Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9c8f21d80d798102715dd1f548b43ef26c46093b.cer
File:                     9c8f21d80d798102715dd1f548b43ef26c46093b.cer (raw, json)
Hash identifier:          Y2ofwnyaIsC0jusSKNf340LwnLyX5KeZCSEdjoQTFJE=
Subject key identifier:   90:29:DD:61:CD:BD:DD:A4:49:64:64:5E:86:64:B5:47:5A:4B:03:B1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01020F4B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b2950c90-8322-4a35-99e1-47f6142256f6/9c8f21d80d798102715dd1f548b43ef26c46093b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b2950c90-8322-4a35-99e1-47f6142256f6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 22 Nov 2023 20:30:59 +0000
Certificate not after:    Sat 20 Sep 2025 22:20:04 +0000
Subordinate resources:    IP: 2801:1f:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16912203 (0x1020f4b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 22 20:30:59 2023 GMT
            Not After : Sep 20 22:20:04 2025 GMT
        Subject: CN=9c8f21d80d798102715dd1f548b43ef26c46093b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:14:c9:6f:c8:e4:6d:cb:e9:39:33:9a:d7:be:
                    4a:93:ed:15:2e:36:ea:e2:28:8a:65:78:38:29:72:
                    72:39:69:ab:4a:7d:a9:99:76:dc:75:02:51:94:9e:
                    3e:3c:60:b8:d4:57:34:56:80:74:e3:5e:ba:e8:1c:
                    f1:82:da:e3:06:9d:49:30:b2:23:0a:47:2a:57:84:
                    54:5e:a2:56:33:59:e0:c2:c3:c3:38:78:68:6d:e2:
                    c5:ea:bf:75:a6:54:ac:87:83:d0:c4:85:e5:27:e3:
                    ff:b9:d0:c5:5a:9c:6a:b7:64:81:fe:0c:16:64:81:
                    78:03:5c:5e:61:be:d8:92:35:e7:d9:b1:11:20:47:
                    aa:04:1d:10:5c:2d:ea:0b:04:aa:8c:7a:d3:bb:21:
                    6c:6f:18:4b:67:de:ad:ab:bb:c7:c9:0a:bb:e5:ef:
                    76:76:01:bb:24:f5:50:23:f4:1f:31:fd:c0:46:ed:
                    59:90:03:0d:90:19:db:59:37:14:f5:29:49:fe:76:
                    a1:7a:4e:cd:03:83:ef:3c:1d:60:2a:ac:73:df:1d:
                    77:fa:96:21:8b:fa:88:be:d0:d5:a2:50:dd:5a:10:
                    aa:7d:59:b3:2d:02:2e:10:40:73:59:cd:83:dd:43:
                    b0:b2:50:b9:e8:1a:61:8f:23:28:bb:6a:f2:25:1d:
                    0f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:29:DD:61:CD:BD:DD:A4:49:64:64:5E:86:64:B5:47:5A:4B:03:B1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b2950c90-8322-4a35-99e1-47f6142256f6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b2950c90-8322-4a35-99e1-47f6142256f6/9c8f21d80d798102715dd1f548b43ef26c46093b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1f:b800::/48

    Signature Algorithm: sha256WithRSAEncryption
         bc:91:e6:9d:d4:b2:05:56:7b:bd:26:9a:9f:61:b0:15:01:d9:
         14:b9:a2:8a:4a:f4:ac:a1:99:a4:3a:68:6e:76:18:ba:1d:d1:
         49:ad:63:ce:2b:a8:58:66:17:19:64:83:ca:65:b5:48:7b:a2:
         62:42:3b:64:d3:b3:83:5b:82:78:be:9d:de:be:cd:77:41:f3:
         9b:5b:ed:c4:4f:df:67:d8:9c:89:aa:d5:d9:4c:5c:86:40:d3:
         97:1e:98:f2:f9:7e:4d:b8:ec:90:60:97:ae:f8:73:45:46:fe:
         cb:c2:49:61:29:57:9e:6b:f5:3c:3d:e4:11:b4:89:d6:f3:bf:
         02:24:a1:bd:62:c3:6e:fb:38:2e:74:0d:f9:0a:98:01:e2:0a:
         f0:1e:9e:c0:93:26:2b:c3:fc:38:9a:33:36:0a:eb:59:f6:3a:
         a2:40:25:f6:78:7a:ff:5c:20:19:85:75:0b:41:32:27:63:35:
         de:2d:b5:ca:65:e2:51:ea:a2:c3:dd:70:de:5e:36:d3:32:72:
         72:76:d5:7f:98:fa:ad:bb:d6:8e:64:04:50:83:4a:ea:90:6c:
         d9:a5:53:1f:24:15:e1:1a:d8:ff:cc:27:27:04:6a:09:93:0a:
         26:f9:e7:64:96:c8:10:51:c3:7e:73:2e:20:78:f7:a3:c4:ab:
         96:84:70:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----