Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0b38efd4dcf424862de151d45262c81ae7ac849b.cer
File:                     0b38efd4dcf424862de151d45262c81ae7ac849b.cer (raw, json)
Hash identifier:          CvJTIP6mXnlZ2ougt44PIgpVBDTb5Tj3Zpn0vQ9111A=
Subject key identifier:   6B:83:10:27:F6:D8:27:77:69:DA:99:5C:31:51:48:05:65:F7:A7:DF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E027AA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/0b38efd4dcf424862de151d45262c81ae7ac849b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 12:32:47 +0000
Certificate not after:    Sat 29 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 13424
                          IP: 190.13.64.0/20
                          IP: 2803:e800::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14690218 (0xe027aa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 12:32:47 2023 GMT
            Not After : Jun 29 15:00:00 2024 GMT
        Subject: CN=0b38efd4dcf424862de151d45262c81ae7ac849b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:f1:4f:eb:2b:20:36:ad:57:f5:87:c6:8e:c5:
                    79:2d:38:f2:8f:f4:84:90:09:4d:e3:f9:0e:19:51:
                    69:3d:64:37:60:6d:5d:26:7f:8d:6d:11:f9:a2:74:
                    79:4b:99:1c:b4:b5:ae:0d:6a:b1:c6:87:5d:50:75:
                    81:f9:88:66:f4:04:f7:3b:1c:97:a2:57:12:ef:1f:
                    31:58:97:33:4e:fa:e4:cb:ad:5d:a9:61:07:30:8c:
                    55:8a:e3:38:74:3e:88:33:c3:f8:cc:31:db:01:58:
                    3c:60:72:04:75:23:01:4e:f8:fc:dc:d4:1e:e9:2d:
                    51:29:82:9b:06:6c:d9:ff:4c:d3:21:c4:2a:3f:56:
                    e9:01:68:80:33:6c:57:0e:d2:81:27:cd:0f:34:e6:
                    08:fe:90:f4:ad:e2:8d:f9:0f:a8:d4:0f:f4:fd:18:
                    7a:96:d7:84:86:9e:d4:de:c9:36:d8:71:fb:9f:89:
                    5c:cc:f8:fb:15:77:36:5a:56:3a:d6:e9:66:9b:35:
                    f2:a9:bb:a7:db:92:03:bc:77:67:77:ff:e8:40:43:
                    a7:92:6b:39:e2:47:f4:fd:76:79:d7:0f:89:1e:ae:
                    3e:cd:6b:5a:76:81:b4:fd:99:ef:a3:88:d6:04:1d:
                    a4:fb:44:5c:a7:a6:35:0b:2d:9f:25:5e:8e:6b:ca:
                    0b:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:83:10:27:F6:D8:27:77:69:DA:99:5C:31:51:48:05:65:F7:A7:DF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b5b9b4d5-ed82-4d0b-9a19-6ca8ccef23e0/0b38efd4dcf424862de151d45262c81ae7ac849b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.13.64.0/20
                IPv6:
                  2803:e800::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  13424

    Signature Algorithm: sha256WithRSAEncryption
         92:c8:52:d6:b5:a2:cf:c9:a2:c9:d8:9c:e9:8e:2f:ab:35:f4:
         fd:a8:30:3b:f5:22:2b:20:4c:bb:d3:da:b3:3e:0b:5e:71:f5:
         9f:bb:30:08:99:00:88:70:54:28:b2:86:8d:29:b2:23:56:2a:
         e3:17:89:3d:ef:a8:9b:af:12:32:24:6e:89:a9:e0:c6:54:b7:
         20:7b:90:b7:08:2f:23:2a:5b:65:8d:27:47:7d:92:5d:c3:49:
         51:76:5d:73:92:f0:f9:e4:ae:60:6f:82:1a:5d:53:2b:08:ce:
         52:ff:8d:81:84:c7:14:fd:80:35:6e:17:98:aa:3e:a8:5e:2d:
         5a:c0:b5:c7:40:14:ba:90:e2:14:1e:59:79:66:f5:2b:4c:32:
         7e:66:ad:1b:99:82:5f:65:67:f7:c9:f8:41:b4:36:56:b8:ff:
         9f:94:71:eb:1e:15:fd:48:8a:d4:58:03:a7:d8:c6:a7:a0:20:
         7a:df:6e:45:44:9c:bd:e2:58:5c:ec:5e:06:4f:30:cb:d4:5b:
         b4:26:38:3b:6a:e4:71:fd:6e:e0:95:67:d8:07:9d:6e:04:5a:
         0b:07:08:b1:3d:2a:a4:28:2b:8d:58:a2:89:e4:9b:ef:bd:ec:
         3f:5f:7b:2e:b8:0b:a1:b0:d8:73:c8:2c:29:c8:be:89:0a:93:
         c0:9b:4d:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----