Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/feaf4ff9a3a8e7171139d32727c83bb2f80970d2.cer
File:                     feaf4ff9a3a8e7171139d32727c83bb2f80970d2.cer (raw, json)
Hash identifier:          q5/CaJC3gBhW/LzKx5WX0bN9O9cCie144Eoa4+OjUGw=
Subject key identifier:   1F:81:C8:3A:0A:E8:E4:44:3C:0E:C4:D3:94:9C:A8:85:71:15:6F:7D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F4A8A8
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2c439d15-0d93-4c1f-9192-c58891b7dd05/feaf4ff9a3a8e7171139d32727c83bb2f80970d2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2c439d15-0d93-4c1f-9192-c58891b7dd05/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Aug 2023 18:55:02 +0000
Certificate not after:    Fri 18 Oct 2024 18:44:18 +0000
Subordinate resources:    IP: 2801:1b6::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16033960 (0xf4a8a8)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 10 18:55:02 2023 GMT
            Not After : Oct 18 18:44:18 2024 GMT
        Subject: CN=feaf4ff9a3a8e7171139d32727c83bb2f80970d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:41:97:dc:79:88:55:6d:6f:cd:70:c6:08:
                    71:e2:a5:b9:31:79:7c:48:f8:8a:7a:f6:31:7b:d0:
                    bc:18:0c:2e:67:03:c8:58:a1:ea:7f:09:da:94:2d:
                    6b:24:b2:05:0a:25:44:5d:f0:a1:ff:b3:ab:e1:91:
                    3c:73:cb:e4:5e:75:bd:ba:38:ac:7d:80:91:82:b7:
                    5e:17:1a:fc:49:35:86:24:9f:1d:2d:20:49:47:54:
                    0c:3d:72:2a:63:7b:58:02:39:c1:27:ff:4a:bf:4b:
                    a9:c6:9f:92:23:4a:e0:f6:c1:c3:0b:45:d0:21:34:
                    f0:cc:4e:b5:67:98:eb:b0:fd:a4:0b:3e:54:49:c7:
                    d0:5b:9f:7c:40:75:eb:84:a2:20:af:20:a4:c7:1c:
                    6f:05:cb:1c:0e:4c:f6:87:e2:81:4a:9e:c3:f5:20:
                    6c:5c:1f:64:a4:ff:29:9a:a0:df:db:3f:ba:03:7b:
                    98:fa:a3:9e:d1:95:ef:80:62:f7:8c:82:64:73:94:
                    da:ba:50:c7:8b:03:14:b6:d4:83:78:25:3c:df:0c:
                    ca:cd:7b:6a:e2:69:46:a6:62:05:dd:7a:3b:19:3c:
                    de:15:c5:38:58:fd:05:c8:6e:d7:5d:0a:c0:3c:44:
                    d4:7b:84:00:aa:dd:62:b9:94:f0:54:8c:d1:3f:cb:
                    85:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:81:C8:3A:0A:E8:E4:44:3C:0E:C4:D3:94:9C:A8:85:71:15:6F:7D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2c439d15-0d93-4c1f-9192-c58891b7dd05/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2c439d15-0d93-4c1f-9192-c58891b7dd05/feaf4ff9a3a8e7171139d32727c83bb2f80970d2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b6::/44

    Signature Algorithm: sha256WithRSAEncryption
         90:b7:05:41:14:f3:0f:ba:76:ae:af:0a:5d:93:f4:bd:56:8a:
         fb:68:ad:93:8e:b0:13:1e:25:ec:49:7c:57:5e:1b:d4:06:c4:
         39:d2:0e:c3:1a:fc:ff:49:72:d7:b6:ad:a2:ac:a3:dd:d8:b5:
         1d:e2:6f:cf:6a:59:3d:7d:34:b0:dd:2c:d9:7f:39:95:cf:6d:
         aa:4a:8f:f2:96:10:a8:8c:f5:bd:d4:22:cd:ac:6a:9e:7d:93:
         79:f6:c5:f8:8a:fb:14:c0:94:90:71:2e:cc:55:fd:be:91:87:
         c8:d9:6b:6a:5c:0d:71:49:62:93:e5:be:f0:76:8c:82:44:21:
         a3:d2:9a:b7:61:97:16:d6:cc:54:ce:e9:f5:99:e3:e9:3d:e6:
         2e:e0:1a:a9:0c:92:74:25:1f:ec:4b:ca:19:35:3a:99:24:ff:
         68:bf:b9:25:f8:bc:58:8f:18:f5:f9:08:20:e5:d8:04:27:32:
         9b:ce:74:f9:94:1f:01:15:eb:0b:c3:a6:58:b4:6e:8f:bd:68:
         71:48:04:bd:02:8d:b7:fd:c3:1f:86:af:7f:fe:ab:6f:14:a1:
         bd:e1:38:1f:4a:53:45:75:76:b7:34:2a:3d:6e:dc:75:35:ca:
         4c:00:fa:c5:b7:e0:57:e1:6b:35:ef:e1:31:a0:32:0c:be:bf:
         64:ff:13:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:16 2024 by rpki-client on console-fra.rpki-client.org