Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/89c340a146332df74499774abe5141700a27a59b.cer
File:                     89c340a146332df74499774abe5141700a27a59b.cer (raw, json)
Hash identifier:          IB+AA1/lgibjXA+MIc2QUewosPmHpPA1WWETutQeIEY=
Subject key identifier:   97:01:81:06:44:AE:05:F1:BD:C8:46:6B:38:28:23:DF:79:FD:9B:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107E441
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ebe8ad8-5a3c-4f66-aa76-23e4229fa9a7/89c340a146332df74499774abe5141700a27a59b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ebe8ad8-5a3c-4f66-aa76-23e4229fa9a7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 23 Jan 2024 14:39:57 +0000
Certificate not after:    Sat 22 Nov 2025 21:49:51 +0000
Subordinate resources:    IP: 2801:1c:7800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17294401 (0x107e441)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 23 14:39:57 2024 GMT
            Not After : Nov 22 21:49:51 2025 GMT
        Subject: CN=89c340a146332df74499774abe5141700a27a59b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:f0:7b:2d:8b:75:6f:f5:af:41:ef:8b:87:c2:
                    95:b1:6c:d6:a2:33:cd:66:c2:86:8a:9c:7d:34:2a:
                    5d:d7:b4:91:93:3f:20:cb:fe:5f:ea:27:10:77:19:
                    d9:1f:2a:40:8c:a6:89:cc:29:28:ca:74:8a:a4:fc:
                    7f:95:15:a7:d3:76:05:4b:b3:fb:f3:96:7e:f3:e0:
                    a3:f4:0d:02:51:35:1d:4f:2a:c0:9c:83:e0:31:ae:
                    0c:45:fb:d2:5e:5f:e5:b1:c9:a0:57:11:f1:e2:e5:
                    fe:a3:e7:9f:06:de:a0:f2:1b:ac:d5:24:e5:ad:a2:
                    42:d0:48:47:64:db:72:83:67:c2:ce:73:a3:b9:e5:
                    8f:c2:0f:8a:23:66:d9:ce:2d:d8:e8:b9:01:9b:0c:
                    d9:0b:6c:11:91:20:16:e3:10:0d:5a:b8:bf:7a:76:
                    93:2d:08:09:07:a8:e2:70:da:03:fd:17:0f:1a:fa:
                    48:c0:f6:d3:c2:91:c8:e2:9f:17:29:05:6f:ba:a3:
                    82:58:b6:dc:4c:d2:87:e3:92:c3:39:ed:2e:d2:9f:
                    7f:c2:7c:e2:9e:48:65:34:0b:9f:a6:64:a8:cb:fc:
                    06:57:6e:e0:8c:e0:ce:f5:60:a0:e9:51:6b:79:e2:
                    67:f5:f0:b9:a7:9a:d2:33:11:79:91:8a:42:03:46:
                    7f:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:01:81:06:44:AE:05:F1:BD:C8:46:6B:38:28:23:DF:79:FD:9B:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ebe8ad8-5a3c-4f66-aa76-23e4229fa9a7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ebe8ad8-5a3c-4f66-aa76-23e4229fa9a7/89c340a146332df74499774abe5141700a27a59b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:7800::/48

    Signature Algorithm: sha256WithRSAEncryption
         9f:88:69:84:a4:27:b9:63:4e:af:75:e9:34:15:fd:6f:07:a2:
         84:a4:ad:3b:2a:78:e7:e0:2b:8d:21:b0:aa:d5:06:78:36:a1:
         7a:11:d0:38:7b:8d:83:31:f8:fd:aa:19:a9:73:89:ca:b0:77:
         a0:15:4c:40:73:44:fb:61:04:b7:b4:0c:c2:70:97:a7:4d:8e:
         b3:cc:3b:39:17:4d:95:7e:78:eb:0e:18:c2:99:67:c1:19:f5:
         4c:a9:3e:65:91:3b:e4:47:73:20:6d:64:2c:85:e2:ca:c0:de:
         7d:1d:13:ed:98:29:d6:8c:46:53:72:37:09:78:9d:66:8c:63:
         56:65:4f:23:43:30:7b:0f:28:49:11:7e:ed:47:f4:00:33:fd:
         24:f0:a8:b1:6b:8b:4d:f3:43:6a:72:cf:d3:75:d8:84:d6:43:
         f4:54:41:ea:07:25:cc:37:a6:7a:77:60:ce:13:73:a0:b7:65:
         a8:f3:01:6f:bf:6d:52:e7:13:0e:cc:43:63:3d:74:e5:c0:e4:
         f2:d0:7a:f8:97:4d:72:57:81:12:36:99:2e:a5:93:a0:a4:fc:
         fa:03:df:68:42:9c:80:04:15:7b:f6:e9:29:b2:6c:4e:36:85:
         06:63:fc:6b:4c:53:7a:d1:83:d0:55:65:f0:48:e0:53:22:89:
         80:1c:a0:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----