Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2eb1010e61a66449353d058107237d9f6dcf1fac.cer
File:                     2eb1010e61a66449353d058107237d9f6dcf1fac.cer (raw, json)
Hash identifier:          B5W/OGDj4INEUN0wk0eApIDWayOPrBRT7gFIlGqWaJ4=
Subject key identifier:   5C:16:8D:FC:1D:14:F5:26:87:1D:CE:D2:66:88:84:33:89:F8:86:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE73F7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1594e2b8-87a2-46b3-be95-c73e005b6106/2eb1010e61a66449353d058107237d9f6dcf1fac.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1594e2b8-87a2-46b3-be95-c73e005b6106/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 16:18:17 +0000
Certificate not after:    Sun 15 Dec 2024 13:17:16 +0000
Subordinate resources:    AS: 28310
                          IP: 170.254.148.0/22
                          IP: 177.38.32.0/21
                          IP: 189.39.112.0/20
                          IP: 200.215.168.0/22
                          IP: 2804:724::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16675831 (0xfe73f7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 16:18:17 2023 GMT
            Not After : Dec 15 13:17:16 2024 GMT
        Subject: CN=2eb1010e61a66449353d058107237d9f6dcf1fac
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:a3:5a:07:57:a1:7f:89:78:b9:ef:c2:30:01:
                    23:c3:21:69:5c:30:ee:71:06:8a:42:b7:f9:1f:81:
                    e4:7f:1b:62:e5:da:77:bd:16:c1:15:d9:ad:22:c9:
                    be:8d:1d:c6:1f:b8:22:0a:cb:f7:00:bb:d6:38:97:
                    15:44:db:34:91:d0:cc:11:e6:4b:1d:f5:9c:82:5d:
                    d6:4b:99:73:f2:e7:b3:cd:06:17:36:4c:c1:9d:4b:
                    df:49:60:40:23:ed:32:31:8a:9b:ba:0d:b4:9d:e1:
                    1c:06:77:ee:96:1a:48:98:1f:8c:ef:18:91:0e:16:
                    82:3e:40:bb:e6:ee:98:bb:a7:ee:eb:70:74:98:1c:
                    0a:ca:5b:87:39:7a:fa:c8:27:af:ee:2f:9a:66:f8:
                    87:a7:8f:d1:83:60:87:3b:2e:18:67:56:09:92:dc:
                    99:e7:2f:12:37:b1:60:76:a4:c9:10:df:cb:7e:d8:
                    72:4a:f1:ab:cd:77:66:67:03:fe:69:23:ea:dc:b3:
                    df:ef:12:3b:df:44:32:f8:e4:4b:d2:ee:4b:ab:bf:
                    b7:f5:53:e8:42:f1:bf:7a:cf:1a:e1:7e:58:2d:ff:
                    97:15:00:54:ce:84:13:56:08:52:02:06:f1:e2:f5:
                    90:e3:db:9d:7f:ce:db:37:6d:b1:f6:4a:5b:d7:3c:
                    52:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5C:16:8D:FC:1D:14:F5:26:87:1D:CE:D2:66:88:84:33:89:F8:86:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1594e2b8-87a2-46b3-be95-c73e005b6106/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1594e2b8-87a2-46b3-be95-c73e005b6106/2eb1010e61a66449353d058107237d9f6dcf1fac.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.254.148.0/22
                  177.38.32.0/21
                  189.39.112.0/20
                  200.215.168.0/22
                IPv6:
                  2804:724::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28310

    Signature Algorithm: sha256WithRSAEncryption
         74:8d:4f:cd:94:24:d8:b8:df:4e:7e:b9:74:17:bc:e4:a8:e7:
         5c:fa:eb:ce:d0:f6:ab:43:c9:67:5b:4f:42:b4:31:f7:44:23:
         7f:9f:5c:28:31:47:2c:06:bb:23:a6:66:e2:1b:eb:17:51:61:
         68:96:05:5f:a0:6a:58:1e:0d:81:00:0a:1e:31:56:b5:40:45:
         79:39:4a:83:25:45:41:9c:83:14:82:d4:66:ae:0c:d5:00:8d:
         79:6f:05:bf:21:82:5a:64:71:34:d6:59:e6:f6:c9:36:6d:03:
         aa:37:1f:e9:a8:ef:eb:a7:b4:fb:7a:f0:30:44:a3:fb:f3:bf:
         e0:96:94:b9:de:2e:fe:53:c3:43:f7:a1:25:6b:ce:21:a6:d9:
         56:10:62:bc:ad:71:39:8a:c1:f7:01:d7:6b:16:28:5a:5a:d5:
         1a:aa:66:0b:23:83:70:00:bf:e7:fa:f0:ca:49:a6:ad:11:1e:
         be:61:0c:ee:0e:f5:dc:8a:4c:d5:4d:17:a5:03:bc:9f:aa:8f:
         84:b9:56:2a:94:8d:84:d4:3f:ad:34:31:72:a8:db:8e:3d:f7:
         12:37:43:ac:90:05:25:c6:07:17:6c:7f:55:76:33:91:28:c4:
         ae:44:14:06:8f:52:84:3b:0a:d6:7a:83:09:0b:58:a7:14:5c:
         31:52:06:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----