Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5335ebb4135eed86691067eee84c3b7dcf9d1588.cer
File:                     5335ebb4135eed86691067eee84c3b7dcf9d1588.cer (raw, json)
Hash identifier:          aMyqVGwKSPeKclVmnaQgAe6GBpBC2w/3wbtvQOEZTb8=
Subject key identifier:   E4:6F:53:23:B5:41:08:DA:51:C1:64:F4:62:FF:50:B3:2A:85:EE:39
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0109F38E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/28ac5118-fcb2-4352-b85e-cc86121eacc4/5335ebb4135eed86691067eee84c3b7dcf9d1588.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/28ac5118-fcb2-4352-b85e-cc86121eacc4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 09 Feb 2024 23:52:36 +0000
Certificate not after:    Wed 12 Nov 2025 20:26:13 +0000
Subordinate resources:    AS: 273159
                          IP: 2803:2250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17429390 (0x109f38e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  9 23:52:36 2024 GMT
            Not After : Nov 12 20:26:13 2025 GMT
        Subject: CN=5335ebb4135eed86691067eee84c3b7dcf9d1588
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:20:3b:19:cd:98:9b:f5:cd:c6:4b:ec:f5:f1:
                    d3:bc:9f:1d:b6:73:1c:7e:a6:00:a9:b8:76:d0:74:
                    d9:eb:dc:8f:c4:d6:a2:46:37:fc:69:c0:b9:16:77:
                    03:53:c2:ba:89:fa:25:30:43:a7:86:c8:87:a9:61:
                    26:19:d3:2c:5a:f6:1f:4e:b9:5f:25:1e:4f:9e:0f:
                    8a:0c:c2:9f:fb:2b:a0:b7:3e:43:70:b9:61:5b:48:
                    76:39:68:4d:48:ae:67:56:6c:cf:40:d4:5d:ff:2e:
                    38:ec:ac:37:6b:3b:42:c8:5b:8f:2b:d3:6c:87:94:
                    a4:7f:b3:c1:2f:39:8b:fe:04:56:68:37:57:a4:e5:
                    c5:64:a9:a0:f4:6b:f0:8d:00:13:a5:a9:54:eb:e5:
                    71:95:6d:a0:bb:50:86:47:e6:02:f8:0b:84:45:1c:
                    ea:63:44:a6:1a:29:91:c7:b3:9f:d3:55:67:86:e9:
                    74:48:26:aa:01:d6:58:6d:de:9c:cd:45:9d:2d:5d:
                    61:b4:0a:f4:d7:a2:44:de:13:cc:40:41:2c:ab:9b:
                    d8:9b:fc:71:a9:e4:1d:00:1a:28:8d:c2:32:f5:b7:
                    09:96:36:a3:cb:32:c0:80:59:7a:a7:e7:71:a6:da:
                    bd:95:30:29:cc:22:5c:c7:e0:d0:b1:ba:41:2b:d2:
                    7c:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:6F:53:23:B5:41:08:DA:51:C1:64:F4:62:FF:50:B3:2A:85:EE:39
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/28ac5118-fcb2-4352-b85e-cc86121eacc4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/28ac5118-fcb2-4352-b85e-cc86121eacc4/5335ebb4135eed86691067eee84c3b7dcf9d1588.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273159

    Signature Algorithm: sha256WithRSAEncryption
         b8:30:cc:ab:a7:1f:88:d5:27:9c:7e:68:16:d8:b4:f9:8f:d7:
         8b:c9:6b:cb:7e:97:7f:29:9c:9c:74:df:ae:b1:e4:d0:c4:93:
         64:ab:bb:78:0f:2f:9a:5c:92:50:26:9e:5e:4b:e0:69:ff:11:
         f9:12:82:a4:75:ec:b7:33:07:16:c7:5a:fa:47:f5:30:33:6e:
         a6:1f:2f:9d:eb:13:ab:ac:61:f2:ba:05:70:17:db:a5:d3:78:
         f4:82:5e:ad:a7:04:7c:88:ee:92:e0:78:13:b0:12:93:71:e8:
         5b:f1:ac:d4:ec:c2:4d:e5:da:39:62:1c:17:cc:2b:ab:b2:5c:
         8d:ac:ca:bc:f0:e7:ec:44:c4:c4:44:f7:ad:03:10:15:94:5a:
         8b:83:55:1d:db:7c:ca:cb:34:d4:ae:47:7e:63:ed:b2:fd:cd:
         37:0c:e3:d4:99:99:0d:98:b6:ad:66:33:c2:65:6e:98:02:2c:
         f3:d5:1b:a5:69:3d:26:d3:4b:36:0e:e0:e9:98:df:69:91:7e:
         4e:6a:ac:d1:f4:8d:bf:aa:ad:00:c7:9e:a7:c5:4e:62:97:f4:
         f7:4b:6a:8c:20:bb:f8:74:43:7d:55:b6:1f:7b:a9:0b:e0:d6:
         cf:76:4c:f6:3e:21:e9:5b:f9:8c:71:2f:8f:8e:49:de:be:c0:
         bb:ef:72:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----