Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/94295d6436c5301f65d0f7d1e43817dd159c6f06.cer
File:                     94295d6436c5301f65d0f7d1e43817dd159c6f06.cer (raw, json)
Hash identifier:          v95AtWasN2qfkYeHUiOCkXpaq7HBw8L3PbzJxjmVvAE=
Subject key identifier:   FF:BF:09:98:CD:75:2C:43:FD:84:F7:BF:B3:73:98:A8:9A:97:83:CE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F9F572
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/94295d6436c5301f65d0f7d1e43817dd159c6f06.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16381298 (0xf9f572)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=94295d6436c5301f65d0f7d1e43817dd159c6f06
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:2b:d3:55:67:59:bb:f7:47:80:24:94:62:6f:
                    ac:0e:a9:43:a2:3e:44:19:24:72:6c:6a:2d:3a:86:
                    15:66:f2:31:65:b2:9d:06:eb:78:bf:09:82:d5:09:
                    dc:43:99:1b:63:50:05:8d:4a:4e:cf:07:a1:c8:bd:
                    97:e4:c8:fa:f6:b3:45:83:47:51:de:c4:8c:f3:ba:
                    d7:32:18:ae:77:1f:ef:0f:a1:50:56:5f:1c:f5:54:
                    72:49:28:86:66:6a:dc:f4:e7:df:84:4b:d8:9d:3b:
                    e1:50:a0:57:83:26:f9:aa:28:0d:ee:9f:8f:1d:f7:
                    c8:57:ef:d2:ea:e7:27:6a:0e:b2:e9:5b:16:a9:5f:
                    3c:8e:05:01:a0:f4:a7:00:23:cd:bf:8f:70:bc:65:
                    99:f9:fe:3c:74:52:d7:f8:d3:c9:64:d6:60:83:a8:
                    40:67:89:31:64:3f:26:f8:50:4b:03:77:da:6f:5d:
                    be:a7:43:d2:23:64:77:f8:3b:db:0e:9d:3f:48:2b:
                    f8:f7:06:ec:d3:08:e0:93:ac:93:e4:6c:8d:66:97:
                    19:aa:f7:12:a6:95:1a:1a:c0:73:e6:6a:2d:79:3f:
                    08:90:e8:ca:49:6f:33:d8:bd:c2:20:42:df:f5:a9:
                    8c:b3:15:15:7b:3c:37:40:c0:6a:f6:50:a2:48:98:
                    9b:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:BF:09:98:CD:75:2C:43:FD:84:F7:BF:B3:73:98:A8:9A:97:83:CE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/94295d6436c5301f65d0f7d1e43817dd159c6f06.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         6f:ab:35:0f:a2:72:0c:88:c3:09:58:c8:f5:11:6f:5d:2b:08:
         62:13:3c:e6:47:6a:9f:e8:05:08:17:50:76:53:55:51:db:9a:
         dd:bb:5f:7a:b7:49:db:f2:d0:75:d8:3b:ab:3d:0d:18:99:f2:
         f5:be:da:4f:2b:97:df:c2:9a:b9:39:cc:47:58:02:e3:1e:ea:
         0e:c9:4a:c2:a7:21:a0:a0:29:bf:ef:9f:a7:4f:28:83:b9:3d:
         ed:bc:fe:24:82:2f:64:be:94:e2:e2:98:68:bc:17:73:03:fc:
         38:42:4c:a6:a9:fd:f2:c7:7d:a5:79:50:f2:b3:09:60:9f:39:
         34:21:3c:27:6a:d7:ca:22:9c:28:82:6c:2c:db:81:5f:5c:e0:
         5a:86:61:94:2e:88:ca:9c:ed:35:c3:80:ed:7a:ac:9d:f6:4f:
         2b:70:01:19:fa:c3:4a:67:01:c5:5b:df:a8:dc:cd:17:11:f8:
         f6:00:f6:f7:a3:6e:7c:83:4c:eb:2f:22:86:58:c7:99:ac:d1:
         8a:a3:d8:aa:ee:b1:6d:ad:1a:ca:68:91:97:32:f2:c7:0a:1d:
         be:f2:7e:a8:1c:2c:b5:60:ac:60:ee:96:08:a1:95:db:5d:de:
         d9:08:4d:47:b5:d5:37:25:e0:2c:37:2f:9d:7a:cc:da:d4:cd:
         87:dc:2f:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----