Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3efd5d4f9f5ab60a65d97a84e6d256b831ef93b0.cer
File:                     3efd5d4f9f5ab60a65d97a84e6d256b831ef93b0.cer (raw, json)
Hash identifier:          nvEf+mg8RC1uqdvoWCFhFqzMSFm1u8Bxk8O5HBF1PKA=
Subject key identifier:   C9:87:A2:90:48:66:D2:6C:08:88:6C:5C:0C:90:C2:A8:BD:85:F6:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0109B750
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7ea236a0-a7eb-470d-9a7c-48229696087d/3efd5d4f9f5ab60a65d97a84e6d256b831ef93b0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7ea236a0-a7eb-470d-9a7c-48229696087d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 07 Feb 2024 19:26:25 +0000
Certificate not after:    Wed 27 Aug 2025 22:37:03 +0000
Subordinate resources:    IP: 2801:13:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17413968 (0x109b750)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  7 19:26:25 2024 GMT
            Not After : Aug 27 22:37:03 2025 GMT
        Subject: CN=3efd5d4f9f5ab60a65d97a84e6d256b831ef93b0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:87:d9:9f:c5:4d:58:b5:b5:9d:3e:a7:78:
                    ad:1e:fc:8f:81:f0:cf:71:ce:97:29:4d:59:66:74:
                    fb:83:b4:74:b0:77:e1:f8:2e:00:00:b8:13:08:95:
                    5d:6d:44:de:29:ee:86:57:1c:d3:f1:b3:ec:cf:7c:
                    d0:1c:b4:5b:7f:79:24:16:99:d5:80:34:0c:18:0b:
                    a0:9a:27:16:11:85:d3:1f:95:d6:40:14:d7:b3:7d:
                    fe:24:b3:e6:8f:93:61:41:1b:07:31:40:a6:f1:63:
                    48:9f:26:db:82:d3:bf:28:8c:6e:45:3a:4f:bc:1b:
                    0a:bb:33:5c:ba:d4:28:be:13:e3:08:73:e1:da:58:
                    ee:1e:7f:c5:03:1e:8c:5c:af:6e:2d:5b:93:05:c5:
                    f2:0c:b4:84:35:60:30:bd:0d:80:33:a6:62:88:03:
                    3b:83:f1:14:75:5e:3e:df:2a:1e:79:ff:45:ca:9e:
                    2c:de:b1:22:28:28:87:76:e9:6e:d5:1b:94:d9:2c:
                    83:07:ae:d0:00:e3:8c:37:f5:1c:ac:ec:b0:d1:44:
                    46:2b:57:60:2c:1e:0b:43:d4:b7:4e:e2:c6:7d:73:
                    51:f7:27:30:d3:03:19:53:c6:44:20:9e:26:dc:c1:
                    f5:73:4b:d3:a6:51:38:4d:fa:1f:a6:c1:ff:36:3a:
                    79:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:87:A2:90:48:66:D2:6C:08:88:6C:5C:0C:90:C2:A8:BD:85:F6:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7ea236a0-a7eb-470d-9a7c-48229696087d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7ea236a0-a7eb-470d-9a7c-48229696087d/3efd5d4f9f5ab60a65d97a84e6d256b831ef93b0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:13:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:d6:23:d7:44:3c:f2:2b:4f:e2:2f:20:3f:9b:89:f7:a5:cc:
         ec:3b:fe:1c:a3:8e:22:60:be:da:89:c5:85:53:23:8e:b9:a3:
         7c:df:37:cc:93:60:8a:23:a0:d4:26:17:60:e9:cc:9a:64:38:
         a0:4c:c1:c0:3f:fb:d3:fe:8f:a7:82:64:c7:b2:b5:18:9f:c7:
         74:31:dd:ef:09:42:9e:84:a6:17:16:79:43:21:fd:2e:e7:1a:
         aa:16:59:04:c8:f6:ea:cf:4c:b4:16:0c:54:31:92:ef:6c:26:
         2f:b7:8a:2c:17:fb:8f:b0:f1:73:89:1e:df:ff:75:1b:f9:2e:
         82:d4:21:a5:73:0d:fd:b3:25:28:ab:ff:de:e8:bf:cc:c4:77:
         4d:83:3d:52:16:55:05:b3:bb:28:85:32:dd:52:9c:e5:05:07:
         d1:3e:16:7c:8b:35:a9:2a:cc:b6:a3:80:98:a7:37:47:a2:36:
         fb:d9:52:39:84:3a:13:e2:07:7c:04:ef:3e:16:fb:0b:82:ba:
         47:a9:8d:d9:db:5c:e4:95:74:45:59:a1:15:c7:24:96:3f:9a:
         e3:78:5f:01:42:61:29:b0:a4:16:a7:ec:67:61:ff:1b:c6:9a:
         82:1a:4a:fd:a8:f4:46:b2:18:81:f2:24:fa:d5:98:f1:88:dc:
         5f:97:00:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----