Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9dafe3a00dbd52293854df882914e9876341397a.cer
File:                     9dafe3a00dbd52293854df882914e9876341397a.cer (raw, json)
Hash identifier:          212wJOa8FOMfa12jAzerlqWdFEfLPWk0Kq86WfH1kcI=
Subject key identifier:   AD:EB:79:8F:F7:2F:92:E7:B4:52:38:B1:2B:57:5A:19:EB:20:61:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3DAA9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9dafe3a00dbd52293854df882914e9876341397a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15981225 (0xf3daa9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=9dafe3a00dbd52293854df882914e9876341397a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:c2:f0:c2:c8:b8:f1:3f:e4:27:b3:d9:bb:cf:
                    7d:4f:67:da:ce:14:6d:fc:1c:a7:9c:fb:c4:2f:ea:
                    4d:89:65:25:ae:e7:0b:a4:44:fe:4c:5e:a1:66:13:
                    c1:d2:ac:f3:b3:f0:af:df:d0:f9:da:88:c2:39:81:
                    3f:b9:a1:e7:2a:23:e1:dc:0f:15:8e:04:e5:8d:1f:
                    ee:52:32:1b:e1:29:38:fa:92:40:9c:c7:bc:37:73:
                    a8:98:b8:57:ff:08:92:38:94:a0:52:e5:6b:84:6a:
                    65:48:02:52:f5:f0:68:ab:0d:a5:e1:bc:8b:da:da:
                    06:b6:ea:c2:c2:5e:a6:3e:02:10:b7:ab:c8:25:78:
                    69:8e:f7:e9:34:98:6b:ec:1e:2d:b3:e2:19:11:f8:
                    a8:9e:82:48:0d:31:66:5c:a4:51:b8:65:52:5b:e6:
                    35:21:6a:a7:42:8d:83:8b:52:95:f1:73:b9:64:a1:
                    ad:cf:08:3c:09:97:cb:ec:5c:a5:23:be:e7:0b:17:
                    ed:a1:93:d9:2f:74:28:3e:e5:5f:06:5c:f4:bf:c7:
                    65:e6:37:d4:9e:c5:20:e5:ac:42:25:9e:52:c8:f1:
                    b2:35:fb:38:5e:66:4c:41:33:c1:4d:c3:cd:88:c4:
                    2a:24:33:18:0f:68:b4:d3:e1:52:3a:f7:62:eb:1e:
                    54:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:EB:79:8F:F7:2F:92:E7:B4:52:38:B1:2B:57:5A:19:EB:20:61:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/9dafe3a00dbd52293854df882914e9876341397a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         90:98:94:b2:29:ba:e1:2f:9a:d7:d8:1f:b8:2e:7b:23:a7:61:
         b3:08:29:56:65:f0:09:be:d7:b6:42:f1:7e:d5:1c:cb:16:ea:
         d6:90:d1:1b:e7:ab:e7:5c:3f:32:c7:5b:bb:ad:07:6f:c1:7b:
         12:a8:d6:1e:78:39:bf:0d:20:a4:f5:53:69:b6:f2:d1:37:1c:
         22:db:43:91:23:4a:18:c6:2b:b4:27:0e:f6:6c:8d:d3:58:3d:
         bc:b8:89:0a:ab:2a:ec:68:e4:f4:a3:77:e2:97:c2:bf:a7:c1:
         65:48:16:59:dc:14:5a:92:57:73:37:c0:2c:dd:b3:04:45:8a:
         07:2b:d7:ae:2e:c4:34:70:bc:bf:16:6a:1c:f7:a9:ae:11:d6:
         ad:e9:a1:61:59:c1:84:ea:d0:fa:a7:0a:a3:b3:cd:ab:92:c3:
         6a:2f:9f:9f:99:bb:23:85:fb:43:0a:f6:33:f0:b8:0c:3d:ed:
         ab:e7:25:68:d3:0f:37:6a:16:64:1d:a8:d4:4f:05:c2:ee:03:
         e0:5e:8d:e5:77:6e:80:93:fe:eb:8f:6c:35:28:ab:e4:08:f1:
         59:33:79:b7:aa:54:62:4e:ce:4d:fd:40:70:7a:99:7a:1a:c6:
         3b:7e:78:15:34:c6:fd:7d:ed:fb:96:69:84:f7:57:a2:67:bd:
         79:47:3c:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----