Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/45ef594de183b209fd13ddcb8a3f2724ba4e1202.cer
File:                     45ef594de183b209fd13ddcb8a3f2724ba4e1202.cer (raw, json)
Hash identifier:          1sRHPhKB4LcyjsoH989dcwbfaAGaCURv9AK4elXl9us=
Subject key identifier:   A2:4F:76:5A:F3:1C:04:9C:70:FD:A4:C0:B3:01:91:69:3C:D6:07:6F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100C6EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/16e80d6b-4d51-4f60-8880-b2c4515fd609/45ef594de183b209fd13ddcb8a3f2724ba4e1202.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/16e80d6b-4d51-4f60-8880-b2c4515fd609/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 09 Nov 2023 13:57:17 +0000
Certificate not after:    Mon 08 Sep 2025 16:57:12 +0000
Subordinate resources:    AS: 273122
                          IP: 2803:f850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16828140 (0x100c6ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  9 13:57:17 2023 GMT
            Not After : Sep  8 16:57:12 2025 GMT
        Subject: CN=45ef594de183b209fd13ddcb8a3f2724ba4e1202
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:7f:f2:b9:41:cb:f5:fb:7c:29:69:7f:d8:63:
                    ec:27:34:6a:44:d6:63:83:1b:98:99:18:35:85:f5:
                    cb:ed:38:8d:86:97:7b:f7:4b:35:99:25:c7:59:2f:
                    22:56:5f:21:95:6c:82:fb:f9:34:3b:3c:0f:e5:95:
                    90:fb:21:b3:9b:77:4e:60:24:63:b0:96:5a:ca:71:
                    fa:dd:54:58:15:89:0d:c4:ad:b6:56:af:c6:84:e5:
                    93:bb:ca:a3:d2:b1:b1:bf:56:25:36:f4:1e:f7:28:
                    cf:66:6d:76:34:14:61:96:6c:81:49:42:78:d6:21:
                    d5:c0:96:5a:83:a9:a5:2d:c0:43:5a:2a:2c:66:4d:
                    72:4c:a7:f3:e4:58:47:ed:4f:a9:ef:d4:cf:47:6b:
                    8e:91:fb:e1:cc:6d:dc:12:28:d1:4f:af:8b:6f:56:
                    9b:c0:af:37:c9:64:9e:7d:84:09:ef:f2:8e:a9:a5:
                    e2:dc:d6:7b:e2:e9:ec:bd:74:c5:85:b9:70:7b:df:
                    bc:d3:74:71:49:c3:be:66:e1:ba:39:49:50:02:be:
                    f4:d5:8b:76:ec:cf:68:8e:93:db:39:d2:e3:6f:db:
                    3b:5e:88:cb:ea:1f:a8:52:f7:d2:98:8e:f1:d8:c7:
                    9a:37:16:06:f2:42:4a:f9:c1:42:8d:2b:eb:6d:09:
                    ea:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:4F:76:5A:F3:1C:04:9C:70:FD:A4:C0:B3:01:91:69:3C:D6:07:6F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/16e80d6b-4d51-4f60-8880-b2c4515fd609/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/16e80d6b-4d51-4f60-8880-b2c4515fd609/45ef594de183b209fd13ddcb8a3f2724ba4e1202.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273122

    Signature Algorithm: sha256WithRSAEncryption
         91:87:83:e4:99:3b:db:96:15:4d:1d:dc:6d:3a:c7:47:4d:24:
         1c:5c:c8:06:5e:0d:4a:fc:91:fa:77:a7:c3:cc:a4:73:4c:57:
         13:e5:d5:2e:0c:c0:33:9b:09:e2:03:e4:b0:0b:78:d5:78:a6:
         cf:27:5b:e3:00:38:ee:09:04:ee:00:2e:a0:0d:9a:f2:60:b7:
         30:36:8c:bd:35:d7:3d:6d:7f:94:23:24:aa:35:51:59:78:6e:
         1b:9b:7a:10:6d:9d:7c:bd:66:2c:98:0e:dd:fb:a0:26:51:2d:
         f3:f2:a7:54:48:f0:8a:fe:f1:e0:b4:ed:32:ab:32:8c:0e:a9:
         74:be:25:f7:d7:9a:f5:d1:70:6b:73:48:cb:d6:49:bd:a7:23:
         98:f1:c0:1f:f5:a8:41:5b:c4:43:ff:a0:0e:3c:71:37:9b:16:
         26:c8:95:b9:b0:d4:be:95:40:29:2f:55:90:e2:e6:82:c0:fd:
         ac:7c:52:ae:7e:6f:f2:31:f5:ae:ba:03:29:7c:83:ca:7c:8f:
         b1:d5:59:82:6b:28:2e:50:ab:47:ff:42:a9:b4:6a:40:e0:ee:
         bb:f1:cf:f0:9b:87:41:00:dd:d5:1a:e2:af:ec:a2:d3:84:84:
         25:f1:16:e3:6e:2a:cb:ae:b0:cb:85:46:bf:89:b5:29:5f:08:
         ab:0b:c3:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----