Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/25665bf6b98e7c2c2572665d358e9df1dd94628a.cer
File:                     25665bf6b98e7c2c2572665d358e9df1dd94628a.cer (raw, json)
Hash identifier:          gAFJdbtdDq83jGL/kkcPs7dfJt413SEYZCwndrjjHko=
Subject key identifier:   76:07:66:1A:59:13:1F:61:00:AD:86:98:A8:A3:33:A6:C3:E6:48:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EDB8CA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/392cbcee-e573-49ba-a839-8daedcd89439/25665bf6b98e7c2c2572665d358e9df1dd94628a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/392cbcee-e573-49ba-a839-8daedcd89439/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 14 Jun 2023 18:22:25 +0000
Certificate not after:    Mon 26 Aug 2024 17:01:21 +0000
Subordinate resources:    AS: 262247
                          IP: 200.23.65.0/24
                          IP: 201.221.126.0/24
                          IP: 2801:1a:9000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15579338 (0xedb8ca)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 14 18:22:25 2023 GMT
            Not After : Aug 26 17:01:21 2024 GMT
        Subject: CN=25665bf6b98e7c2c2572665d358e9df1dd94628a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:85:b1:af:f2:0b:96:ed:21:57:d0:cf:33:9d:
                    91:15:fd:42:c4:fd:fb:4c:ff:11:0c:e1:4e:29:b0:
                    e2:72:c7:2d:42:9b:65:2c:52:7c:33:14:6c:ed:86:
                    19:b1:17:56:b8:91:97:2b:96:fc:41:f7:0f:a2:59:
                    34:fa:7e:db:19:c8:d4:68:2e:b1:fe:76:74:ca:91:
                    88:4d:2f:25:76:12:16:95:6d:1e:13:ee:4d:a6:09:
                    50:a6:fc:5a:32:48:e1:0b:2d:4a:cd:5e:a1:27:9f:
                    2c:82:03:2f:1c:81:89:e1:51:a7:8c:de:05:2d:4f:
                    4f:a2:f9:86:6b:73:f8:92:7e:69:bf:fc:e0:ed:f4:
                    8f:c8:2c:e4:87:88:b4:dd:f7:fd:5a:f0:7f:af:b7:
                    3a:41:0c:b9:e4:0f:ad:bd:30:19:16:8b:41:60:b3:
                    3e:28:ae:44:c8:16:46:c1:5a:8e:6c:08:d4:16:52:
                    51:9b:07:f4:77:18:9b:95:e2:b6:59:50:cb:e3:d9:
                    47:8b:ba:8b:31:ca:02:00:70:d6:f7:72:3e:48:bb:
                    6e:13:2d:70:47:e9:ff:2a:ad:72:c3:6c:56:1a:31:
                    77:e8:17:b0:a5:7d:82:4f:14:17:66:ef:02:6c:c8:
                    c8:95:07:32:86:fe:d4:c5:9d:a0:f1:e8:22:62:62:
                    12:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:07:66:1A:59:13:1F:61:00:AD:86:98:A8:A3:33:A6:C3:E6:48:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/392cbcee-e573-49ba-a839-8daedcd89439/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/392cbcee-e573-49ba-a839-8daedcd89439/25665bf6b98e7c2c2572665d358e9df1dd94628a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.23.65.0/24
                  201.221.126.0/24
                IPv6:
                  2801:1a:9000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262247

    Signature Algorithm: sha256WithRSAEncryption
         65:e3:36:55:9e:95:0d:6f:3f:43:8e:a2:fb:f6:97:1f:42:51:
         eb:7e:57:73:03:d2:0c:01:44:3f:37:44:ed:1f:a7:f1:98:e7:
         81:53:14:df:24:31:2c:7d:2d:71:ec:72:36:2c:26:b1:33:be:
         8a:1c:8d:9e:2f:cd:fb:b0:79:32:37:b5:f4:95:81:75:7d:d4:
         f7:14:59:6b:47:f6:2e:f9:73:9c:f2:e5:d3:37:b4:8f:08:af:
         0a:80:31:0b:78:f5:6e:37:a2:cb:15:33:4b:e6:bd:c3:17:e8:
         67:40:b7:d6:4d:58:a4:c6:ca:14:87:76:45:b7:02:8d:e8:67:
         fd:87:63:a2:e7:6f:02:d8:fb:92:67:ef:f9:60:e1:ed:4f:e4:
         31:ef:61:83:09:9e:fa:26:f3:f0:3c:fc:be:a4:75:bd:a3:4b:
         2e:06:c2:a7:49:25:de:9a:fe:07:39:61:9a:7d:da:c4:85:bf:
         83:2b:93:19:3a:13:9b:75:ad:1d:b3:53:84:27:68:69:6c:8f:
         58:ec:79:3e:9f:ff:f8:23:35:e0:3b:92:49:1e:1e:23:aa:6f:
         ae:76:09:f4:35:4a:25:03:41:ae:b4:02:02:ce:91:1e:ae:4f:
         37:90:99:a3:ee:9d:e8:b9:36:72:98:69:4c:b3:c1:88:ef:98:
         a6:9a:39:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----