Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/10b4c742e316543fc8d535ae6771e0a8fc31e849.cer
File:                     10b4c742e316543fc8d535ae6771e0a8fc31e849.cer (raw, json)
Hash identifier:          MR9yqA+NKoCHtAF7wdGrtdmbMl6RfGIYoMSwRnjknBU=
Subject key identifier:   C0:74:01:7E:1D:11:A0:31:35:FC:17:7D:3A:C7:26:94:E1:D8:9F:62
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECCA2A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c8605464-09f0-48e9-bdaa-d991383755a6/10b4c742e316543fc8d535ae6771e0a8fc31e849.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c8605464-09f0-48e9-bdaa-d991383755a6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 14:13:43 +0000
Certificate not after:    Sun 14 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 18576

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15518250 (0xecca2a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 14:13:43 2023 GMT
            Not After : Jul 14 06:00:00 2024 GMT
        Subject: CN=10b4c742e316543fc8d535ae6771e0a8fc31e849
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:64:89:83:9e:9d:ab:76:78:f4:7d:6d:d4:49:
                    64:ac:4c:c6:0d:f9:d0:47:d8:e9:71:82:10:02:5c:
                    86:5b:c4:d5:b4:58:91:2c:78:33:8e:24:1a:2a:15:
                    a1:6f:7f:e5:72:21:a6:59:be:7d:36:94:0f:69:46:
                    59:24:3a:18:5d:a1:b0:33:9d:69:5e:18:78:a1:32:
                    a3:21:99:1e:15:99:d1:6c:85:89:f7:6b:8b:52:1b:
                    f4:a0:bf:bc:2a:8d:9c:7c:44:bc:c6:aa:bd:34:59:
                    8c:2c:c5:82:3e:5e:c0:26:5f:da:ab:2f:c8:58:7e:
                    cb:d2:65:24:63:39:83:89:1c:7b:d3:87:f4:98:d8:
                    1b:8d:6a:02:fc:41:ec:56:af:0e:e4:ed:a9:29:5c:
                    f9:ca:e3:3a:a5:13:a8:20:41:78:84:a6:23:18:0d:
                    e4:41:b8:90:7e:78:06:e1:93:8b:61:98:e2:40:5e:
                    42:11:ba:a1:4b:c4:3a:2c:50:a9:66:16:61:c0:d3:
                    6c:dd:7a:f4:08:38:3d:47:b7:43:f3:b3:d8:33:57:
                    cd:67:b9:7e:67:ff:11:07:18:d9:b9:23:e7:bb:76:
                    16:cc:91:0a:4b:00:34:f4:54:c3:b6:e0:65:ce:40:
                    ea:32:37:a9:73:3d:49:cf:f7:dc:6a:3f:27:15:5e:
                    8c:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:74:01:7E:1D:11:A0:31:35:FC:17:7D:3A:C7:26:94:E1:D8:9F:62
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c8605464-09f0-48e9-bdaa-d991383755a6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c8605464-09f0-48e9-bdaa-d991383755a6/10b4c742e316543fc8d535ae6771e0a8fc31e849.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  18576

    Signature Algorithm: sha256WithRSAEncryption
         bb:77:8a:43:71:01:9b:4a:af:1f:de:47:f8:bc:eb:e8:59:34:
         4b:04:50:00:1f:6b:f7:4e:2d:27:c5:ec:60:02:d8:30:32:57:
         16:a4:a1:9c:2b:7d:96:c8:43:21:8f:84:fb:87:16:3e:7f:e7:
         45:f7:22:cc:be:b1:59:4d:b9:90:e6:b3:7d:54:15:1f:20:14:
         81:b3:66:49:f5:c2:15:2b:d5:da:f8:c5:ec:ac:33:64:40:4e:
         20:e9:fa:85:b8:ad:c0:b7:1e:1c:13:d2:07:6c:56:c4:96:84:
         7b:c4:3f:b5:e7:6d:13:1f:b4:71:1c:66:90:4c:16:1a:12:05:
         c8:a3:ae:be:e5:81:9a:a1:15:81:c5:2c:c3:a1:f1:36:76:90:
         00:80:5e:00:bb:f5:c4:13:55:27:f7:67:1c:db:dc:83:46:06:
         db:44:38:ca:4d:ad:3f:cd:0c:83:21:b7:a9:75:55:9c:9e:9d:
         2c:20:4b:73:e2:2a:b8:4b:05:ee:7f:e6:20:df:f8:ab:44:a3:
         13:66:73:60:f3:78:b5:79:c9:be:41:f9:c6:49:ed:88:04:be:
         32:51:86:1c:9e:03:af:61:83:fc:a0:47:97:ce:57:94:b8:69:
         4f:7d:9e:89:2a:60:ed:86:04:fd:4b:bb:64:9d:26:f7:b8:17:
         36:6e:44:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----