Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73cf52ff7eae64cc74ffbc2bcf857937d9a9e699.cer
File:                     73cf52ff7eae64cc74ffbc2bcf857937d9a9e699.cer (raw, json)
Hash identifier:          Cy8ZUJld0Pc9qtcThHnpXJB7nCpj8lTzKT2BmL2OExA=
Subject key identifier:   39:83:59:0A:71:C6:B8:46:B1:C0:B8:84:FE:70:C0:E2:E2:2A:1A:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FABE5D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bbaa765c-58c7-44d1-84e6-87697a244a5a/73cf52ff7eae64cc74ffbc2bcf857937d9a9e699.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bbaa765c-58c7-44d1-84e6-87697a244a5a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 17:08:05 +0000
Certificate not after:    Fri 18 Apr 2025 17:57:31 +0000
Subordinate resources:    AS: 61444
                          IP: 200.77.184.0/22
                          IP: 2803:a980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16432733 (0xfabe5d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 25 17:08:05 2023 GMT
            Not After : Apr 18 17:57:31 2025 GMT
        Subject: CN=73cf52ff7eae64cc74ffbc2bcf857937d9a9e699
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:50:75:1f:d2:95:a7:75:4e:8a:44:75:fc:74:
                    cf:24:26:11:ea:c8:eb:1c:eb:98:f6:fa:bb:26:4f:
                    a5:f1:dd:b1:29:2b:60:83:a6:f5:7f:38:f8:30:eb:
                    2d:d3:a1:a0:1f:96:85:43:0d:08:0b:fa:32:de:f7:
                    7b:f1:66:c1:aa:f7:29:99:ae:b3:86:08:78:81:8d:
                    c4:52:ed:2c:1d:e1:37:e9:5e:d9:32:d2:c2:11:06:
                    1a:fc:d2:ba:56:3e:1a:50:41:d3:7f:a8:fb:5a:e7:
                    d8:3f:87:c3:c2:6d:f3:f9:e2:51:2c:e2:8e:05:ab:
                    02:36:e6:9d:8e:09:5c:9e:d0:91:ca:df:e6:7e:c9:
                    4b:78:0b:ab:47:39:d7:28:a8:41:a0:f9:d2:83:c1:
                    c0:a1:70:0c:2e:88:6b:c4:5f:e5:8a:a2:8c:87:22:
                    42:0b:c2:45:2d:b7:83:53:80:92:c5:f1:8a:1c:5f:
                    93:dc:cc:e7:34:9c:4b:ef:d0:e7:3c:b4:2e:fd:cb:
                    bb:ab:ec:a9:6f:43:9b:57:c2:30:58:f0:f4:0e:2f:
                    12:76:e6:82:62:25:bc:ad:d3:f9:e6:27:cb:a0:8d:
                    24:f1:9d:50:c5:46:e9:6b:84:48:17:a6:82:bb:22:
                    78:62:27:fb:39:77:98:8f:09:4c:7a:33:15:af:05:
                    14:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:83:59:0A:71:C6:B8:46:B1:C0:B8:84:FE:70:C0:E2:E2:2A:1A:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bbaa765c-58c7-44d1-84e6-87697a244a5a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bbaa765c-58c7-44d1-84e6-87697a244a5a/73cf52ff7eae64cc74ffbc2bcf857937d9a9e699.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.77.184.0/22
                IPv6:
                  2803:a980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61444

    Signature Algorithm: sha256WithRSAEncryption
         4c:7b:9f:f5:5d:62:23:d6:64:af:ca:f3:22:07:2e:46:d4:51:
         44:39:16:d5:c4:6b:f0:29:8f:43:8e:04:4a:51:79:65:de:fb:
         11:e7:e5:e0:a7:de:74:dc:ef:4a:8f:87:5a:a4:de:89:0d:67:
         23:3e:cb:aa:e8:91:8a:2c:a7:57:d8:00:87:3b:ab:34:c0:19:
         bd:d4:3c:92:19:5f:20:e5:aa:1d:33:26:23:91:3f:d1:38:51:
         db:66:2a:9b:f4:87:db:89:53:62:08:56:ae:f8:5b:c5:ae:70:
         d1:03:cb:ff:a0:5d:87:8a:39:18:36:33:49:b3:2c:a7:66:40:
         5f:29:f6:e8:80:74:2d:3b:3b:38:b8:f1:54:9e:99:f3:75:c2:
         2a:5f:99:be:24:66:e9:2f:a5:b8:ed:12:56:42:15:40:69:8b:
         7f:6d:df:41:67:f9:92:93:d0:96:ad:96:22:38:ae:5a:77:df:
         0a:a2:1c:e5:eb:1b:f4:7c:2f:77:5c:b9:24:7e:cd:fa:4f:8a:
         c0:86:78:69:11:59:a6:ec:90:8e:3f:b6:8e:56:50:f1:7d:68:
         27:59:b3:ec:39:82:8f:d0:ea:83:53:a3:51:1c:0c:0e:a2:f2:
         96:30:7b:56:2d:cb:02:de:fb:94:a4:0d:57:48:8e:a6:54:84:
         ae:00:c5:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----