Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/21031ad4b7a5e84844822326e2f9876295c41508.cer
File:                     21031ad4b7a5e84844822326e2f9876295c41508.cer (raw, json)
Hash identifier:          RfZCrtG1LdQQuEYz8dQG1SWvss0ZAZjrNgRUxAMjpYM=
Subject key identifier:   07:A5:F5:2B:06:17:DA:09:E5:1F:B1:58:FE:FC:05:59:F3:DE:2E:BB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B6590
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d7355f35-4455-4f54-8b0a-e0e5df8469ff/21031ad4b7a5e84844822326e2f9876295c41508.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d7355f35-4455-4f54-8b0a-e0e5df8469ff/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 16:20:04 +0000
Certificate not after:    Mon 23 Dec 2024 16:55:55 +0000
Subordinate resources:    AS: 262158

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17524112 (0x10b6590)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 16:20:04 2024 GMT
            Not After : Dec 23 16:55:55 2024 GMT
        Subject: CN=21031ad4b7a5e84844822326e2f9876295c41508
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:39:17:c1:9b:ae:c5:b4:53:73:b0:d9:ac:dd:
                    90:7b:b6:c2:58:e8:89:b6:bb:44:85:6c:fa:4b:12:
                    e7:bd:06:c1:85:4a:de:eb:5f:63:4d:55:59:5e:dd:
                    a0:b7:a8:4c:bd:e7:14:58:fa:a7:69:ef:ca:ac:30:
                    3a:44:02:02:68:cc:74:d7:b5:bb:e7:46:03:74:1d:
                    c5:d6:12:9d:8a:6e:94:5d:56:10:f1:42:e9:d0:6a:
                    4e:5a:ba:29:af:b7:d7:81:25:a7:fc:a7:fb:64:bf:
                    70:68:16:d1:3d:d8:94:e5:0d:53:20:8a:3f:34:83:
                    d5:ea:a4:fa:8d:66:1c:1c:bd:94:8e:f1:b0:de:5a:
                    4c:2a:df:6d:82:31:30:7f:23:e5:29:7c:5e:4c:64:
                    80:60:bc:23:3c:3f:88:ff:dc:ff:1f:76:54:b1:df:
                    55:28:6b:14:ab:7d:71:e7:f0:4d:94:20:33:3f:c5:
                    6c:4c:60:08:cc:42:69:fc:0e:42:97:ab:61:2b:cc:
                    18:9b:dc:ed:88:8e:0a:a9:0b:67:53:b2:24:d3:1a:
                    96:d9:f1:5e:6e:1a:9a:08:df:df:ea:b6:6b:8a:68:
                    24:05:71:46:df:c2:3e:4b:c9:d5:aa:3a:54:af:b2:
                    55:d5:4e:bd:61:8a:1f:5e:6b:e7:09:ba:00:09:66:
                    87:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A5:F5:2B:06:17:DA:09:E5:1F:B1:58:FE:FC:05:59:F3:DE:2E:BB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d7355f35-4455-4f54-8b0a-e0e5df8469ff/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d7355f35-4455-4f54-8b0a-e0e5df8469ff/21031ad4b7a5e84844822326e2f9876295c41508.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262158

    Signature Algorithm: sha256WithRSAEncryption
         36:15:6b:6a:3d:71:73:f7:ca:ce:87:d2:70:94:c9:1e:a4:0b:
         be:39:42:1a:fb:74:97:d2:2b:43:bc:49:f2:3e:9a:c2:dc:67:
         a8:88:0f:fd:49:43:c8:29:b0:4a:02:86:c1:67:46:88:0e:cd:
         ec:3a:7a:d4:3b:cf:dc:42:12:f3:b1:86:8f:c7:a5:42:b9:4c:
         18:ac:4d:f6:a5:b4:3e:7d:ed:f9:dc:4a:fe:97:3a:ca:d1:94:
         55:89:8a:1c:bd:14:6c:5c:71:5d:7e:6a:ea:0f:58:c0:68:9b:
         6e:00:2a:2a:3f:bb:c0:0b:d7:3f:df:36:51:82:b6:cf:33:20:
         9c:1a:a8:72:d1:3f:70:be:f0:35:d4:9f:b3:e6:62:25:a9:df:
         ce:d9:e5:53:45:d5:e4:f6:c0:79:ad:f0:1e:fb:5c:c2:3f:df:
         44:44:e2:c7:37:25:b2:36:43:9e:cf:da:b9:42:80:07:10:ad:
         59:87:21:0e:c3:6b:08:db:b2:fa:de:54:16:70:ad:b3:17:2c:
         e2:29:91:54:c1:d6:66:26:b5:75:5c:dc:2d:f3:09:96:d3:99:
         3d:ad:54:63:c7:d9:fb:58:0e:64:cc:92:66:4d:ab:26:5a:3b:
         87:07:d4:62:6c:d3:e8:e8:92:b5:99:ee:00:ff:f5:ae:ff:4c:
         06:c2:d2:11
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----