Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/35af00abdadfe4637375bb25e8881464f0e7e350.cer
File:                     35af00abdadfe4637375bb25e8881464f0e7e350.cer (raw, json)
Hash identifier:          JdYFHlgcxKQKTvoubkO1XHHCJK2KJBHgHqCxhRkXZXA=
Subject key identifier:   D8:81:42:91:78:72:5A:E1:60:6A:4B:C5:C0:A3:B3:16:77:0B:2B:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010A3813
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ce6faab5-01e0-4fc7-95d9-f591dfef405f/35af00abdadfe4637375bb25e8881464f0e7e350.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ce6faab5-01e0-4fc7-95d9-f591dfef405f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 12 Feb 2024 15:17:35 +0000
Certificate not after:    Thu 06 Feb 2025 20:31:16 +0000
Subordinate resources:    AS: 263752
                          IP: 138.94.248.0/22
                          IP: 2801:16:e0::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17446931 (0x10a3813)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 12 15:17:35 2024 GMT
            Not After : Feb  6 20:31:16 2025 GMT
        Subject: CN=35af00abdadfe4637375bb25e8881464f0e7e350
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:34:65:96:b2:be:3c:d8:6a:4d:4b:21:d4:eb:
                    8d:67:81:5e:ed:c9:58:89:87:7b:6f:d4:ab:7a:67:
                    02:3a:96:09:29:19:2c:34:f7:12:86:03:6b:65:a1:
                    04:71:5c:24:aa:dd:4d:3c:c4:41:2c:bc:49:e9:7a:
                    ea:20:99:ed:1f:8b:f9:f7:51:5f:db:d5:e4:fa:9a:
                    22:9b:1e:5b:3c:22:f0:0d:f0:df:59:be:2a:dd:c6:
                    43:34:36:99:96:03:fb:98:87:fa:67:14:5a:6c:67:
                    c1:7b:d0:36:34:50:c0:fc:38:cf:87:3a:fd:47:c6:
                    b5:88:f0:46:01:0f:92:15:ce:1b:6c:77:af:4c:79:
                    4d:23:67:01:c9:6b:37:f9:a8:36:6a:45:bb:24:a3:
                    70:53:f6:96:a2:e0:a5:7b:37:b1:3d:df:14:93:56:
                    e1:82:3b:88:22:f5:19:bb:7f:0d:46:72:50:ad:a8:
                    38:e3:fa:73:6e:0a:0d:4a:5a:f7:32:6a:61:62:f0:
                    91:f3:1f:0b:11:b5:bc:7e:9f:a8:46:4b:48:97:12:
                    33:11:32:91:91:5a:cc:09:e2:61:ea:b7:1e:37:c9:
                    0d:9b:59:31:7b:ff:a5:ca:74:19:73:68:86:d7:b2:
                    20:04:4e:76:8f:be:f8:56:8b:9a:c3:9a:94:d3:63:
                    1a:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:81:42:91:78:72:5A:E1:60:6A:4B:C5:C0:A3:B3:16:77:0B:2B:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ce6faab5-01e0-4fc7-95d9-f591dfef405f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ce6faab5-01e0-4fc7-95d9-f591dfef405f/35af00abdadfe4637375bb25e8881464f0e7e350.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.94.248.0/22
                IPv6:
                  2801:16:e0::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263752

    Signature Algorithm: sha256WithRSAEncryption
         8c:cb:1b:39:72:f3:8c:14:b7:bd:ec:79:4a:48:1f:50:09:d0:
         e7:77:50:02:84:8b:dd:ef:92:48:4e:b2:fe:fe:42:b9:19:ea:
         a6:34:bb:f5:a7:c7:bc:f1:3c:f2:37:71:99:05:72:58:28:7c:
         07:55:a1:ad:32:af:e6:60:21:e4:02:d6:1a:21:60:50:27:0c:
         f2:bc:04:e4:72:ac:83:15:57:a9:e8:a2:36:3e:bd:be:06:ba:
         08:72:9f:a9:9d:c7:c6:84:29:29:7f:43:b6:0b:f4:d1:78:fe:
         cf:5f:ab:b3:7c:58:ed:47:e3:7a:b4:0e:b9:71:6e:36:8d:6f:
         6f:d1:64:3c:42:c3:1c:c9:10:14:1f:2a:01:e8:8a:a7:e9:41:
         bc:16:cd:f8:6c:c6:0b:49:e9:f2:4a:3c:2c:3d:5b:94:4c:e3:
         72:97:96:22:ae:48:43:81:47:ea:6d:e8:73:29:f4:97:88:1c:
         cb:11:d3:e9:2c:22:36:00:ae:7d:0e:a1:47:f8:52:34:05:d1:
         37:1b:38:d6:ef:1b:c5:5a:d3:9b:24:f9:86:91:b4:52:48:20:
         86:74:3e:53:f0:7d:5d:b7:1f:6e:2a:fe:a6:f3:4a:c4:22:69:
         f7:ec:84:0d:df:1e:36:9e:1c:00:63:3b:1c:4b:a0:9d:c2:06:
         1f:8a:66:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----