Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14972a169d27abbbc1d8a239ac2b44de8608deaf.cer
File:                     14972a169d27abbbc1d8a239ac2b44de8608deaf.cer (raw, json)
Hash identifier:          bn5goHEu8OcNqyXiqIytgybwa/I/Vxa4C6vjtWE91hA=
Subject key identifier:   D0:95:FE:EA:57:78:6C:4B:ED:26:2B:97:BF:BF:0A:B3:43:97:5C:4A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E02C05
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/14972a169d27abbbc1d8a239ac2b44de8608deaf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 28 Feb 2023 14:16:40 +0000
Certificate not after:    Fri 27 Dec 2024 13:14:15 +0000
Subordinate resources:    IP: 2801:12:3800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14691333 (0xe02c05)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 28 14:16:40 2023 GMT
            Not After : Dec 27 13:14:15 2024 GMT
        Subject: CN=14972a169d27abbbc1d8a239ac2b44de8608deaf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:6f:0f:ae:da:c0:e0:1a:da:52:9f:1c:fd:ec:
                    ce:d4:6d:f9:e3:db:d8:17:68:f4:4e:d0:48:72:60:
                    12:76:47:45:0f:3d:24:5e:6b:cb:57:e2:b3:f4:5d:
                    d4:6a:a3:5c:8b:d5:af:f5:d5:0b:bf:50:e3:f4:b2:
                    84:e0:b5:d5:20:e9:e9:a0:ef:14:9b:b9:77:be:91:
                    0d:d2:0f:44:c5:a2:20:bd:5a:74:0f:9f:9b:ee:a2:
                    44:fb:a5:5b:79:de:5c:92:f4:30:82:08:13:27:fb:
                    ac:f1:fa:c1:a8:69:58:94:25:28:fd:ea:da:91:4c:
                    e1:0c:1a:37:f5:f1:4f:11:d2:a1:bc:9b:1c:4b:5a:
                    01:82:92:4a:09:74:d9:1f:70:c7:67:9e:97:3a:d2:
                    ce:9d:f7:7b:6d:12:77:ec:79:4f:b4:8e:6c:40:66:
                    67:83:c7:84:84:82:72:6f:0c:25:88:f7:a7:4a:e3:
                    eb:8a:c3:38:58:a0:7f:fb:d6:19:bf:ba:1a:58:75:
                    df:fb:73:4e:b1:a0:33:97:c6:77:8f:2c:3a:fd:94:
                    44:fd:fb:72:be:53:b3:1a:26:a8:73:70:11:da:3d:
                    ca:64:2b:b6:73:4d:dc:e9:d9:0c:35:f4:1e:7e:27:
                    4b:63:b9:9a:fd:4d:33:e5:73:ce:3d:a1:16:83:1a:
                    26:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:95:FE:EA:57:78:6C:4B:ED:26:2B:97:BF:BF:0A:B3:43:97:5C:4A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/32a5cbb0-d0cb-41d9-80de-a7e9c7e9cc1c/14972a169d27abbbc1d8a239ac2b44de8608deaf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:12:3800::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:96:66:b0:0e:25:14:aa:9d:d3:5c:72:c2:0c:82:14:0d:cf:
         e4:5e:f6:ac:84:0e:15:cd:9d:6c:76:dc:30:dd:df:62:b3:ef:
         ca:72:99:33:4d:80:19:04:d0:db:4b:ad:41:e3:50:7a:52:7d:
         0c:84:88:6a:ba:23:2b:46:a0:eb:ad:34:0e:92:8c:96:40:56:
         df:9b:10:39:64:9b:f0:5d:74:67:39:df:68:a4:92:f8:96:b8:
         b7:f4:74:b9:a0:44:a8:df:4f:94:96:a0:59:28:54:5e:94:95:
         09:96:80:bd:46:9c:1a:43:9e:04:bf:e2:c2:7d:47:55:50:8f:
         ff:ad:52:f9:01:25:f0:a8:3e:8a:30:c1:1e:b6:8c:b9:13:66:
         a2:68:94:7c:10:ad:f4:cc:15:d6:74:8e:3d:29:13:f1:ad:1c:
         50:ef:fc:8b:99:09:86:f0:6f:f0:18:47:f3:e2:f8:5e:e0:4a:
         f9:fd:9c:e6:26:fd:4a:36:a7:9b:70:d2:c1:ae:ba:4d:10:ba:
         5e:cd:2f:0e:f8:c4:fe:25:af:10:6f:ca:f1:64:69:54:cc:4a:
         c6:98:ef:cb:21:ca:6f:b4:2d:bf:e5:1f:a9:c2:81:0e:a3:67:
         e7:01:1c:78:c1:0a:af:13:c4:5d:1f:b1:29:ec:ea:98:a1:c9:
         05:da:30:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----