Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1ef38238da0435aadbec483ee719be1404272370.cer
File:                     1ef38238da0435aadbec483ee719be1404272370.cer (raw, json)
Hash identifier:          CzmNxviqucXzT8+QsX1TYPdYMCxr4EQRXsuGLbJ/4XY=
Subject key identifier:   38:28:E1:59:0B:C2:FF:46:4C:CA:40:CA:4F:8A:D8:9E:8C:59:DD:A3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F04024
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/969ef44d-0c28-40c1-a137-7de9f71d42f0/1ef38238da0435aadbec483ee719be1404272370.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/969ef44d-0c28-40c1-a137-7de9f71d42f0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 01 Jul 2023 05:29:50 +0000
Certificate not after:    Mon 07 Apr 2025 14:53:32 +0000
Subordinate resources:    AS: 272894
                          IP: 45.177.196.0/23
                          IP: 2803:3a60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15745060 (0xf04024)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  1 05:29:50 2023 GMT
            Not After : Apr  7 14:53:32 2025 GMT
        Subject: CN=1ef38238da0435aadbec483ee719be1404272370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:22:6b:0c:05:2a:de:d3:45:fe:b1:61:e4:44:
                    66:2d:15:67:32:1f:cb:6c:fc:aa:a2:1e:79:5a:b9:
                    1d:7d:03:92:ad:c7:94:cc:8d:d0:78:0d:db:9b:8d:
                    12:32:91:62:d4:c2:86:c1:d3:f6:34:34:15:5a:84:
                    f3:0d:ee:96:a2:6b:61:c8:1a:6a:fc:aa:ab:9a:5d:
                    0b:15:26:7e:41:ca:d8:da:f6:37:f8:a8:04:ac:f8:
                    32:26:7b:0e:7f:2d:c9:37:5c:dd:0f:23:e7:a5:10:
                    3c:af:bb:01:9c:2b:c3:f9:c9:fa:c4:4b:68:17:c0:
                    66:bd:52:c6:6a:78:36:8e:91:a4:49:42:b2:de:ed:
                    6a:66:f4:f9:00:c7:09:40:c6:24:15:e0:93:5a:41:
                    33:ff:87:5d:9d:cf:e0:4e:6d:c9:b8:54:72:f5:1e:
                    ea:66:82:34:65:d7:69:85:cb:aa:63:ec:28:a4:4d:
                    61:07:31:f4:db:98:1c:6d:8a:c0:7a:4e:70:a6:53:
                    ac:82:2a:c9:56:15:f3:7d:dd:a4:9c:2e:05:70:53:
                    0e:8f:0d:c0:71:ed:70:f8:36:6b:c7:10:fb:4e:e7:
                    45:3e:46:3e:90:da:63:e7:b5:a4:84:55:d8:51:6a:
                    d3:5b:d3:c1:53:9c:a6:3e:54:7c:70:66:4a:76:2a:
                    59:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:28:E1:59:0B:C2:FF:46:4C:CA:40:CA:4F:8A:D8:9E:8C:59:DD:A3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/969ef44d-0c28-40c1-a137-7de9f71d42f0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/969ef44d-0c28-40c1-a137-7de9f71d42f0/1ef38238da0435aadbec483ee719be1404272370.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.177.196.0/23
                IPv6:
                  2803:3a60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272894

    Signature Algorithm: sha256WithRSAEncryption
         47:bc:c5:bc:56:71:a4:98:81:21:5b:d3:47:ac:6b:79:18:5b:
         7e:b1:1e:3d:53:0d:dc:7d:eb:6d:f0:8c:88:6a:a9:c6:6c:ee:
         c4:69:55:00:bf:d5:2a:06:59:36:08:51:a5:0f:88:a7:ba:af:
         6e:29:60:d0:54:e6:0e:49:18:1e:d3:70:72:4f:f3:a9:11:85:
         d8:09:ae:d4:03:88:ec:ca:87:5b:c8:d1:2c:39:fa:fe:de:d8:
         d3:17:7a:3f:53:8a:27:e6:15:4d:25:c4:a6:9b:28:74:a4:74:
         2c:7c:68:d1:31:b9:a6:46:68:79:73:78:0c:47:f4:bc:bf:8d:
         02:0f:f8:ba:04:b2:62:9c:02:20:1f:7a:21:b7:7b:b9:8f:5c:
         3f:45:0a:d7:86:1f:98:81:64:41:0f:9f:26:2a:ee:29:e2:a4:
         11:4a:fe:3a:4e:fb:59:64:d0:0c:4f:2d:f5:50:8f:77:17:61:
         5f:24:f3:c2:b0:2d:7b:82:e3:11:95:e1:fb:9d:5d:ac:52:a5:
         61:d5:f9:47:92:25:a0:34:8b:c7:70:6a:0c:9d:db:a2:8c:ac:
         d4:b1:6a:f5:29:5b:dc:64:93:22:54:72:76:43:50:b7:0b:14:
         32:af:f1:2c:d7:e5:b4:db:81:19:94:7b:e6:8d:9f:d7:61:7f:
         ad:bb:96:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----