Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1c232397ee3f9e5d955f98923e90c5c3e5d57985.cer
File:                     1c232397ee3f9e5d955f98923e90c5c3e5d57985.cer (raw, json)
Hash identifier:          vkAL1sU15uBJU4nHQsq82ryde8wLFUquGkUheqHoNjg=
Subject key identifier:   D3:9B:C9:E4:09:37:46:1C:64:58:CF:20:40:3C:1B:1D:A2:77:E8:B0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01093382
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/44e7f898-ca15-4865-a7ca-59493f60adad/1c232397ee3f9e5d955f98923e90c5c3e5d57985.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/44e7f898-ca15-4865-a7ca-59493f60adad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 02 Feb 2024 16:02:00 +0000
Certificate not after:    Sun 30 Nov 2025 20:56:25 +0000
Subordinate resources:    AS: 273181
                          IP: 2803:aa50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17380226 (0x1093382)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  2 16:02:00 2024 GMT
            Not After : Nov 30 20:56:25 2025 GMT
        Subject: CN=1c232397ee3f9e5d955f98923e90c5c3e5d57985
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:84:c6:1b:ce:5b:76:0a:08:c1:0f:e9:e8:
                    ac:3f:73:ac:0c:ba:e7:3e:0c:96:4c:dd:90:02:16:
                    39:ab:13:a1:df:5f:7c:59:bd:d7:fc:56:5e:50:c7:
                    82:5a:24:cc:ee:99:d8:a6:c8:20:3d:13:4f:89:be:
                    22:0c:5e:6c:c5:f8:46:93:c8:55:9c:14:1e:ec:13:
                    24:9c:41:64:b6:72:12:38:06:4b:19:08:97:5a:9c:
                    af:cb:0e:76:c9:d8:bb:00:60:9e:9d:4c:af:57:a0:
                    01:f9:b6:b9:53:89:66:80:d4:16:e0:f3:5a:5d:ba:
                    f8:3d:6d:b4:55:aa:3f:b2:22:1f:72:1b:eb:05:7c:
                    d4:c7:2a:47:1d:67:ae:2c:ef:9b:b3:22:ce:c4:1c:
                    03:69:d7:9b:19:92:ba:12:22:6e:33:e1:50:4c:45:
                    e5:75:13:2c:55:f3:e5:da:f5:a2:f6:26:3f:e3:bb:
                    dd:4b:a7:f3:fa:b2:f5:ab:4e:da:a7:25:21:41:14:
                    e8:56:cf:4a:57:6f:ce:ae:28:09:58:97:87:fb:ad:
                    7c:bc:cf:6a:5c:f3:03:77:95:df:14:28:32:af:39:
                    26:45:d7:23:dd:68:d4:9b:c8:7d:70:3b:6a:0c:b0:
                    7b:ae:3a:cb:48:c2:9f:22:39:11:77:91:c9:55:be:
                    a7:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:9B:C9:E4:09:37:46:1C:64:58:CF:20:40:3C:1B:1D:A2:77:E8:B0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/44e7f898-ca15-4865-a7ca-59493f60adad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/44e7f898-ca15-4865-a7ca-59493f60adad/1c232397ee3f9e5d955f98923e90c5c3e5d57985.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:aa50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273181

    Signature Algorithm: sha256WithRSAEncryption
         4a:b1:f6:cd:0b:87:70:f7:7d:e0:27:f2:18:08:39:8a:2d:3b:
         a1:8f:93:d5:09:7e:25:6e:a7:2e:cb:fb:a9:34:c0:cd:1f:d6:
         b8:0a:c5:5c:a8:02:bf:30:2a:65:d5:8d:5c:c2:5e:4d:53:8d:
         74:a7:22:e9:1e:a3:5e:5b:f4:d6:cc:d3:2b:9d:ce:04:df:a9:
         3e:65:ad:77:91:27:0a:ec:b3:c6:04:31:b2:4a:0b:87:8f:20:
         38:df:1c:17:2e:bf:53:e5:cf:af:52:37:c8:a6:87:23:d7:b1:
         f4:11:fe:4f:b5:07:f2:54:6a:d5:74:09:95:22:de:e1:7c:ec:
         f2:c0:9c:19:a5:55:47:5c:dd:e4:8c:ea:17:ca:38:29:a6:33:
         eb:4e:ff:31:98:0f:7f:5a:2d:54:a5:0e:ec:7b:63:9d:ca:f7:
         bf:86:9a:06:55:4c:a8:8d:f5:c2:71:4a:ac:5d:e8:53:11:91:
         19:ad:22:d3:34:f5:e0:94:3d:99:67:1b:10:53:37:08:98:14:
         2f:e8:80:84:42:85:55:66:66:2c:d2:a0:97:f9:38:e6:c8:e7:
         a6:5a:15:7c:cb:16:d4:7e:b0:8a:8c:6d:b7:f8:af:d8:b9:42:
         26:f3:86:72:ae:e5:3e:c7:97:f3:01:ae:be:8d:5e:7e:3d:05:
         d5:3f:44:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----