Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4f7ebec9173e00449ed23ff906086131307bdec5.cer
File:                     4f7ebec9173e00449ed23ff906086131307bdec5.cer (raw, json)
Hash identifier:          GMVGlwg6BLzNTJRXHoY7VlAFZoyRuDKf9w57AznWEZU=
Subject key identifier:   5A:B8:62:1B:21:99:80:8D:A0:DB:2D:F9:71:CC:60:D7:F4:D5:6E:8A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B68E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/77350289-20d3-4098-b49c-c08391a25a29/4f7ebec9173e00449ed23ff906086131307bdec5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/77350289-20d3-4098-b49c-c08391a25a29/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 16:24:04 +0000
Certificate not after:    Thu 18 Sep 2025 06:00:00 +0000
Subordinate resources:    IP: 2801:166::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17524964 (0x10b68e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 16:24:04 2024 GMT
            Not After : Sep 18 06:00:00 2025 GMT
        Subject: CN=4f7ebec9173e00449ed23ff906086131307bdec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:a8:00:c8:32:f3:86:22:be:a0:5f:b9:b2:d7:
                    9e:3c:d9:6d:8b:75:9c:2f:4c:4c:d1:aa:67:e9:df:
                    3f:5c:32:52:39:bb:39:9a:7e:f1:17:ea:cc:9d:1c:
                    ac:ca:9a:96:1f:52:3a:64:0d:cb:af:fc:97:b5:e9:
                    2f:ac:85:8c:5d:69:42:e4:f3:93:b9:9e:30:0d:9b:
                    60:af:95:d3:96:79:62:ae:ca:c5:bc:68:b8:93:d1:
                    c6:12:19:ea:35:fb:ef:74:ab:38:6e:e2:97:dd:b0:
                    34:0e:72:12:08:5f:94:8a:07:88:5b:19:6e:7f:86:
                    52:e3:17:89:2c:6a:3d:d6:46:e5:a9:ee:27:33:3e:
                    e3:77:de:ef:d0:ba:da:7d:31:d1:a9:1f:d2:8a:f3:
                    ae:67:b2:f4:2f:af:10:da:96:5b:cd:6e:b3:54:c9:
                    3a:ee:fb:ac:4c:5b:70:2a:d0:43:20:4c:7f:c0:cc:
                    b1:78:c6:4a:c7:92:fd:ee:54:da:b0:f4:8f:41:a4:
                    4b:b0:90:08:79:98:d3:2a:f1:22:00:be:49:87:13:
                    a9:ea:de:40:70:93:d9:30:24:ca:e6:be:31:37:bc:
                    ca:02:f0:f5:00:9f:1f:bd:b4:9b:eb:db:c9:f1:6c:
                    5f:65:39:cc:a0:56:bd:5d:be:e8:e3:8e:90:fc:30:
                    34:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:B8:62:1B:21:99:80:8D:A0:DB:2D:F9:71:CC:60:D7:F4:D5:6E:8A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/77350289-20d3-4098-b49c-c08391a25a29/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/77350289-20d3-4098-b49c-c08391a25a29/4f7ebec9173e00449ed23ff906086131307bdec5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:166::/48

    Signature Algorithm: sha256WithRSAEncryption
         68:cb:a9:4d:85:e8:96:4d:10:37:17:b0:53:ff:93:1d:8d:9c:
         71:c2:ea:d0:14:60:3b:82:47:28:7d:36:56:be:e3:3b:93:53:
         2e:38:14:13:97:54:b1:5f:20:c2:5f:6c:9b:70:f4:7a:ae:9c:
         b1:cc:bc:f0:4d:af:6c:61:0a:f2:06:c4:d8:52:25:49:1a:72:
         f1:a6:30:84:79:06:6b:32:e3:64:2b:0b:e0:c3:e3:72:66:f4:
         6c:d3:20:1b:05:da:48:8b:21:20:f0:c5:29:69:48:fb:0a:d9:
         36:b6:68:88:64:e7:c4:29:b2:60:b2:29:a0:d0:b9:d7:ef:9c:
         7b:29:43:74:fa:cc:dd:b9:8a:b2:6a:71:3a:ec:ec:20:4a:00:
         42:14:90:02:de:59:3a:6e:26:ac:2c:19:2b:05:89:5e:74:05:
         8b:e2:11:50:88:1a:cb:52:8f:35:ec:fd:06:41:77:15:3e:25:
         f1:68:9c:6f:ef:e2:de:e2:f7:7e:f2:3f:dc:5d:68:d8:81:27:
         68:99:3b:6d:1a:07:53:d9:2d:5e:52:e2:ce:a3:68:f2:cb:fe:
         b7:99:7c:4f:6c:5a:45:94:9c:4c:68:78:6f:91:de:00:4f:7e:
         e1:dd:ac:cd:3e:6b:bf:aa:22:cd:5c:11:a0:c1:e3:8f:ca:03:
         43:56:e4:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----