Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45381f882e81a9a999fed42cdb1bc294fb1c62fe.cer
File:                     45381f882e81a9a999fed42cdb1bc294fb1c62fe.cer (raw, json)
Hash identifier:          XLKV5VrS33g6moxVNJvMrb+J5pe+u4AlEdLwuiQOYdI=
Subject key identifier:   8F:2B:83:BC:A9:34:46:93:72:16:22:B0:4B:7E:18:A1:2B:B9:39:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8971E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b596f66d-0db3-4554-8399-0733a2148637/45381f882e81a9a999fed42cdb1bc294fb1c62fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b596f66d-0db3-4554-8399-0733a2148637/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Sep 2023 01:17:33 +0000
Certificate not after:    Wed 28 May 2025 06:00:00 +0000
Subordinate resources:    IP: 2801:1a:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16291614 (0xf8971e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  7 01:17:33 2023 GMT
            Not After : May 28 06:00:00 2025 GMT
        Subject: CN=45381f882e81a9a999fed42cdb1bc294fb1c62fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:2d:02:ca:17:b8:5a:18:74:2f:99:20:94:ce:
                    55:a7:90:8e:e3:79:e8:00:15:8f:41:0c:e7:2b:8f:
                    b0:ee:6e:a3:82:ba:ba:f5:23:c6:48:44:b2:17:84:
                    46:0d:86:0d:4a:5d:c1:71:d7:e9:06:a6:24:69:8f:
                    02:2d:fa:17:69:4c:0c:53:a4:59:5d:40:f4:dd:f2:
                    14:85:2e:82:25:81:56:03:b1:11:d3:e7:9e:2a:ca:
                    eb:f6:cf:8f:49:99:d1:6d:3b:28:08:67:da:33:5d:
                    1a:2b:53:ab:1d:3a:44:4f:d1:a8:e1:c2:1f:8e:6d:
                    f8:ed:f3:3f:9b:ff:c2:6f:90:b0:29:f6:29:4f:9e:
                    bd:d5:a4:3c:51:a4:a2:f1:64:a3:a4:2e:e8:4f:16:
                    2f:1b:2b:83:eb:4d:e6:62:c8:8f:fa:cc:5c:b6:e1:
                    fe:42:80:65:e0:43:a0:82:e5:bb:ef:00:1e:f4:67:
                    43:a1:43:9e:27:24:0e:49:a1:05:e1:d6:d6:4c:61:
                    72:5c:5a:8d:ca:b5:5a:90:2b:3e:d1:bc:b7:b6:ee:
                    7e:30:49:4b:09:56:b8:eb:b5:7b:40:9d:bf:fc:c0:
                    99:55:90:1a:60:b2:8b:82:0f:ac:cc:57:a7:34:f6:
                    be:cd:96:f8:0b:10:8e:14:d9:81:a6:50:1f:99:20:
                    96:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:2B:83:BC:A9:34:46:93:72:16:22:B0:4B:7E:18:A1:2B:B9:39:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b596f66d-0db3-4554-8399-0733a2148637/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b596f66d-0db3-4554-8399-0733a2148637/45381f882e81a9a999fed42cdb1bc294fb1c62fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1a:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         8f:9d:9b:bd:88:83:db:bb:38:d7:09:2a:2c:b1:b2:1c:d5:f1:
         62:41:b7:ac:8e:c6:cb:52:66:8f:84:86:86:de:2c:09:7a:4f:
         e6:91:16:6c:dc:bd:af:ea:ea:a9:ed:75:01:de:b8:e1:90:ae:
         c1:2b:d5:be:9b:29:e4:01:bf:31:01:5b:46:e2:9f:e3:fe:6b:
         fd:2c:85:ef:f8:9f:06:ef:b2:64:0e:f7:9b:37:13:73:5a:16:
         6b:ef:c0:b5:62:07:7d:80:1e:6b:ba:9a:5f:85:72:bb:b8:5d:
         94:0b:da:91:ba:e6:c6:42:ca:5d:cb:cb:62:4b:83:e6:f7:fe:
         07:0e:30:7d:3a:79:51:5a:b7:6e:a4:5a:74:30:0c:cb:64:d0:
         aa:04:39:5d:1e:f7:fb:a1:cd:7d:3c:76:a7:f9:1a:cb:95:a6:
         23:90:31:af:0f:df:05:54:e2:4b:6b:72:db:9e:37:c7:08:48:
         52:c8:3b:d6:dc:ca:1b:7d:cb:55:61:72:17:ba:89:a4:01:f1:
         bd:a5:82:0e:5c:d6:bd:bc:0f:55:aa:25:f5:23:79:3f:7d:28:
         e4:72:df:95:66:ff:fa:c6:29:66:55:c7:18:78:3d:7a:57:70:
         44:a2:c9:d9:b5:13:ab:66:5e:73:87:92:16:50:a9:f0:c4:ce:
         cb:5b:d9:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----