Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/427487e990228ff8d303a27416ede02b36f69515.cer
File:                     427487e990228ff8d303a27416ede02b36f69515.cer (raw, json)
Hash identifier:          IShC7IJoRcM+2Sq6wECxmuyOdkN92J1qp4ucN0M8EjM=
Subject key identifier:   F7:6C:77:5D:35:19:47:29:95:D5:EA:55:D8:36:37:5E:D6:81:39:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107E70D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9cc2282b-d1a1-45b1-a4f2-66624ef7bee1/427487e990228ff8d303a27416ede02b36f69515.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9cc2282b-d1a1-45b1-a4f2-66624ef7bee1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 14:47:29 +0000
Certificate not after:    Wed 24 Sep 2025 06:00:00 +0000
Subordinate resources:    AS: 273170
                          IP: 2803:b250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17295117 (0x107e70d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 23 14:47:29 2024 GMT
            Not After : Sep 24 06:00:00 2025 GMT
        Subject: CN=427487e990228ff8d303a27416ede02b36f69515
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:e9:8b:0f:c5:7a:b5:0f:27:67:08:2f:11:c6:
                    af:f5:20:a6:f9:a2:41:1b:e3:35:64:da:79:d9:27:
                    43:a7:16:ba:86:e4:19:e4:0a:20:06:f2:f1:11:00:
                    a5:15:bd:04:9b:f9:69:f4:37:b3:ba:47:7c:8a:18:
                    fa:2c:30:b7:62:49:f2:11:7c:ac:6b:ac:1e:ec:f8:
                    dd:d4:22:11:04:7d:0d:49:30:ae:13:b2:85:73:dc:
                    90:17:c4:7a:4f:1c:38:5c:15:42:7d:77:4d:65:c3:
                    3d:c5:28:8d:ea:03:3e:d3:df:8d:00:76:3f:b5:ff:
                    0c:e2:37:a3:67:ba:af:43:56:cd:fa:71:e8:1e:81:
                    6e:a5:c4:29:71:a7:b9:1f:42:f8:7c:1c:3a:6b:66:
                    de:70:41:36:e3:c9:15:21:3d:cd:91:2a:1d:9c:fd:
                    c0:60:8f:aa:62:ac:bc:88:fe:57:8a:2e:8c:05:08:
                    32:1b:4b:c0:b6:6a:2e:f5:c7:b9:2a:11:e1:6b:61:
                    0c:a9:da:1f:2b:17:a9:d1:ec:46:61:8a:08:30:42:
                    a4:15:bb:06:b4:93:84:46:64:c6:a3:3f:ff:3b:1d:
                    1f:33:10:8f:e6:13:c2:a5:7c:f5:90:04:e6:b0:71:
                    e2:d9:02:84:50:ba:a7:da:64:6b:bf:a6:24:1b:5d:
                    72:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6C:77:5D:35:19:47:29:95:D5:EA:55:D8:36:37:5E:D6:81:39:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9cc2282b-d1a1-45b1-a4f2-66624ef7bee1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9cc2282b-d1a1-45b1-a4f2-66624ef7bee1/427487e990228ff8d303a27416ede02b36f69515.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273170

    Signature Algorithm: sha256WithRSAEncryption
         2f:f4:6e:f8:f7:1b:62:79:41:31:6d:7d:2a:4d:12:1a:0f:ff:
         91:f8:fe:79:b5:f4:8b:cc:c9:e5:dd:29:38:0c:84:24:2f:83:
         79:17:d6:c4:57:9e:60:f2:61:fa:a0:35:2e:06:0d:93:f0:93:
         bc:6f:19:f5:1f:9e:09:0f:d8:50:0a:ce:af:67:44:fe:45:ae:
         85:42:42:90:df:40:ef:82:9f:e3:44:f7:ce:71:df:3f:57:68:
         e7:ab:98:f8:b4:a1:2f:77:87:5a:d3:66:5e:cc:eb:fe:8b:22:
         94:a5:bc:a4:f9:c6:4d:60:46:05:79:79:12:bc:51:f5:2f:09:
         01:01:39:e5:9a:ae:80:2e:4d:03:52:49:0f:b7:1f:eb:7c:11:
         9c:5f:74:dd:18:87:22:36:f3:f3:95:da:51:61:70:b5:fb:61:
         cc:b5:42:d8:29:4f:73:81:da:4b:32:35:bb:9c:5f:c8:b1:b3:
         27:55:d6:0e:de:47:f8:9b:4d:04:32:2e:77:de:cd:87:43:b4:
         67:1a:33:1c:e2:58:23:59:0d:3c:68:cc:1c:53:0b:2f:e8:3e:
         f9:2c:d1:d1:ed:5a:ab:5f:9b:8d:06:13:39:80:b2:a7:dc:79:
         36:05:b4:79:f8:9a:a3:ff:58:ad:cc:ed:ca:af:56:5e:ef:89:
         41:13:f2:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----