Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/73e836240ffeb30c83221935181d6b545b2f2619.cer
File:                     73e836240ffeb30c83221935181d6b545b2f2619.cer (raw, json)
Hash identifier:          5DlZbcjntwgAnIyayguSMPfv7cEuVr5wZESLA4Tn4zo=
Subject key identifier:   AB:61:55:F6:4F:6E:EE:9E:80:11:F3:B6:29:58:CC:F6:26:40:C4:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE1CC4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/152df47c-5b0e-4f76-95ae-8d9b732e51ef/73e836240ffeb30c83221935181d6b545b2f2619.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/152df47c-5b0e-4f76-95ae-8d9b732e51ef/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 25 Oct 2023 14:10:45 +0000
Certificate not after:    Sun 03 Nov 2024 17:10:51 +0000
Subordinate resources:    IP: 170.238.8.0/22
                          IP: 2803:d2c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16653508 (0xfe1cc4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 25 14:10:45 2023 GMT
            Not After : Nov  3 17:10:51 2024 GMT
        Subject: CN=73e836240ffeb30c83221935181d6b545b2f2619
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:1e:a7:5e:57:28:dd:16:a0:2d:c9:58:a1:f8:
                    ba:a2:50:5f:ee:33:7b:ae:4e:b1:96:11:7c:ab:22:
                    da:bb:1f:7f:b0:98:04:68:9c:0e:bb:38:d6:2b:4a:
                    90:e8:ab:a9:2b:81:0c:7d:40:e6:26:22:67:9a:f0:
                    0c:92:06:3b:41:ec:c1:b5:8a:0f:59:c4:12:e7:6f:
                    e5:95:20:de:76:e1:35:e4:6d:30:c4:f5:a3:f7:6d:
                    1b:d5:f6:e8:50:74:94:6e:db:e2:cd:da:82:a2:d3:
                    e4:56:f2:7e:a8:7d:63:37:b6:d9:97:d0:38:5f:c2:
                    cb:3c:58:79:3d:39:d0:38:a1:cc:d8:6a:13:e3:d0:
                    a9:98:d3:a9:6a:81:96:c4:ef:01:e8:41:0e:c5:94:
                    dc:8c:52:7c:ba:2f:5a:ac:91:71:95:6a:28:b5:f6:
                    c8:fb:e2:8f:70:36:74:c7:58:c6:b3:98:45:c7:ad:
                    d1:ab:96:b9:bb:8e:bc:c8:b3:94:9a:74:95:e2:59:
                    37:bf:b8:02:cc:d6:a6:24:08:f2:bd:16:12:ab:6d:
                    97:a6:11:c1:bc:8a:d5:91:5e:67:0e:58:09:f4:f4:
                    a5:c1:06:38:fa:a3:34:28:f2:ca:f0:21:51:cb:2a:
                    c3:71:63:54:ca:b4:05:b8:ff:ae:92:0d:70:b6:32:
                    aa:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AB:61:55:F6:4F:6E:EE:9E:80:11:F3:B6:29:58:CC:F6:26:40:C4:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/152df47c-5b0e-4f76-95ae-8d9b732e51ef/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/152df47c-5b0e-4f76-95ae-8d9b732e51ef/73e836240ffeb30c83221935181d6b545b2f2619.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.8.0/22
                IPv6:
                  2803:d2c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:15:bd:cc:57:c6:39:d1:e9:b0:2b:ff:5d:2c:c0:82:5f:a1:
         ca:15:ac:78:b6:75:2d:75:74:61:d4:d2:6d:07:e6:21:a9:97:
         af:9e:7d:94:b3:e3:0b:4a:68:5b:e3:d2:52:d1:d3:4d:36:a2:
         81:62:58:0a:88:ed:49:ee:e4:e9:a7:08:7c:b2:05:3b:9c:b8:
         dc:4f:3e:4f:39:20:b2:63:ab:20:53:9b:dd:bc:6c:c2:e8:ad:
         c9:50:ec:a0:06:63:fe:ee:e1:2b:ad:e7:c2:28:9b:1f:c4:90:
         27:26:e3:b4:99:85:4c:55:c5:8d:b6:2c:2d:d4:f0:f2:bc:b6:
         22:87:a2:43:cb:78:1f:40:15:ab:e8:a5:64:0f:4f:4d:f8:0f:
         b0:e2:db:7e:e9:52:dd:b6:95:22:cc:6e:22:d2:05:7b:f0:c1:
         8b:9a:95:b5:4d:94:6d:6d:66:ed:62:09:b7:90:2a:24:0b:f6:
         8d:61:58:30:f4:33:4b:ce:4e:ee:1c:62:c2:3a:8a:00:0f:6d:
         18:75:99:32:fb:fe:1c:7b:be:65:5f:7f:71:35:8c:85:e2:0b:
         e6:6f:03:98:44:5e:b2:29:8b:e4:3e:16:c0:27:b3:77:d9:b7:
         fb:61:e1:53:36:05:f6:50:d5:3d:6c:24:c2:9e:11:80:6c:31:
         62:d1:f0:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----