Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/576a62765068b89f8f1e8b9d2d83b3654354da4f.cer
File:                     576a62765068b89f8f1e8b9d2d83b3654354da4f.cer (raw, json)
Hash identifier:          TNMTMcszvJ49+KsRwk1hKNg9qjPXI369eVuK3ieY0WQ=
Subject key identifier:   98:BB:FC:A9:1B:A0:A7:3A:AD:B1:EE:36:20:D1:27:96:C7:3D:CA:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108D70E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e6f27ce2-ecb4-45df-a492-723e9d3899b7/576a62765068b89f8f1e8b9d2d83b3654354da4f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e6f27ce2-ecb4-45df-a492-723e9d3899b7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 15:47:18 +0000
Certificate not after:    Sat 01 Nov 2025 14:00:00 +0000
Subordinate resources:    IP: 200.13.112.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17356558 (0x108d70e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 30 15:47:18 2024 GMT
            Not After : Nov  1 14:00:00 2025 GMT
        Subject: CN=576a62765068b89f8f1e8b9d2d83b3654354da4f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:5f:3f:f5:ce:ec:9d:71:ac:d9:13:89:e0:9f:
                    10:63:25:be:9e:ce:91:36:9e:97:7c:54:46:64:95:
                    be:2a:27:b1:a2:4d:ce:a6:dc:1d:be:bb:38:15:0c:
                    05:a3:b8:b7:ae:9d:40:3c:3a:a8:eb:6a:1e:3a:69:
                    5a:2d:bc:d3:6b:80:a7:22:07:29:fd:31:d1:27:64:
                    b4:cb:fe:c2:c3:c6:70:39:3b:a9:b6:3b:9d:98:10:
                    cf:ac:39:d5:d1:1e:66:22:10:32:d2:0f:00:a7:c3:
                    ac:1e:54:64:aa:f4:a6:34:f6:2d:96:75:3d:42:67:
                    17:25:17:78:13:ef:e3:67:3e:06:61:1b:b5:56:10:
                    2b:c0:30:3b:12:bd:09:b1:ff:60:e2:60:e8:9a:82:
                    a0:98:f0:fa:20:7c:37:dc:fd:dc:13:6f:aa:7b:3f:
                    e9:41:aa:b8:d1:ae:55:da:be:a3:20:6d:97:54:d9:
                    10:1b:42:f8:cc:d3:e2:1a:c0:ab:41:52:47:34:00:
                    de:3e:f7:2a:26:c4:29:e5:26:0d:07:0a:29:a5:3f:
                    ec:71:0f:74:99:38:0b:db:f1:8c:41:26:5c:ca:1a:
                    22:53:fd:53:2e:f3:99:69:e3:51:1f:93:71:c7:74:
                    ee:12:cd:1b:58:5a:dc:7a:30:1a:91:26:7a:e2:b6:
                    90:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:BB:FC:A9:1B:A0:A7:3A:AD:B1:EE:36:20:D1:27:96:C7:3D:CA:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e6f27ce2-ecb4-45df-a492-723e9d3899b7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e6f27ce2-ecb4-45df-a492-723e9d3899b7/576a62765068b89f8f1e8b9d2d83b3654354da4f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.13.112.0/20

    Signature Algorithm: sha256WithRSAEncryption
         78:20:cd:d4:7e:3c:94:99:2b:4e:de:47:4c:a7:34:e5:95:91:
         2a:11:83:f5:55:51:24:97:4e:60:43:93:94:0c:82:fa:7e:49:
         4f:e9:2b:e8:16:d3:7f:e7:14:5f:9e:c4:19:b1:53:a5:79:be:
         9d:30:80:4c:0e:90:69:87:56:7f:8e:74:10:02:6b:c6:c2:b8:
         58:52:3d:2e:ba:99:d5:59:de:06:8c:ee:6a:93:87:ac:9f:91:
         27:93:f2:45:9f:83:84:8b:a6:21:a1:b4:ec:b9:ad:6d:dd:7e:
         e4:69:77:69:a3:04:9b:bf:04:a0:4e:27:57:6c:1a:bd:6c:b2:
         69:e4:15:19:23:1e:92:ae:62:46:23:1a:61:0c:07:f7:f0:e2:
         75:cd:05:45:3a:c2:7f:f9:7b:f8:ea:ec:d5:8e:7e:83:ae:43:
         fc:bb:d5:fd:11:01:45:c1:ac:2f:33:97:dc:f8:d9:28:71:4d:
         1f:60:b6:8d:2f:c7:c5:4d:f3:b3:26:ba:3d:cf:54:3b:ec:c2:
         16:34:a1:42:66:b1:7b:6d:91:23:49:0e:87:80:fe:cf:aa:54:
         fd:11:08:f5:ab:cd:17:ce:cd:0d:a7:3d:1e:16:c4:ab:7d:db:
         85:c8:2f:36:34:0e:4b:e1:76:71:5a:e5:9a:8e:f7:a7:2e:f1:
         45:65:b8:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----