7e:fa:8b:25:07:6e:
                    86:b9:0a:6a:51:21:36:8c:66:6e:3f:d6:49:cd:0f:
                    9a:d2:6d:16:44:06:d2:c8:0d:0c:19:a9:e9:5a:52:
                    8b:a2:82:7a:4c:2c:f8:a4:98:20:19:20:39:ef:9b:
                    15:14:f7:ea:b5:2b:12:03:06:42:12:8a:89:16:94:
                    03:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:6D:D9:B5:B0:EE:B8:E1:6B:1B:3F:A2:9F:57:21:E1:04:62:07:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4ad37787-d8e9-4057-94e5-17666ebc68df/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4ad37787-d8e9-4057-94e5-17666ebc68df/fbdb833dea4d32f0ab8eda2458c8e1808ccb29c1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.221.121.0/24

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52407

    Signature Algorithm: sha256WithRSAEncryption
         a4:a7:b9:41:79:81:d1:ce:13:99:d4:36:f9:37:cc:a0:b6:5e:
         e0:4c:cb:d7:3d:54:8c:b7:6f:79:a8:57:a6:cb:f9:06:98:bd:
         4d:bf:f7:d4:01:32:45:36:f5:b2:cb:26:cd:8f:8c:12:1d:f2:
         f4:5f:d8:67:86:47:02:18:5f:db:b6:e2:18:1e:19:ee:2c:e4:
         65:0c:6a:92:4c:d0:f7:25:78:21:91:7b:a1:16:dc:c9:d5:d4:
         f4:d0:7e:cc:24:71:90:4d:f1:6a:e0:c9:55:22:cb:0f:6e:74:
         a2:8b:d5:e3:93:39:ee:bd:41:31:fa:67:d0:b6:bc:bf:9f:60:
         72:4c:8c:2a:42:5e:9b:ad:04:f5:5f:73:80:da:b4:60:b3:92:
         50:d4:81:ca:90:f8:d1:7b:2f:f2:af:ac:5f:73:88:0c:22:80:
         ce:4e:ea:b9:58:fb:1e:14:11:fe:c1:d4:10:d8:05:75:14:aa:
         e6:fc:fa:48:17:f1:f3:db:da:22:a0:31:f8:77:49:74:f6:e5:
         27:d9:dc:dd:f8:61:12:76:56:10:f8:f3:8d:14:24:14:25:93:
         47:44:a2:82:1a:3d:be:d1:17:be:97:6f:a5:32:04:ad:87:9b:
         dd:9a:b6:07:4a:1c:da:d2:bb:ff:a6:12:bd:1f:fe:62:b7:fa:
         1a:6e:83:a9
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:30 2024 by rpki-client on console-ams.rpki-client.org