Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1e577dbdcc4400c71ab8157ccfe6b17a9a083407.cer
File:                     1e577dbdcc4400c71ab8157ccfe6b17a9a083407.cer (raw, json)
Hash identifier:          4xz1BjrSn9IzYb5hnWHtbwGdow7OqWbvDVa7YulplzI=
Subject key identifier:   65:46:5A:32:E7:BA:80:46:DE:D6:96:0B:1B:B8:D3:9E:28:46:BC:6C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F970C9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8fc9dd72-e0c1-4fc9-b57b-2cea76aeb464/1e577dbdcc4400c71ab8157ccfe6b17a9a083407.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8fc9dd72-e0c1-4fc9-b57b-2cea76aeb464/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Sep 2023 16:22:18 +0000
Certificate not after:    Tue 25 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 21578
                          IP: 2801:0:1c0::/45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16347337 (0xf970c9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 13 16:22:18 2023 GMT
            Not After : Mar 25 06:00:00 2025 GMT
        Subject: CN=1e577dbdcc4400c71ab8157ccfe6b17a9a083407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:2c:01:09:38:9d:74:98:a6:6c:9a:d7:13:ce:
                    4f:ed:5e:62:b0:dc:e0:8e:e8:1a:9c:95:ed:6f:7f:
                    88:2a:0c:d7:7d:04:4e:c1:09:bf:c3:e7:99:52:4a:
                    81:5b:c9:cb:a6:fe:fb:98:a4:c2:e0:3b:41:16:7b:
                    b3:cd:8e:c5:b5:c7:6c:8c:ca:3d:70:25:75:8a:f9:
                    8f:5c:50:f3:c5:2c:33:89:95:9e:93:c4:ff:ba:0e:
                    ba:01:8d:1b:79:60:c8:96:06:e3:a9:17:73:91:a7:
                    3d:8d:51:bd:ed:2f:32:19:90:76:69:e2:f9:6a:a9:
                    ae:bb:83:e0:68:1a:83:22:f1:e1:33:16:5f:1f:c2:
                    9f:75:82:c5:33:18:5c:fe:45:dc:3e:de:b6:9e:26:
                    e2:50:a4:01:cc:34:fd:ad:05:7c:90:cc:96:3b:84:
                    9f:a5:de:0f:81:4b:de:f8:8c:85:24:b1:eb:df:93:
                    3c:fb:da:33:01:f6:30:d4:bd:41:44:10:d5:d3:8c:
                    71:c7:8c:ce:90:75:c4:79:56:42:30:89:01:ab:57:
                    1f:7c:d3:51:3e:17:88:69:df:c8:76:8b:7c:64:77:
                    83:e9:df:fe:bf:41:65:93:c3:18:27:26:98:8b:e2:
                    74:c0:38:e9:5f:d8:ae:9f:9e:ab:1e:ca:89:d4:db:
                    f7:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:46:5A:32:E7:BA:80:46:DE:D6:96:0B:1B:B8:D3:9E:28:46:BC:6C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8fc9dd72-e0c1-4fc9-b57b-2cea76aeb464/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8fc9dd72-e0c1-4fc9-b57b-2cea76aeb464/1e577dbdcc4400c71ab8157ccfe6b17a9a083407.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:0:1c0::/45

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  21578

    Signature Algorithm: sha256WithRSAEncryption
         87:7e:99:9c:af:4a:07:ae:8c:77:3c:52:e6:24:df:a3:94:d1:
         b1:86:bc:0c:10:dd:1c:3b:1b:0d:8b:1b:b6:d5:96:52:24:3e:
         13:b5:9f:c3:27:15:58:16:51:6a:6d:e4:d5:c4:69:ff:95:c6:
         5c:70:8d:ed:86:80:eb:bf:0b:a2:c5:bf:09:ff:c8:63:f9:60:
         8b:fd:f7:c5:e9:e2:46:be:13:35:76:81:db:39:6f:42:ee:f6:
         07:5d:d7:30:92:81:45:f5:54:35:d6:a4:43:be:22:7d:0e:83:
         9a:32:95:3e:91:30:4f:c5:d0:5d:e0:b3:7b:4d:a2:dd:36:2c:
         00:38:c8:f6:78:dc:0a:61:16:70:3b:4e:75:02:1f:09:28:b3:
         37:41:36:b3:ae:ef:aa:61:2a:f7:3a:97:78:1d:2d:c5:76:33:
         56:3b:d0:e6:7c:61:1d:7e:54:ef:a5:1b:ac:2c:b4:a2:27:b4:
         ee:fc:97:25:33:2e:a8:8b:19:bf:e4:2e:87:ff:55:08:ff:e9:
         4f:fe:80:0a:42:17:aa:0d:41:57:b5:84:14:6b:e5:83:d0:e3:
         fc:24:85:df:ee:56:be:64:05:3a:78:1a:7d:b5:02:62:b4:f0:
         da:22:fd:ef:36:75:28:d8:43:ba:28:1a:67:e2:18:8e:0a:5c:
         cf:0d:e9:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----