Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/357fd747da2d51dc58df277a77d1dceeb863927c.cer
File:                     357fd747da2d51dc58df277a77d1dceeb863927c.cer (raw, json)
Hash identifier:          F2oc+RIvEjRHxP21wyLRwL/FMrc694SwuM+dt4sZ6pw=
Subject key identifier:   93:68:CA:F7:5E:85:F2:D4:68:04:AD:8E:16:63:72:94:AC:74:EE:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103E1C5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6074c8df-c26a-48f5-8dda-3606a05f73d2/357fd747da2d51dc58df277a77d1dceeb863927c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6074c8df-c26a-48f5-8dda-3606a05f73d2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 14 Dec 2023 01:18:21 +0000
Certificate not after:    Sat 11 Oct 2025 20:40:42 +0000
Subordinate resources:    AS: 273144
                          IP: 2803:6c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17031621 (0x103e1c5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 14 01:18:21 2023 GMT
            Not After : Oct 11 20:40:42 2025 GMT
        Subject: CN=357fd747da2d51dc58df277a77d1dceeb863927c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:a5:39:57:de:c3:27:8d:e9:c6:70:bd:a1:20:
                    40:fb:a7:7d:63:3e:f6:a7:f3:3e:8b:c6:0d:18:d9:
                    df:f1:a7:96:66:d5:3a:24:79:35:7e:7b:22:be:b1:
                    6e:cb:75:c6:62:81:b0:be:5b:bf:5f:2a:e8:d7:f3:
                    4f:15:7e:34:e0:4d:58:80:65:ba:6f:4c:ea:8f:4f:
                    16:1d:4e:90:6a:6a:f3:9a:f6:3e:64:cf:50:9d:fb:
                    26:dd:bb:f3:97:16:99:10:66:1f:02:7c:da:ed:c7:
                    35:22:ec:18:0e:ee:0d:56:55:1e:fb:41:d4:25:ee:
                    ff:43:f4:a6:36:1f:4d:26:ec:95:35:65:f3:fd:1a:
                    b7:02:7f:1e:56:13:56:8b:a8:fe:88:08:b5:14:39:
                    1c:ad:e7:64:f7:4f:e5:ab:26:7a:a3:50:67:89:4e:
                    3f:9a:08:a7:bf:e5:eb:2e:c9:5a:5d:56:0b:27:a7:
                    0a:de:55:ba:e7:35:38:2d:58:aa:c1:a7:cb:6b:37:
                    36:65:e5:51:d5:ad:1b:f1:d2:04:8f:9f:f6:1d:56:
                    cc:c0:ad:73:ab:52:96:33:46:6a:b0:dd:c7:5b:c8:
                    84:bf:54:80:66:68:89:65:3f:96:b9:05:db:00:5d:
                    74:17:89:0f:a7:09:5e:3b:55:7c:ef:51:5c:b4:e1:
                    88:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:68:CA:F7:5E:85:F2:D4:68:04:AD:8E:16:63:72:94:AC:74:EE:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6074c8df-c26a-48f5-8dda-3606a05f73d2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6074c8df-c26a-48f5-8dda-3606a05f73d2/357fd747da2d51dc58df277a77d1dceeb863927c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273144

    Signature Algorithm: sha256WithRSAEncryption
         84:d7:ff:bb:1d:8c:71:5e:3a:15:8d:c6:5f:92:cd:42:58:68:
         7a:b4:6c:cf:73:11:6d:8a:7a:73:78:d6:3f:a7:1f:60:91:0e:
         29:4c:73:f6:d7:e5:34:64:7e:f1:4f:80:4e:90:aa:4b:78:5e:
         5a:e2:40:9b:d1:46:ff:df:1b:e5:4b:7c:89:c8:89:46:eb:84:
         8d:0d:d1:fd:38:46:c8:e3:66:d6:1c:a7:d7:7e:8c:a5:46:c2:
         fe:8a:58:3f:0b:9b:20:86:e3:de:f6:0c:d4:bc:77:ba:43:33:
         49:6f:64:01:34:9c:27:9d:54:ea:f1:da:c9:1f:74:01:42:bd:
         69:5f:28:ba:08:b3:18:09:6a:6c:b6:44:f1:76:6c:ca:4a:c9:
         f1:4f:d8:a3:22:e0:65:d8:6b:c5:f1:ab:b9:df:78:66:6c:ed:
         90:5b:88:78:1e:45:e0:24:24:33:60:96:18:39:e7:b2:68:8a:
         5f:7a:6e:1d:89:2f:a8:c7:81:52:9d:79:be:55:af:ec:68:da:
         fa:3a:b6:57:0d:9d:2e:b7:9d:16:68:14:0b:6b:09:2e:13:d3:
         cb:e8:b7:93:a7:ea:80:59:6a:8b:94:d5:db:c1:11:17:2e:0b:
         f3:5f:78:3d:6f:07:f5:f2:c0:93:47:df:4a:cc:eb:98:04:a2:
         65:2d:3f:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----