Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/958391604d7a4a2c8cb87a2980ac1e779eeace28.cer
File:                     958391604d7a4a2c8cb87a2980ac1e779eeace28.cer (raw, json)
Hash identifier:          kQiWcxQH8/sKpU7bzV+IMcthn0ebBhPuCOlWQ57Mugo=
Subject key identifier:   DE:52:46:78:A1:8C:77:22:46:7E:24:6E:76:E3:9D:7C:9B:0D:F1:CF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F45759
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b754da9b-2ed5-41f5-be5f-0fb0028f11c1/958391604d7a4a2c8cb87a2980ac1e779eeace28.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b754da9b-2ed5-41f5-be5f-0fb0028f11c1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 20:54:35 +0000
Certificate not after:    Wed 28 May 2025 06:00:00 +0000
Subordinate resources:    AS: 52269

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16013145 (0xf45759)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  8 20:54:35 2023 GMT
            Not After : May 28 06:00:00 2025 GMT
        Subject: CN=958391604d7a4a2c8cb87a2980ac1e779eeace28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:39:1b:f3:e4:a1:23:5b:bd:4b:2e:b4:f1:46:
                    c3:b0:a2:19:f6:e0:d3:0c:80:b5:c2:09:36:f8:6d:
                    7c:c5:84:90:f0:77:06:6a:64:e3:53:2d:af:49:97:
                    8d:f0:91:b9:14:8c:cc:10:01:03:78:90:0e:83:a4:
                    16:93:59:83:ab:53:73:3c:05:3c:e6:3d:78:0b:b0:
                    ce:6f:66:53:3b:8b:30:64:36:be:27:e3:e7:5b:be:
                    9e:bf:92:8c:77:8f:c9:fd:99:9e:c2:ce:65:58:67:
                    ec:45:cc:5e:5a:60:17:70:1d:4e:66:27:32:46:94:
                    fa:30:eb:90:74:57:7a:b7:23:a8:04:95:9b:86:41:
                    b2:17:ab:ed:31:4f:39:92:77:46:5e:45:66:88:c0:
                    39:64:66:6c:bd:2c:4c:e2:d4:74:a0:a5:7d:90:f9:
                    1b:77:60:bf:57:8d:92:ad:92:2f:31:d1:25:c8:b6:
                    e1:98:11:32:5d:29:86:65:d6:d0:24:7d:1c:20:04:
                    45:d2:70:7e:d5:24:c0:af:26:2b:02:34:f8:69:95:
                    57:ff:5c:48:3e:a6:45:05:cb:d1:3f:5a:bd:f7:29:
                    da:e2:04:6c:cd:89:d6:14:42:4e:3c:c7:8a:2d:d5:
                    b0:59:0e:56:d4:39:8d:f1:de:f5:26:66:a8:40:a2:
                    34:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:52:46:78:A1:8C:77:22:46:7E:24:6E:76:E3:9D:7C:9B:0D:F1:CF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b754da9b-2ed5-41f5-be5f-0fb0028f11c1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b754da9b-2ed5-41f5-be5f-0fb0028f11c1/958391604d7a4a2c8cb87a2980ac1e779eeace28.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52269

    Signature Algorithm: sha256WithRSAEncryption
         91:3b:f0:00:e5:a0:19:34:f1:0a:e3:21:a2:cf:81:1d:20:f3:
         54:86:24:f9:57:25:22:f4:da:9f:40:a2:18:79:d2:0b:d9:e1:
         7d:93:da:8b:33:c7:42:1d:a1:2f:15:dd:e2:83:20:41:69:b6:
         4a:ce:bb:67:b9:7f:eb:89:4c:11:37:2e:3e:96:7e:aa:c3:ae:
         a0:44:56:f7:63:7f:0e:05:bd:5b:1f:fa:ae:77:ab:e1:45:2d:
         69:02:12:97:b8:ee:7b:fd:2c:b3:ca:68:5b:6a:01:73:ec:f1:
         05:c4:ac:73:1c:49:9f:5f:23:0d:8c:78:5f:29:43:34:70:c6:
         d9:d1:1d:0d:97:a9:76:23:db:1f:5c:f7:c7:e9:6f:c0:b0:82:
         a6:ae:c0:36:05:18:96:b2:17:95:a6:82:7d:0e:be:b6:0e:e6:
         c6:63:15:de:59:3d:16:d5:03:58:66:fc:09:4b:89:dd:c3:e9:
         e4:51:9b:1b:e9:c0:48:88:65:e4:84:11:b5:a7:70:e1:12:20:
         15:ae:92:3f:2b:cb:38:63:fe:a0:b8:17:d1:e9:25:6b:7a:58:
         fa:b3:a4:36:02:2b:fd:79:97:a2:66:4f:5a:d1:c5:c7:7e:1f:
         c8:a9:be:b2:19:76:67:52:35:d2:54:08:a0:23:b6:d2:6c:5c:
         66:83:ac:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----