Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/87881b4afbdead7b0ac971eaf17a10337ebc6ff7.cer
File:                     87881b4afbdead7b0ac971eaf17a10337ebc6ff7.cer (raw, json)
Hash identifier:          vzoIVTw6O0w8/4hQeg/s7u4kLnDmnu83WPaBRp3Kb+U=
Subject key identifier:   8F:95:72:80:74:D6:64:F5:DB:9C:78:C7:FA:E6:BA:E4:81:91:4E:B5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7B479
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ded480a1-26db-4bed-800d-c863a8d88a71/87881b4afbdead7b0ac971eaf17a10337ebc6ff7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ded480a1-26db-4bed-800d-c863a8d88a71/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Apr 2023 20:13:32 +0000
Certificate not after:    Mon 02 Dec 2024 22:03:07 +0000
Subordinate resources:    IP: 2801:1f:d800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15185017 (0xe7b479)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 28 20:13:32 2023 GMT
            Not After : Dec  2 22:03:07 2024 GMT
        Subject: CN=87881b4afbdead7b0ac971eaf17a10337ebc6ff7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:a5:f0:4a:42:82:e2:5a:91:aa:c2:08:e4:bb:
                    cb:01:61:ad:38:67:c5:ee:28:1b:79:7d:d0:82:23:
                    43:ad:ed:92:c5:72:ce:2d:ae:6b:24:2d:9d:e2:d4:
                    d7:a0:70:0f:24:00:f0:96:b5:f4:6e:0f:f6:28:0c:
                    32:1a:1f:5e:d6:01:18:a5:17:f4:67:16:2f:72:80:
                    84:1b:9b:81:b8:b0:55:57:bc:11:8e:71:f5:c3:7c:
                    dd:b1:64:90:34:f0:8e:3f:76:a3:38:3d:f0:f2:d0:
                    10:65:0f:a4:c7:29:83:db:1b:c8:79:79:f5:79:4b:
                    c4:d4:13:a3:78:d8:e0:89:b2:82:90:8c:77:7d:43:
                    ee:8f:c5:a3:03:01:21:ec:cd:2f:1f:17:cf:7b:38:
                    17:52:1a:77:3e:e4:d4:10:d8:2d:1a:a6:0c:e7:e7:
                    77:18:ef:6d:1a:d9:34:bb:9a:52:ff:0a:8b:dd:c6:
                    96:95:cf:d6:d8:e4:3b:54:d2:a3:52:07:09:5a:e4:
                    83:98:85:cd:29:01:c9:05:dd:4b:20:df:da:a6:d1:
                    58:2b:c3:b7:9c:76:b2:b6:bf:cd:5d:29:c4:88:88:
                    b3:d1:f6:c1:f8:83:4a:c4:ec:9f:0e:f3:47:04:77:
                    15:2b:35:b8:ed:bf:6c:2c:81:42:e3:5d:df:bb:1f:
                    7f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:95:72:80:74:D6:64:F5:DB:9C:78:C7:FA:E6:BA:E4:81:91:4E:B5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ded480a1-26db-4bed-800d-c863a8d88a71/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ded480a1-26db-4bed-800d-c863a8d88a71/87881b4afbdead7b0ac971eaf17a10337ebc6ff7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:d800::/48

    Signature Algorithm: sha256WithRSAEncryption
         3a:7e:f2:c9:3c:d4:72:eb:3c:fc:ca:0a:25:c1:b4:f8:1f:92:
         ba:d5:12:e5:45:b7:6b:6f:81:5e:39:c9:bb:ce:75:3e:f2:0a:
         ad:e3:93:83:7c:a1:3e:df:a4:e3:0b:18:de:a1:4b:ec:4e:81:
         b2:44:54:91:f8:be:50:50:96:ea:59:82:c6:ad:01:f8:5d:f4:
         e7:0e:38:0c:02:3f:50:b3:21:60:10:bd:27:e2:b9:83:66:ea:
         ab:96:ef:5f:ba:17:ab:a7:6c:6f:ea:d3:4f:3f:80:69:58:a2:
         76:23:da:6f:c4:24:b7:7b:4d:c1:1e:31:92:d5:9c:f3:70:65:
         ad:5c:34:97:88:be:73:97:55:23:fd:dc:2d:97:a6:04:d1:47:
         d8:cb:93:48:f8:96:eb:0d:bf:0f:85:37:ad:aa:f6:39:3e:09:
         b3:1a:8b:aa:44:07:a1:7b:c6:f0:cf:d6:6d:b0:c0:cb:3e:52:
         ff:77:ae:99:26:c8:c6:93:e5:23:b7:a6:e1:58:4d:e3:dd:d9:
         81:b7:af:03:5c:1c:67:c5:c6:67:0f:0d:fb:27:20:4a:aa:62:
         12:9d:ad:64:64:ae:c5:70:da:d4:53:e0:9e:e1:97:6b:f1:c2:
         95:84:98:6a:0c:5a:f5:ef:60:46:8a:de:37:b9:71:f5:a2:d8:
         3e:65:2e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----