Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/07e33d8707added84342369dfdd25d7afcb83629.cer
File:                     07e33d8707added84342369dfdd25d7afcb83629.cer (raw, json)
Hash identifier:          z7tvIBGSN9R2ZMC83LzBW2V2VxRYje3MrQP6Yv1Esm0=
Subject key identifier:   5D:D5:54:8B:22:64:D3:21:20:F6:3C:D7:91:B3:8B:ED:9B:8C:0E:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9E02E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/20a56f67-a74c-4092-b25a-9776e4794d5a/07e33d8707added84342369dfdd25d7afcb83629.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/20a56f67-a74c-4092-b25a-9776e4794d5a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 15 May 2023 16:37:35 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 4967
                          IP: 200.26.0.0/17
                          IP: 200.32.128.0/19

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15327278 (0xe9e02e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 15 16:37:35 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=07e33d8707added84342369dfdd25d7afcb83629
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:1a:93:6a:8a:f8:bf:e9:11:a9:99:58:60:e8:
                    d4:7e:42:2c:d2:af:a4:51:07:9d:28:63:f8:f3:6c:
                    0e:0d:f0:4f:81:1f:8d:0f:a4:a7:fa:36:fb:48:aa:
                    a9:3a:44:4e:f3:c6:f5:0b:46:fb:0e:46:81:7d:c3:
                    f3:b0:ce:4d:c9:ec:a1:48:36:7d:3c:e6:6b:b0:c8:
                    56:b6:1a:de:5e:43:39:d8:61:8e:c7:19:39:89:44:
                    14:8e:43:e5:b1:33:67:5a:39:b2:15:77:d0:03:0f:
                    cf:31:02:95:50:41:ad:a1:5e:00:ee:f6:f3:16:a7:
                    98:66:7c:5c:85:d1:50:1e:ce:dc:b9:3f:0d:e9:e0:
                    d5:28:00:b7:2b:da:b7:d5:ae:7b:33:71:1e:ad:25:
                    6c:d4:ae:0b:30:e1:51:42:0b:16:28:7b:21:26:05:
                    8c:c2:8b:ca:d1:27:67:b3:91:78:30:4c:e6:5f:8a:
                    9c:3f:45:4c:96:f4:33:bb:52:44:d9:ab:27:89:11:
                    0d:59:0b:c1:a4:7b:d4:44:80:42:40:eb:4c:92:bc:
                    2a:e7:7a:0f:33:db:31:d0:2b:38:de:f1:48:8e:ff:
                    a5:0c:87:1c:de:42:08:aa:71:76:e3:81:3a:0b:28:
                    9f:35:9a:2c:98:07:c7:8f:1c:c5:d5:0f:87:50:6e:
                    10:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:D5:54:8B:22:64:D3:21:20:F6:3C:D7:91:B3:8B:ED:9B:8C:0E:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/20a56f67-a74c-4092-b25a-9776e4794d5a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/20a56f67-a74c-4092-b25a-9776e4794d5a/07e33d8707added84342369dfdd25d7afcb83629.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.26.0.0/17
                  200.32.128.0/19

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  4967

    Signature Algorithm: sha256WithRSAEncryption
         b0:31:27:56:7d:29:50:f9:36:33:89:29:ff:e1:83:cc:8f:dc:
         c0:94:7d:ec:c5:98:17:cf:1e:08:64:e9:e4:cc:81:41:42:df:
         75:94:3b:f6:88:84:fc:29:a1:6f:a5:a9:4e:82:d7:53:73:0e:
         15:81:5b:9c:62:40:9b:3b:0e:4f:40:4d:cd:f8:fb:9d:9e:a2:
         57:3c:64:ab:71:75:66:ec:8c:d9:42:11:3c:29:f8:ce:34:34:
         a0:11:c7:78:f7:21:a7:87:2c:b1:92:0a:b4:a9:62:4c:2e:0a:
         7e:2c:df:77:86:98:d7:03:0d:25:96:23:58:19:73:92:0a:75:
         d6:52:a3:53:2c:c9:a5:41:74:56:75:e5:bd:91:01:ef:1f:7b:
         27:5b:da:1f:b4:44:49:a2:e2:e3:ae:89:88:ce:4b:72:f1:83:
         a6:32:b8:cf:44:b7:0b:f5:f2:b0:b4:7b:ad:a8:7f:48:ec:1f:
         17:ec:da:59:b8:af:1d:8c:ae:31:56:87:ce:04:a9:c6:69:d4:
         85:e9:2a:41:99:42:81:d9:5f:05:37:91:b8:9f:f7:40:18:00:
         fa:94:55:69:e3:5d:df:8c:78:fc:d3:64:e7:21:ac:7a:0a:aa:
         a7:00:68:b5:20:b0:de:e3:32:e9:3d:86:33:81:58:6c:6d:08:
         d5:e2:25:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----