Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1b3f92f948b05afac81423708f10e627723f3303.cer
File:                     1b3f92f948b05afac81423708f10e627723f3303.cer (raw, json)
Hash identifier:          ald7o9pOoe3QGO0tsvN53astzwwvrrvXXRl0tQS1pOI=
Subject key identifier:   B3:09:54:B7:07:6C:01:EE:EC:03:EC:AF:71:22:59:B9:04:43:C6:C9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ED1CE0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/372a67dd-2683-4e50-ab41-439d2f2bd99a/1b3f92f948b05afac81423708f10e627723f3303.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/372a67dd-2683-4e50-ab41-439d2f2bd99a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Jun 2023 21:09:00 +0000
Certificate not after:    Tue 09 Jul 2024 18:59:05 +0000
Subordinate resources:    AS: 263680
                          IP: 201.131.97.0/24
                          IP: 2801:13:a000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15539424 (0xed1ce0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  7 21:09:00 2023 GMT
            Not After : Jul  9 18:59:05 2024 GMT
        Subject: CN=1b3f92f948b05afac81423708f10e627723f3303
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:32:77:51:89:78:13:d0:74:8b:f7:13:80:03:
                    a6:1c:b4:ee:07:75:6f:91:b8:50:f2:0e:c7:17:c3:
                    94:95:8c:21:db:d3:d3:38:9d:45:14:29:28:ac:11:
                    14:fb:26:c9:11:8e:0d:8a:ad:d1:c4:71:08:5d:40:
                    32:c8:05:9b:21:d1:3f:92:10:de:d6:63:d9:1a:32:
                    f2:47:f6:b9:89:bd:0d:9b:ab:7b:8f:a5:dc:f6:f4:
                    43:69:4b:a7:f6:92:c4:6a:37:a4:82:69:ea:d0:03:
                    0d:00:62:8e:13:10:1c:f0:a2:0b:4c:b4:9f:d3:89:
                    60:89:08:f2:62:7c:73:6b:f4:27:39:91:1d:32:ce:
                    e5:e6:88:c9:19:c7:d8:b0:b1:68:42:34:f0:97:4a:
                    e7:de:aa:27:63:cb:62:7f:d9:ce:b0:fb:aa:a6:92:
                    18:49:dc:72:e8:26:2e:4e:b9:b2:ef:90:71:f0:22:
                    c0:6f:11:7e:40:04:6d:b7:23:44:91:dc:fe:1b:6b:
                    9b:29:88:ad:76:d8:92:bf:f4:82:d5:a9:f3:12:6b:
                    a0:f1:3a:ad:79:3b:5d:0a:86:9f:3d:f3:ca:07:3b:
                    6b:55:4b:19:59:89:58:39:7c:5c:0a:ce:2f:d2:c6:
                    5a:d4:4a:d6:3d:90:40:10:c9:30:87:60:fb:2b:68:
                    57:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:09:54:B7:07:6C:01:EE:EC:03:EC:AF:71:22:59:B9:04:43:C6:C9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/372a67dd-2683-4e50-ab41-439d2f2bd99a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/372a67dd-2683-4e50-ab41-439d2f2bd99a/1b3f92f948b05afac81423708f10e627723f3303.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.97.0/24
                IPv6:
                  2801:13:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263680

    Signature Algorithm: sha256WithRSAEncryption
         b1:28:e6:c1:b6:10:ed:61:dc:5e:58:ef:a1:ea:68:3c:1d:b3:
         42:ef:33:7a:44:ba:43:2a:65:ca:b7:58:22:7f:42:e7:6a:6e:
         6e:44:b9:31:ec:18:a7:2a:43:ab:aa:f5:6d:d9:d6:a7:8b:bd:
         49:99:87:f6:8e:ed:46:c4:7d:31:40:33:72:82:28:68:5b:f6:
         fe:18:6b:73:0d:7c:3e:e6:28:29:db:52:0e:de:15:13:30:28:
         9e:08:3d:df:4a:a4:c0:f9:e3:0b:8e:42:0d:b6:36:c0:1e:69:
         69:85:d8:9d:38:f2:9f:21:39:93:b4:bf:d6:6e:a4:b3:15:c2:
         17:67:f4:6a:ca:ff:a8:c0:91:0c:1b:bb:03:66:2d:f1:ef:48:
         ac:39:4c:9e:93:a8:2e:88:99:58:1f:82:c5:04:4b:4e:8a:ff:
         95:2e:cc:40:45:6f:f9:f7:5f:ef:94:c6:f8:78:b9:bd:b2:10:
         63:18:7f:94:aa:bd:a0:30:00:3f:2d:9c:3b:87:d3:00:60:71:
         85:9d:a7:a4:3c:70:37:1c:32:e3:51:93:25:42:53:48:98:9b:
         30:37:2e:ad:f3:10:14:58:04:c5:b4:05:ff:7c:fc:6c:a4:a0:
         ea:3c:2e:85:52:a5:d8:a8:e4:cb:95:96:63:d6:f2:91:12:34:
         01:77:46:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----