Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/34bc707990a799faf5bf725d320f479b7703bc15.cer
File:                     34bc707990a799faf5bf725d320f479b7703bc15.cer (raw, json)
Hash identifier:          dY1SijtynLlTCvY+qE7gRf1kpYzyk6eqWRDbqgxDAAE=
Subject key identifier:   1D:2F:B5:92:2D:C6:7C:53:47:21:99:8C:72:75:B3:43:75:4C:89:75
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105CB9C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e41f35e1-ef57-4a51-81f0-bb1d1166b1f1/34bc707990a799faf5bf725d320f479b7703bc15.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e41f35e1-ef57-4a51-81f0-bb1d1166b1f1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 16:51:29 +0000
Certificate not after:    Thu 23 Jan 2025 18:19:01 +0000
Subordinate resources:    IP: 2801:11e::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17157020 (0x105cb9c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  4 16:51:29 2024 GMT
            Not After : Jan 23 18:19:01 2025 GMT
        Subject: CN=34bc707990a799faf5bf725d320f479b7703bc15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:9e:d9:1b:fc:78:7f:6b:18:00:dd:8b:18:39:
                    28:cf:85:db:da:f0:fb:61:b6:a9:0a:0c:81:56:07:
                    ea:58:dc:47:04:a5:a9:df:a9:46:60:47:45:64:99:
                    5a:12:24:03:8a:ef:e6:86:11:d1:f3:d6:89:10:6d:
                    26:72:2d:5b:0d:86:1d:00:ff:71:44:f4:41:96:a6:
                    25:11:40:c1:dd:de:44:9d:40:6e:df:d1:25:52:27:
                    1f:1f:af:89:18:17:17:5d:fa:d9:5d:b6:42:90:13:
                    00:20:c0:ce:16:b2:3f:1d:f7:47:cc:36:55:6f:d3:
                    3e:c6:53:98:4b:bc:2f:d6:ef:71:6e:09:59:ab:00:
                    64:1a:0a:09:c4:78:36:be:4a:74:e3:3b:64:ca:92:
                    2b:d0:77:15:79:9b:9d:9f:76:a8:60:4a:46:46:db:
                    66:7d:58:16:ab:4b:37:74:ae:3b:32:ca:89:db:ec:
                    5b:6d:76:c1:48:51:4e:72:f6:e1:db:2f:78:89:fb:
                    65:9a:d0:e3:30:31:7d:7a:4b:17:25:cf:72:40:c1:
                    56:5d:d0:96:a0:a7:b8:66:1f:c3:5f:90:07:ef:c8:
                    e6:f2:74:a8:e4:03:8b:5d:cb:2a:1d:00:aa:6e:da:
                    6f:41:62:a0:13:8b:e8:a1:80:d7:0c:3e:60:36:bc:
                    75:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:2F:B5:92:2D:C6:7C:53:47:21:99:8C:72:75:B3:43:75:4C:89:75
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e41f35e1-ef57-4a51-81f0-bb1d1166b1f1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e41f35e1-ef57-4a51-81f0-bb1d1166b1f1/34bc707990a799faf5bf725d320f479b7703bc15.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:11e::/44

    Signature Algorithm: sha256WithRSAEncryption
         b0:03:1b:3f:f8:03:0f:96:c8:18:c7:15:bd:28:49:41:2a:1e:
         14:d3:e1:f8:40:6b:7d:72:fc:18:48:7f:8a:70:40:c7:73:f8:
         e3:dd:ca:18:c2:25:b1:3e:05:92:62:08:14:54:48:c2:43:ad:
         ce:61:bf:9a:92:ef:d5:1e:8d:71:91:b8:54:4d:46:ae:b7:f2:
         8b:de:b8:00:06:00:da:0e:e0:b8:72:f2:ad:d3:50:95:0b:86:
         03:8c:83:f1:66:93:b0:e0:2d:0b:38:55:2e:22:2c:41:f6:1a:
         90:8b:52:ce:d4:ca:ec:f4:ee:df:dd:0d:dd:4d:c4:ca:07:fa:
         a0:3a:1d:0b:81:0b:15:c2:0e:f9:87:bb:31:01:1e:4d:d6:3c:
         b8:0f:75:3f:11:34:df:e8:fb:9f:c7:13:d8:f3:84:23:72:79:
         1a:26:85:0f:77:5a:fe:cc:09:7c:4b:f3:35:44:b1:07:47:dd:
         86:82:62:f1:57:e8:d6:c2:e6:1d:b0:cc:c4:48:90:6c:d3:ba:
         1a:c1:3c:a1:e0:d4:8e:c1:0f:ae:50:05:7e:2f:a3:40:a4:b3:
         d8:72:bd:a8:00:fd:d9:f0:38:e1:d9:d0:1c:ec:e0:d1:dc:6d:
         5d:38:16:a8:93:69:a0:fb:0e:bc:31:08:60:d2:7c:79:a0:4a:
         b0:15:80:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----