Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/92ed93fbd4c90f4cea03785f0f5a56730b65d6ed.cer
File:                     92ed93fbd4c90f4cea03785f0f5a56730b65d6ed.cer (raw, json)
Hash identifier:          oRjLPN+0N0EbleO43z47xiY+DXMSTnzRr67QHzrz19w=
Subject key identifier:   88:8E:AB:94:87:7B:1E:F2:12:F1:AA:5D:67:24:36:B9:03:38:EA:FE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CC568
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5434e3ab-b5f8-436a-afdc-4b8bf118ba4f/92ed93fbd4c90f4cea03785f0f5a56730b65d6ed.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5434e3ab-b5f8-436a-afdc-4b8bf118ba4f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 04 Mar 2024 19:22:46 +0000
Certificate not after:    Wed 05 Nov 2025 19:34:17 +0000
Subordinate resources:    AS: 273156
                          IP: 2803:8250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17614184 (0x10cc568)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  4 19:22:46 2024 GMT
            Not After : Nov  5 19:34:17 2025 GMT
        Subject: CN=92ed93fbd4c90f4cea03785f0f5a56730b65d6ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:9e:6f:d7:b5:e1:e1:8f:20:69:5b:53:17:4a:
                    39:1a:fa:b0:bd:1c:01:99:52:63:23:c5:8c:b2:8e:
                    6a:15:6f:f0:21:b7:d1:f6:d5:74:69:7f:7e:a7:cc:
                    15:42:30:af:03:00:c7:9c:fe:8f:c7:e1:ff:76:1e:
                    3f:cf:cd:f5:23:8b:7a:b1:c4:36:5a:26:0e:73:c9:
                    d9:93:93:5b:46:dc:52:ab:72:03:ec:f8:a9:f6:73:
                    b7:67:ae:08:0f:c1:34:76:fc:30:f7:58:12:7d:c5:
                    57:d1:5c:a4:c9:d0:c3:95:cb:0e:67:fa:f2:3b:f3:
                    14:97:e0:05:de:f0:3c:d1:30:fb:32:68:3f:9c:02:
                    2d:a9:ed:a1:e8:48:27:0f:dd:48:61:6c:ec:6d:e0:
                    49:c9:73:f0:f5:87:5c:45:53:28:45:8f:95:00:0f:
                    b9:92:a6:ee:19:c2:ea:04:fd:88:c5:87:a7:ab:ba:
                    5d:51:b4:8a:fa:44:a0:44:2c:34:24:65:17:39:5a:
                    7f:48:14:65:31:69:52:2c:e7:60:2e:6a:18:0c:5b:
                    d0:86:46:da:0d:e7:78:cc:5f:7d:a4:0a:da:dd:91:
                    f5:25:9c:97:55:22:42:5e:8e:30:e0:3b:eb:92:7c:
                    0e:6b:9e:db:6d:27:8b:1f:be:ab:6b:2b:23:1e:78:
                    a2:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:8E:AB:94:87:7B:1E:F2:12:F1:AA:5D:67:24:36:B9:03:38:EA:FE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5434e3ab-b5f8-436a-afdc-4b8bf118ba4f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5434e3ab-b5f8-436a-afdc-4b8bf118ba4f/92ed93fbd4c90f4cea03785f0f5a56730b65d6ed.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273156

    Signature Algorithm: sha256WithRSAEncryption
         96:8e:49:4a:23:e0:f9:3c:51:f1:d3:32:57:e2:b6:de:6c:e3:
         70:b3:45:3c:d9:7f:4f:e1:fe:95:ee:3c:04:bf:ab:6c:27:fe:
         09:16:c5:0d:7f:e3:56:4e:85:4f:28:a2:2c:c2:33:d2:a4:06:
         1c:02:bc:23:39:9c:5e:e3:2a:0b:44:7e:4a:3e:05:ca:80:19:
         ba:47:dc:a6:c4:87:c3:c1:64:8a:f8:12:86:19:ce:db:71:55:
         cd:52:1a:ff:b9:6a:cd:8e:b4:70:d9:0c:82:c9:90:98:da:2e:
         38:ed:9d:f7:c4:23:d0:af:ae:1f:76:4b:f0:97:09:a7:62:ee:
         b5:58:a0:1c:f6:10:9f:53:46:24:04:ca:fb:68:4b:09:4f:5a:
         a3:6e:98:2a:74:e7:90:22:a1:df:ee:00:fd:26:87:39:7a:c2:
         a9:18:46:bb:3b:6e:50:9f:e8:d8:b4:05:c7:e1:2f:f3:eb:d0:
         6d:e1:96:4a:6e:4b:9e:52:e7:66:45:d8:d6:23:f8:e0:b1:e4:
         30:9c:f7:a2:d0:22:49:e9:13:20:6e:6f:a9:1e:8f:6b:1c:84:
         10:d2:a5:39:7f:c9:42:68:e6:46:ba:73:e4:25:0a:3b:63:0e:
         8a:76:f9:0f:ff:c1:d1:cd:ca:18:eb:18:09:b5:df:87:be:69:
         13:73:4e:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----