Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/125b23f6b27e7eaa51c5a360584c1cdca8282262.cer
File:                     125b23f6b27e7eaa51c5a360584c1cdca8282262.cer (raw, json)
Hash identifier:          kL8xnnsU+tGUkXAf/NiyvkPzfdinxSA8OyY088Jh9CY=
Subject key identifier:   6B:C4:3B:FC:6E:95:DD:00:5E:4C:D2:83:BA:D7:B5:C3:29:FB:6E:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2AADF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/93db225f-b1d0-4a84-be86-afdbde6af674/125b23f6b27e7eaa51c5a360584c1cdca8282262.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/93db225f-b1d0-4a84-be86-afdbde6af674/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 22 Jul 2023 23:36:03 +0000
Certificate not after:    Sun 23 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 16596
                          IP: 148.231.0.0/16
                          IP: 2801:c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15903455 (0xf2aadf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 22 23:36:03 2023 GMT
            Not After : Mar 23 06:00:00 2025 GMT
        Subject: CN=125b23f6b27e7eaa51c5a360584c1cdca8282262
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:5d:81:8f:44:96:9d:2d:d7:6b:bc:53:96:b5:
                    34:c2:0d:7b:ed:cb:59:c0:ab:48:0b:42:26:47:2a:
                    1c:72:f7:d9:d5:2f:e4:be:5d:0a:b2:2e:54:d5:63:
                    17:31:e8:09:20:2f:38:05:d7:03:ee:72:25:21:87:
                    d6:65:cd:a0:db:5e:8c:43:f8:56:0f:6b:5d:d1:68:
                    17:18:24:0a:e2:96:e9:eb:76:ca:3a:de:8b:db:ba:
                    c8:55:4f:30:ce:e3:ab:a1:78:69:c1:a7:66:27:ba:
                    d7:04:ec:fd:b9:ad:42:1d:73:0e:fd:0a:79:92:ae:
                    90:39:36:2f:46:85:1d:e3:dc:b8:6a:46:04:57:2a:
                    e6:df:aa:d6:6f:ce:0f:f2:ea:ca:75:75:78:4b:85:
                    2f:52:a5:7d:96:22:c2:4f:23:ce:ca:2a:7a:9c:ff:
                    82:07:56:a4:a9:3f:a9:cc:f0:c8:b4:d1:cb:7b:95:
                    44:dc:e8:60:a9:df:df:94:81:78:f4:b9:a2:84:84:
                    f6:05:01:c4:65:af:b9:76:66:b8:39:d0:4d:e9:70:
                    2a:3a:24:ec:df:0d:d5:12:24:59:13:1c:fe:0c:a9:
                    fa:df:72:31:ee:ab:02:20:ff:eb:6c:ec:2e:9d:1d:
                    6d:f7:0b:1d:69:f1:e2:b2:4f:46:ef:5a:50:35:92:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:C4:3B:FC:6E:95:DD:00:5E:4C:D2:83:BA:D7:B5:C3:29:FB:6E:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/93db225f-b1d0-4a84-be86-afdbde6af674/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/93db225f-b1d0-4a84-be86-afdbde6af674/125b23f6b27e7eaa51c5a360584c1cdca8282262.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.231.0.0/16
                IPv6:
                  2801:c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  16596

    Signature Algorithm: sha256WithRSAEncryption
         23:fb:10:a4:57:bf:13:ea:59:43:f7:5e:13:67:84:0c:41:71:
         e7:6a:60:fc:21:eb:e8:4d:2d:a0:d8:f9:3e:2e:b8:73:8a:33:
         db:45:82:0a:42:a3:17:f8:a2:37:99:ef:51:50:10:fe:55:27:
         4d:4f:2a:b9:90:79:5e:d2:de:ec:71:75:62:d5:43:c3:6e:e9:
         17:4e:ef:7c:4b:55:33:39:ab:ae:47:a2:c2:c8:e3:7d:1d:17:
         5e:b3:ab:d3:c1:9d:2d:ad:97:cb:60:6a:3c:94:9f:fc:0e:3f:
         94:7c:28:dd:03:48:1a:e8:ce:8b:19:8a:cf:ae:5a:6c:ac:61:
         24:ad:eb:42:a1:8e:cb:01:c7:ea:1d:cc:78:ed:2c:10:fb:44:
         e8:95:fb:89:61:e1:65:75:80:da:01:92:3c:67:63:f8:a7:e8:
         aa:4e:dc:3f:19:ac:98:06:88:36:02:12:8a:58:b1:8e:97:d0:
         ef:6d:40:b3:f9:21:81:f3:ca:84:dd:c8:ad:ec:8b:ae:37:7f:
         3c:c6:d8:9d:9c:c9:d0:02:d1:f3:54:b8:37:c4:cb:4d:70:6b:
         24:3a:2f:03:e0:bd:30:db:bd:32:a7:2c:aa:94:c8:12:99:8f:
         00:e2:9e:1c:8f:af:c9:67:4c:44:b2:bd:8f:51:9c:1f:0d:50:
         7f:5f:71:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----