Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/155b538c76786066deee9490cef7008c3829598e.cer
File:                     155b538c76786066deee9490cef7008c3829598e.cer (raw, json)
Hash identifier:          6hx5nYWLA2TK9tAqcELtybY1yuvaMOfK9i7XAyx46YM=
Subject key identifier:   16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F82DF4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/155b538c76786066deee9490cef7008c3829598e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Sep 2023 21:34:54 +0000
Certificate not after:    Wed 25 Jun 2025 06:00:00 +0000
Subordinate resources:    AS: 273074
                          IP: 45.239.107.0/24
                          IP: 200.33.28.0/24
                          IP: 2803:2f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16264692 (0xf82df4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  4 21:34:54 2023 GMT
            Not After : Jun 25 06:00:00 2025 GMT
        Subject: CN=155b538c76786066deee9490cef7008c3829598e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:82:9f:49:a1:9b:bc:8b:29:6a:5c:b9:03:45:
                    54:1d:07:05:a8:46:cf:3f:09:81:cc:41:8a:4b:9b:
                    5c:a5:a6:c3:a5:8a:8a:35:b3:bf:a7:78:90:1d:9f:
                    c8:dc:a9:60:c1:df:68:4f:8d:81:e2:35:b8:98:40:
                    43:05:3f:9a:aa:65:44:00:c5:c3:7d:ee:a2:9e:8d:
                    27:32:88:42:6b:ec:56:df:50:94:ed:57:61:21:99:
                    88:6f:9c:05:3d:ad:ae:e3:43:ea:87:f0:17:07:af:
                    b0:17:3e:3e:57:27:2b:36:82:e6:4c:3f:e2:b5:18:
                    a0:ed:c9:63:d5:8b:da:82:57:d8:f1:2a:06:99:87:
                    0e:b4:5c:ab:d2:94:ad:d5:20:75:c6:fb:b2:08:27:
                    9b:25:40:52:d2:f4:4e:38:b5:b3:a1:ec:e2:31:c3:
                    c9:a8:31:99:2e:32:90:69:f2:e6:11:c9:90:b1:c7:
                    c6:ad:37:a1:c3:f4:d9:b5:6d:31:9e:f6:ce:df:30:
                    09:62:12:ec:02:48:c3:d7:5e:65:5a:18:d7:a1:b1:
                    16:1a:dd:ee:aa:da:8b:88:38:2e:0d:58:71:0f:7d:
                    9f:f3:40:a7:9d:b4:c9:60:b0:86:55:38:d0:6e:f6:
                    92:9b:a3:f1:bb:bb:ea:44:7a:27:cb:cc:97:e1:ae:
                    74:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:CA:3F:12:15:05:8A:99:58:0B:3F:E2:E8:1D:86:05:A4:33:B2:C7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/22efec2f-3f07-44c2-a400-0dcfaecc6d98/155b538c76786066deee9490cef7008c3829598e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.107.0/24
                  200.33.28.0/24
                IPv6:
                  2803:2f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273074

    Signature Algorithm: sha256WithRSAEncryption
         c0:fe:91:b0:c2:14:fb:0d:f7:f0:c6:38:d0:0e:5f:4a:28:61:
         4e:7e:33:01:0f:57:b3:38:df:3b:a8:19:90:f0:11:e8:6f:87:
         f0:8f:7f:75:39:69:73:ca:ad:14:19:a5:18:79:89:05:a8:f6:
         75:bb:ca:37:30:f8:21:42:9d:1c:19:67:d1:02:d4:27:31:b4:
         a8:ec:20:9a:60:31:e8:4a:ec:a9:61:16:3f:41:89:bb:44:a8:
         ad:73:32:ad:15:1e:1e:7f:f2:95:87:a1:39:22:3e:8c:52:84:
         f4:e5:cf:50:38:48:c5:1e:9d:74:d2:95:9e:63:4e:34:f8:4e:
         a9:be:64:62:cb:b2:82:f8:2e:cc:fd:19:82:ad:8f:91:8e:21:
         8c:9f:79:91:2a:d9:c2:6d:09:cc:9c:9a:bd:fd:94:3a:c5:91:
         7e:00:75:bd:dd:02:8a:d0:76:59:48:88:a8:f9:e6:28:b9:46:
         64:8f:cf:be:c5:1c:c2:a7:d6:8c:a6:93:4b:58:80:1d:c9:ad:
         03:70:0f:16:1e:50:9c:b8:4b:2d:d0:34:26:ad:7c:b5:3c:8f:
         70:08:1e:80:98:52:cf:8d:8d:28:5d:8f:d4:35:a0:04:8d:b5:
         31:b7:b2:7f:3f:61:e0:df:6e:09:71:c6:e3:e3:05:2a:d8:91:
         ae:2e:f9:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----