Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0d43a3343c2aa3ef9233e7eeb086e2eb6a86d399.cer
File:                     0d43a3343c2aa3ef9233e7eeb086e2eb6a86d399.cer (raw, json)
Hash identifier:          JXzzsKktyFQbkvCeBuk7NGsRb09+IwmMqozSFju6jqc=
Subject key identifier:   65:05:33:AB:98:A0:66:22:E2:1C:81:37:EC:43:C4:9E:CC:62:13:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C291F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/279e7371-a535-44c4-a7c3-fa06b20d8527/0d43a3343c2aa3ef9233e7eeb086e2eb6a86d399.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/279e7371-a535-44c4-a7c3-fa06b20d8527/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 27 Feb 2024 22:10:14 +0000
Certificate not after:    Sun 14 Dec 2025 14:00:00 +0000
Subordinate resources:    AS: 27959

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17574175 (0x10c291f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 27 22:10:14 2024 GMT
            Not After : Dec 14 14:00:00 2025 GMT
        Subject: CN=0d43a3343c2aa3ef9233e7eeb086e2eb6a86d399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:d6:94:51:59:d8:8f:d9:1d:c0:58:0b:cc:3e:
                    67:ea:30:78:d7:6f:1f:97:0e:cc:e9:5f:4c:88:36:
                    4f:11:73:ea:93:af:a9:22:9f:65:de:1b:cb:17:af:
                    8d:ea:57:c7:f9:e4:f3:27:86:f2:44:30:f8:b7:42:
                    f7:a7:b2:e0:83:d1:84:18:23:3c:7d:d5:de:22:c4:
                    0b:04:9e:f2:52:6d:eb:5c:11:77:a3:c1:0d:3d:1e:
                    7f:ac:c5:80:93:29:f9:2e:12:a3:3c:05:b8:82:4b:
                    2c:c7:57:98:af:68:7d:b7:12:d5:08:39:48:89:31:
                    21:0c:d3:41:ee:18:25:25:a3:e5:a2:b3:54:d7:f3:
                    cd:30:59:9f:81:61:69:62:2d:d7:47:7e:d0:25:73:
                    d6:07:cd:32:5d:ff:28:a2:b2:4f:84:9a:1b:4a:17:
                    f6:c7:09:e5:34:5f:d1:af:77:14:01:e1:c2:cc:2a:
                    cb:8f:51:49:86:ca:d7:ea:04:26:90:70:45:06:fd:
                    9b:b8:b3:ba:cd:e5:f3:76:8d:4e:2d:d7:90:c9:b2:
                    02:ca:f3:0c:8d:83:1b:64:b8:3b:b3:a2:f8:a0:87:
                    8c:ea:e6:8f:94:53:6c:02:1c:b2:e9:a6:75:b6:cf:
                    28:b4:5a:fa:ef:77:db:41:c4:24:83:db:05:0b:32:
                    61:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:05:33:AB:98:A0:66:22:E2:1C:81:37:EC:43:C4:9E:CC:62:13:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/279e7371-a535-44c4-a7c3-fa06b20d8527/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/279e7371-a535-44c4-a7c3-fa06b20d8527/0d43a3343c2aa3ef9233e7eeb086e2eb6a86d399.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27959

    Signature Algorithm: sha256WithRSAEncryption
         73:82:b4:72:f6:f1:54:9d:bd:40:3f:68:9a:55:aa:aa:ea:90:
         0f:29:16:7e:93:6b:c4:cf:d6:04:fc:94:ea:06:66:28:df:aa:
         86:a5:e7:2e:80:67:b9:ce:24:d9:0b:2e:a7:b1:11:c6:7d:b6:
         4c:25:39:ed:3e:bf:bd:5e:d4:d9:c6:04:cb:a1:e1:d2:71:35:
         6b:4a:71:cd:b7:46:23:3b:b5:36:9b:e4:fb:ff:cb:ad:ed:55:
         6f:72:68:0f:cb:9c:1b:20:de:2f:15:f1:f1:93:ca:00:4d:52:
         bc:df:0d:14:c2:98:7b:93:2d:e4:03:98:6e:ba:80:5a:95:5e:
         d0:c1:0c:42:42:f9:4d:14:fa:bd:b5:42:0e:4a:91:0e:39:e9:
         bc:c7:7e:43:eb:b2:9a:87:6c:64:19:26:11:3d:5d:ca:29:4c:
         bc:77:92:75:a9:47:14:ca:9a:6d:31:82:be:78:84:95:2f:89:
         b5:16:1c:4e:b9:e3:1a:46:46:3c:cf:0c:48:fc:93:ed:e5:3c:
         19:43:80:14:c9:cd:6a:ed:89:28:70:51:b6:8a:a3:cb:ea:2a:
         67:31:5f:40:c9:a9:8b:29:2b:9c:b1:92:78:f6:60:5d:14:98:
         7f:ae:39:6b:e2:07:f1:d4:2a:17:51:bb:9d:e1:35:20:38:d7:
         0f:9a:57:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----