Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/05cc6b949c0dfc56ea12375419c8cbb468cdf6ee.cer
File:                     05cc6b949c0dfc56ea12375419c8cbb468cdf6ee.cer (raw, json)
Hash identifier:          zFeHyy62aVy+beB/1Kn6JtZ/P+1nNlRYPw8hHjh5d8o=
Subject key identifier:   C3:78:98:04:38:8C:1E:A9:08:77:8E:20:52:19:26:F9:43:59:B2:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01045C7B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/15c432f1-3c86-4b08-876e-351315e81a81/05cc6b949c0dfc56ea12375419c8cbb468cdf6ee.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/15c432f1-3c86-4b08-876e-351315e81a81/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 19 Dec 2023 10:46:01 +0000
Certificate not after:    Thu 12 Jun 2025 06:00:00 +0000
Subordinate resources:    AS: 27655
                          IP: 200.1.118.0/24
                          IP: 2801:10:4000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17063035 (0x1045c7b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 19 10:46:01 2023 GMT
            Not After : Jun 12 06:00:00 2025 GMT
        Subject: CN=05cc6b949c0dfc56ea12375419c8cbb468cdf6ee
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:59:46:25:b1:49:1b:1e:b5:58:c0:8f:aa:67:
                    d2:3d:dc:a4:e6:55:3d:1d:28:c7:7d:ea:f5:3e:54:
                    c8:2d:e6:b0:78:af:98:96:fd:fe:31:dc:8f:6e:14:
                    74:95:0b:84:db:9b:05:b3:0a:63:78:5a:2d:50:19:
                    e0:fa:f2:54:a2:af:d6:04:ee:8e:ae:57:74:68:9c:
                    0b:95:f7:bd:58:ce:5c:cd:b5:1a:59:ef:6d:f8:fe:
                    3c:6f:05:27:b8:92:2f:19:df:29:01:65:19:ea:08:
                    88:20:1c:23:3c:c5:f0:48:db:33:2f:c8:60:63:4a:
                    87:43:35:c0:b3:04:62:99:81:02:d4:9c:a6:2e:ec:
                    9d:03:a2:aa:3a:f5:86:ab:e2:8e:11:08:0f:51:cd:
                    fa:bc:47:63:97:c4:b7:92:79:a4:2d:7f:f7:c7:02:
                    30:f6:72:ec:5f:f0:c0:bb:e4:df:a8:79:74:e1:f2:
                    0e:27:85:11:5e:b1:c9:2e:23:0f:e9:74:b0:1c:fe:
                    20:b5:be:8d:23:20:c2:91:08:a7:fa:99:03:cf:f8:
                    65:34:26:cb:5a:6b:1d:4b:cf:05:d5:47:9e:e1:21:
                    ab:af:a4:ec:de:ac:bb:dc:f2:f9:e3:2e:a1:ce:62:
                    0a:f7:33:b2:46:c4:dc:a4:8f:b9:0a:bb:1a:2c:c2:
                    ea:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:78:98:04:38:8C:1E:A9:08:77:8E:20:52:19:26:F9:43:59:B2:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/15c432f1-3c86-4b08-876e-351315e81a81/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/15c432f1-3c86-4b08-876e-351315e81a81/05cc6b949c0dfc56ea12375419c8cbb468cdf6ee.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.1.118.0/24
                IPv6:
                  2801:10:4000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27655

    Signature Algorithm: sha256WithRSAEncryption
         bc:7d:57:4e:79:33:e9:42:37:61:11:4d:78:80:fd:a0:cf:5d:
         ba:21:b0:71:62:62:44:31:f6:ec:8a:d6:2a:11:fe:da:d6:3c:
         b5:48:2a:1d:7c:63:2a:48:5d:e2:23:75:af:7e:60:63:4b:09:
         28:3a:e8:65:60:87:5e:e7:b1:47:ae:e6:48:ad:b2:ec:62:cd:
         98:8f:d3:d6:fc:c5:75:e7:06:86:b7:43:9e:21:68:40:e6:55:
         6b:32:1c:80:1c:a7:9a:85:da:ec:d1:10:c9:c0:9e:22:6b:9e:
         1e:bd:0a:37:9c:3d:9b:b3:c1:c1:72:1d:c4:76:a3:8f:dd:f9:
         53:62:8a:4c:53:2c:49:72:46:33:d8:98:b8:a3:41:c4:ae:45:
         bc:5c:58:04:70:e2:51:37:02:bb:e2:74:c9:82:b5:7c:d2:85:
         aa:eb:58:d1:f5:70:a2:7e:61:8e:6a:12:47:8d:f7:57:44:d7:
         30:b9:b6:82:8c:f0:c6:5e:ef:df:c0:c8:7f:50:e0:bd:e9:e5:
         ff:61:9d:be:fa:7c:e8:37:5d:7f:67:0b:bf:87:c2:74:92:49:
         2a:62:32:b3:84:63:eb:80:c8:a9:fb:4c:7e:c1:59:62:b1:49:
         7e:dd:62:db:22:05:ca:87:d2:73:98:02:fa:62:62:eb:37:f7:
         95:34:0d:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----