Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2e061bf8a6ab72177985fe7f7a8e28f1d757b7ab.cer
File:                     2e061bf8a6ab72177985fe7f7a8e28f1d757b7ab.cer (raw, json)
Hash identifier:          MvJLgrZhEAxpVySNnKL3FVzuGqjIqth13qXqSAHqa/4=
Subject key identifier:   34:9B:6B:4C:FD:76:8F:D4:65:72:65:06:06:7D:BA:C6:22:27:34:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       011092B1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/34d00044-d9bc-4394-ae1e-45e66fc8aec4/2e061bf8a6ab72177985fe7f7a8e28f1d757b7ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/34d00044-d9bc-4394-ae1e-45e66fc8aec4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 Apr 2024 20:36:21 +0000
Certificate not after:    Mon 08 Sep 2025 00:11:02 +0000
Subordinate resources:    AS: 270226
                          IP: 2806:407::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17863345 (0x11092b1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  8 20:36:21 2024 GMT
            Not After : Sep  8 00:11:02 2025 GMT
        Subject: CN=2e061bf8a6ab72177985fe7f7a8e28f1d757b7ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:2f:5d:8b:43:2a:bb:b5:9b:0f:b9:bb:dd:06:
                    06:9a:89:0d:6b:13:1a:09:aa:65:49:6e:a0:1b:b6:
                    aa:da:0c:c1:79:c3:a1:b4:16:cb:dc:c3:0a:a5:88:
                    2c:c8:5f:d9:32:8f:dc:fe:a3:8f:81:e5:7e:ad:0b:
                    fc:d6:e4:42:0e:0e:4f:e8:bd:bf:5b:0f:ac:cd:69:
                    2d:71:ff:b6:7a:8c:02:9b:74:ee:f2:8f:75:b1:98:
                    b0:bc:1b:da:55:2d:4d:0d:0a:dd:3c:12:44:44:c2:
                    73:2e:c5:8d:d2:57:90:b1:90:ef:ae:aa:24:94:f3:
                    3f:6d:1d:b1:89:59:90:c1:0d:6a:7a:75:3e:7a:8a:
                    51:66:b7:4b:db:96:d7:a4:18:7e:19:7e:43:54:25:
                    95:61:fe:1c:3e:fa:13:bb:6a:87:3d:27:4e:e5:4e:
                    00:e2:ee:7f:f6:39:9d:d7:1a:b3:a4:08:c0:fa:20:
                    2f:d5:73:78:72:62:7d:38:c8:4e:44:8f:26:8d:ea:
                    b5:db:d3:fd:72:29:62:57:55:c7:1b:b1:d8:73:39:
                    29:ff:fe:af:ec:e9:79:c4:43:76:77:a6:9e:04:1a:
                    b2:e8:03:1f:cf:e1:5d:e0:20:fb:d4:eb:1e:93:d5:
                    bc:a9:03:46:89:ba:e5:fa:d5:74:eb:c0:ef:2e:57:
                    90:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:9B:6B:4C:FD:76:8F:D4:65:72:65:06:06:7D:BA:C6:22:27:34:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/34d00044-d9bc-4394-ae1e-45e66fc8aec4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/34d00044-d9bc-4394-ae1e-45e66fc8aec4/2e061bf8a6ab72177985fe7f7a8e28f1d757b7ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2806:407::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270226

    Signature Algorithm: sha256WithRSAEncryption
         a8:7a:7a:67:95:65:f3:72:60:15:63:b4:01:40:ff:92:2b:be:
         f4:96:ef:54:53:44:80:fa:ea:9b:90:a0:d1:2c:d8:4f:06:70:
         12:5a:1e:72:e2:5d:9b:24:ef:ae:b8:a3:9c:19:f2:3f:10:60:
         60:3a:37:ae:a0:80:cc:4b:a8:49:62:bd:7a:bf:af:29:49:28:
         4d:d7:6e:15:05:b2:c7:0c:2f:d8:32:23:81:ad:60:91:98:0b:
         1f:1c:30:8b:2b:60:16:a2:91:11:90:59:7b:90:77:9c:46:94:
         6d:30:11:d1:cc:72:48:1b:31:c5:44:ff:d9:d5:c5:72:7a:4a:
         f0:7f:a3:5b:2f:60:e0:03:dd:71:bb:55:a9:16:a3:4d:14:0a:
         ba:db:bc:49:53:1c:4a:d2:25:72:b7:6d:50:55:8c:94:27:ea:
         d7:84:19:57:97:a2:a6:c9:46:81:70:5e:ac:84:ea:2a:30:bb:
         5e:56:07:93:47:0a:2f:01:ad:ab:0e:7a:4d:16:3c:0e:ce:1b:
         5d:18:0a:73:a1:fb:73:7a:71:68:df:8e:fd:41:af:e1:1c:a5:
         19:ab:2d:f7:0d:39:62:93:ec:57:21:bb:1a:aa:09:bf:74:78:
         56:62:00:b6:03:27:89:6e:de:81:13:f3:7c:fb:c7:7d:4a:c8:
         cf:25:f1:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----