Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/071f510b157cd9b79b6db5e5594d18ce9047dabf.cer
File:                     071f510b157cd9b79b6db5e5594d18ce9047dabf.cer (raw, json)
Hash identifier:          9THbZq/m/8xbNS4NNM7v9oiIRl4DdEnojGvI+2dd54k=
Subject key identifier:   E9:88:28:60:92:F2:E4:96:7B:B1:82:A5:A3:55:FE:3F:32:6C:76:99
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010087A6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/91c319ed-62ba-48b7-b63e-58e83912ee12/071f510b157cd9b79b6db5e5594d18ce9047dabf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/91c319ed-62ba-48b7-b63e-58e83912ee12/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:05:45 +0000
Certificate not after:    Tue 04 Mar 2025 17:01:21 +0000
Subordinate resources:    AS: 23074
                          AS: 61721
                          IP: 164.85.0.0/16
                          IP: 192.111.230.0/24
                          IP: 2801:80:c30::/48
                          IP: 2804:9a4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16811942 (0x10087a6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:05:45 2023 GMT
            Not After : Mar  4 17:01:21 2025 GMT
        Subject: CN=071f510b157cd9b79b6db5e5594d18ce9047dabf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:3f:63:d6:bb:8f:6b:bf:2c:e7:bd:0d:ca:49:
                    44:68:1a:2a:eb:ef:8b:ac:c1:8f:1f:fd:d9:ab:25:
                    97:8d:b0:29:74:4f:d1:f0:bf:d6:9c:e7:0e:06:05:
                    73:14:4a:f8:0d:a9:44:bb:4e:65:55:bb:f9:8f:8d:
                    bd:6b:3e:f8:12:db:45:3d:10:ed:fa:c2:d4:d6:be:
                    dd:b4:d4:97:b7:fd:52:1a:cc:6d:b3:2c:f4:1b:0a:
                    26:9a:a5:67:89:c3:ea:ee:3c:0e:a7:86:89:b6:60:
                    fd:6c:32:cd:81:3e:e5:96:42:6e:3b:95:be:0c:4e:
                    4d:2a:b0:3b:c6:08:21:59:5d:6d:24:1d:a8:66:ef:
                    e7:92:d4:ac:71:67:b7:5c:c7:6b:39:45:f8:29:06:
                    cb:0d:84:83:5f:53:4c:e0:b2:b9:79:95:bb:69:c2:
                    91:b0:c9:64:4b:cc:13:81:7f:32:35:d5:d8:b0:15:
                    06:38:df:ca:44:78:c2:42:a5:09:f2:b5:df:68:15:
                    7b:33:ba:b6:fa:cf:4e:6b:49:de:fa:81:c5:48:61:
                    a9:f4:68:c8:37:17:2d:5b:ea:60:24:59:23:ee:5c:
                    41:15:18:17:8c:38:59:19:14:d1:3a:d2:af:2c:2c:
                    4d:de:de:e6:4d:e9:2a:b5:ed:88:ea:27:41:7d:a8:
                    0d:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:88:28:60:92:F2:E4:96:7B:B1:82:A5:A3:55:FE:3F:32:6C:76:99
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/91c319ed-62ba-48b7-b63e-58e83912ee12/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/91c319ed-62ba-48b7-b63e-58e83912ee12/071f510b157cd9b79b6db5e5594d18ce9047dabf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  164.85.0.0/16
                  192.111.230.0/24
                IPv6:
                  2801:80:c30::/48
                  2804:9a4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23074
                  61721

    Signature Algorithm: sha256WithRSAEncryption
         ad:ac:e3:53:5c:72:f0:fa:90:ad:9d:01:0d:fe:06:c1:58:d9:
         0d:39:4f:56:2e:95:e7:c7:7f:bf:35:23:6a:ee:3e:7a:06:fb:
         5a:ab:b2:51:92:69:cd:73:59:99:cc:8e:ca:c0:1c:eb:52:34:
         4f:e4:19:4a:f4:79:a3:2f:7e:c4:0b:15:07:5e:90:f9:07:5f:
         33:8b:5f:2e:06:0e:f8:b0:cc:92:8c:d5:2e:82:9a:53:b9:49:
         fc:4b:98:fd:1d:a9:87:e9:43:37:98:9b:81:16:b1:fb:22:b1:
         9a:96:3f:4a:d7:fb:a5:88:68:bc:39:65:92:5f:a6:12:b9:fe:
         e7:2c:7b:e4:f8:48:5c:5f:2e:04:20:11:6e:de:2f:bd:9f:e4:
         c6:8b:c2:a8:2e:c5:28:94:29:c2:97:d4:9a:58:a2:e8:28:71:
         f1:15:b4:5e:df:91:fd:2d:56:6b:f5:55:e3:b1:28:66:24:0c:
         10:6c:45:46:34:8d:62:0d:15:fd:3c:8e:1b:e9:d0:b7:de:d5:
         c4:92:3d:eb:fe:fb:5d:51:07:c9:5a:44:13:7f:cf:ab:4c:8d:
         48:24:13:78:46:c6:69:9f:35:2a:bc:1a:c2:47:34:d0:f3:8e:
         b7:bc:63:1e:f7:c8:47:db:e9:b0:27:6d:2c:66:ef:89:f8:88:
         f3:77:f0:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----