Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/78e999ca23d8f5382dea3350078db5f59fa3c875.cer
File:                     78e999ca23d8f5382dea3350078db5f59fa3c875.cer (raw, json)
Hash identifier:          uZ5rThXYGTrbcMxdNFBaL2Gn1Serh1+L9gv0jnLyklA=
Subject key identifier:   B3:BE:40:90:9A:93:8D:7C:2D:37:9F:AC:41:49:AE:DA:FF:0D:10:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F06837
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0d2076e4-207c-4e9c-9f79-128fdc2737b6/78e999ca23d8f5382dea3350078db5f59fa3c875.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0d2076e4-207c-4e9c-9f79-128fdc2737b6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 02 Jul 2023 21:48:43 +0000
Certificate not after:    Sat 31 Aug 2024 17:32:28 +0000
Subordinate resources:    AS: 272898
                          IP: 2801:18:d800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15755319 (0xf06837)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  2 21:48:43 2023 GMT
            Not After : Aug 31 17:32:28 2024 GMT
        Subject: CN=78e999ca23d8f5382dea3350078db5f59fa3c875
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:95:f5:5d:79:be:b5:e0:ae:cb:e9:9b:32:c4:
                    c8:39:a9:06:31:25:f3:76:6f:37:37:b2:b7:cc:fc:
                    1f:f5:03:f4:a0:d1:13:f7:fd:95:3b:b3:12:6b:33:
                    e4:e4:7c:97:59:1f:af:42:96:22:a3:4b:03:80:53:
                    7a:7d:bf:57:0c:7c:41:de:77:49:e3:87:a7:57:1a:
                    2e:ce:78:57:1d:64:7b:f5:42:95:18:ef:72:e9:41:
                    e6:73:c5:21:21:9c:2d:8f:cb:41:e3:e0:ab:fb:60:
                    23:a4:df:e2:a2:e8:73:c1:46:1f:5d:b4:b6:52:4f:
                    87:53:cd:f7:8d:b3:b0:c9:a7:3e:c1:0a:7f:1b:5b:
                    bd:3c:8e:7d:c7:d2:7e:b8:9e:66:47:e9:b5:f6:e5:
                    ae:30:7c:cb:1a:1e:22:9a:2e:0a:39:eb:80:7a:c5:
                    7e:17:bf:64:e8:e3:de:ed:51:f7:e7:3b:88:ae:94:
                    70:fa:b3:c7:8c:89:1b:95:4e:25:4c:2f:03:53:4b:
                    db:88:93:41:5e:3f:41:7c:9b:8b:14:29:be:ba:ea:
                    33:be:5c:4c:ff:ad:72:64:c2:0b:71:ce:60:b1:d4:
                    88:84:12:76:6e:31:5e:8c:54:75:0c:bc:bc:cb:f8:
                    f7:59:fe:cd:a2:d8:15:42:3c:fc:f2:08:bc:1c:b7:
                    21:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:BE:40:90:9A:93:8D:7C:2D:37:9F:AC:41:49:AE:DA:FF:0D:10:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0d2076e4-207c-4e9c-9f79-128fdc2737b6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0d2076e4-207c-4e9c-9f79-128fdc2737b6/78e999ca23d8f5382dea3350078db5f59fa3c875.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:18:d800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272898

    Signature Algorithm: sha256WithRSAEncryption
         64:2a:ad:d4:9a:2f:2e:e7:c7:33:87:7f:e8:db:86:07:6f:45:
         24:cf:51:10:b0:ea:b8:c6:5a:50:36:a8:5a:37:fa:0a:34:2e:
         4b:ef:cd:2b:b5:9b:d6:a7:e4:ec:b6:d0:16:26:f9:33:d6:ed:
         9d:41:58:5c:71:89:46:e5:c9:5d:07:ac:c4:c5:1a:dc:5b:96:
         7c:b8:97:43:ea:2b:3b:9a:15:aa:43:a2:bc:d2:74:6c:b1:0e:
         23:4c:41:70:a0:44:e9:17:45:e5:00:bd:de:f8:b0:e0:c2:a0:
         5f:dc:49:4f:cc:d5:91:76:92:9b:9d:06:93:a0:6e:66:77:16:
         9f:b7:a0:48:5a:7c:19:fd:0b:19:ff:48:1a:e9:c0:74:d7:2b:
         e8:df:9a:09:f5:98:75:a3:1c:d5:47:e2:ed:02:f5:3a:b3:ec:
         f3:ee:fe:40:9e:8f:8e:21:00:4b:01:b2:b0:f7:83:68:ba:4b:
         c1:7e:3b:73:90:9c:ae:b7:fd:19:72:ba:b9:bb:6c:53:7e:37:
         14:c1:9c:6f:8a:ef:3b:3d:bd:9d:a1:f1:0b:fe:7b:6b:88:e4:
         50:70:0b:65:ca:6d:e4:67:fe:51:db:3c:80:f5:ec:b2:91:06:
         6d:ae:6b:df:fe:28:61:a2:00:c2:e7:d8:b9:9f:6e:37:2c:a8:
         a7:38:91:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----