Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/32928891e26b938ffcfcd5c6ab91b6ec15df8a35.cer
File:                     32928891e26b938ffcfcd5c6ab91b6ec15df8a35.cer (raw, json)
Hash identifier:          pfUXl1aGj9NpyjguDlZtQC0Vv/pLlBSZpEH+thviJNM=
Subject key identifier:   2A:A5:D3:96:88:47:31:39:98:58:96:E9:DA:78:35:8F:00:3F:5D:0D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F21011
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c3c5c308-451d-465f-8911-152d5de4d138/32928891e26b938ffcfcd5c6ab91b6ec15df8a35.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c3c5c308-451d-465f-8911-152d5de4d138/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 12:26:01 +0000
Certificate not after:    Wed 18 Sep 2024 18:41:48 +0000
Subordinate resources:    AS: 28097

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15863825 (0xf21011)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 18 12:26:01 2023 GMT
            Not After : Sep 18 18:41:48 2024 GMT
        Subject: CN=32928891e26b938ffcfcd5c6ab91b6ec15df8a35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:f2:14:7e:f9:7f:20:69:db:d0:b2:4c:0c:34:
                    04:4e:c3:63:c7:ea:8f:d8:1f:b0:a9:5b:d5:44:4d:
                    01:63:a9:ef:18:9c:15:83:74:19:93:c7:a7:93:55:
                    eb:20:0d:23:f5:18:1f:43:53:eb:8c:85:e6:1d:39:
                    11:4c:41:3e:ca:34:26:2a:3a:69:65:9c:6b:b3:52:
                    e1:68:1e:9c:e3:31:31:01:b3:2c:37:d5:56:8e:98:
                    b9:6c:2c:e3:8a:a7:9f:75:e7:21:55:2d:ec:90:7e:
                    77:38:38:99:ae:1c:2f:39:a1:f5:93:53:0c:98:96:
                    c6:98:0c:26:e1:42:38:87:cc:d9:83:61:82:0f:73:
                    82:33:e6:8a:c3:f8:ef:23:78:3c:74:2e:4a:04:38:
                    0b:41:c8:ce:df:8f:40:c6:9a:a9:b2:f3:f2:1a:fd:
                    21:d4:a1:58:09:b8:ed:57:91:7e:54:36:25:e7:6f:
                    a1:7e:f5:40:a0:85:7e:53:1f:49:a3:19:e7:63:dc:
                    94:22:45:a6:c2:4c:77:bc:93:14:e9:2b:b5:b9:45:
                    52:2e:fb:ea:e5:d4:2d:b1:ab:47:8f:4b:56:73:62:
                    ea:22:20:d2:2f:ee:ca:d6:d6:c3:ed:ba:c4:e3:97:
                    91:c5:69:0b:72:c3:69:e9:a4:56:fc:19:d2:3e:1d:
                    2e:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:A5:D3:96:88:47:31:39:98:58:96:E9:DA:78:35:8F:00:3F:5D:0D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c5c308-451d-465f-8911-152d5de4d138/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c3c5c308-451d-465f-8911-152d5de4d138/32928891e26b938ffcfcd5c6ab91b6ec15df8a35.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28097

    Signature Algorithm: sha256WithRSAEncryption
         19:fb:5c:99:c8:dd:16:d7:c2:28:4e:16:9c:db:0f:44:36:9c:
         36:a4:b1:9a:89:02:57:0c:29:71:6b:47:6a:b7:b2:5b:41:1b:
         e9:b9:25:93:87:11:72:91:a6:11:5d:cf:aa:48:26:d6:a5:e6:
         9f:46:7a:74:7a:2a:38:ff:f8:0c:a6:6b:5d:20:a2:d6:a4:11:
         a0:6f:e5:4c:fc:75:e3:af:db:f9:71:44:fc:3e:ed:16:45:00:
         af:03:3f:58:19:21:b7:20:cb:b6:c3:06:08:db:60:68:80:7b:
         8c:c5:e7:e9:42:88:13:53:cd:3b:9a:1b:4b:fc:87:0d:31:43:
         28:f5:a4:d4:d3:4e:69:fc:1f:82:57:be:f3:cf:f5:34:2b:fd:
         b6:cc:83:60:c9:c5:b9:32:f1:67:ea:c3:aa:4b:79:c1:66:ce:
         0c:d4:ca:f9:4e:bc:56:0b:a4:d8:8d:dd:c7:db:2f:9c:8c:1f:
         cb:2f:e3:49:9b:5c:e7:bb:64:e8:54:ca:7f:4f:30:7d:57:78:
         4e:4c:af:80:4b:97:36:c9:55:ba:8c:49:86:a2:eb:6a:db:96:
         c7:06:2f:e8:32:92:16:41:56:9b:b7:d0:09:c7:19:f1:d3:bb:
         d1:1a:16:65:93:5b:62:94:a9:27:06:a6:c3:36:02:68:a1:4e:
         3c:fd:1a:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----