Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9df128f6421ee24e523aa60b3d13f23b4c44cb75.cer
File:                     9df128f6421ee24e523aa60b3d13f23b4c44cb75.cer (raw, json)
Hash identifier:          yav35PIBpgRyjt2ZbHarmhnsrP1Yj4alSo0VqvTkP0k=
Subject key identifier:   26:17:C5:84:6D:4D:41:16:2E:DC:C9:09:DC:41:2C:0E:78:94:6F:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DA6BD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d37e4c49-3b8f-43c1-b6b2-b09b6e46f2a0/9df128f6421ee24e523aa60b3d13f23b4c44cb75.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d37e4c49-3b8f-43c1-b6b2-b09b6e46f2a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 00:51:40 +0000
Certificate not after:    Tue 26 Aug 2025 17:18:28 +0000
Subordinate resources:    AS: 3632
                          IP: 148.207.0.0/16
                          IP: 2801:c4:ad::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17671869 (0x10da6bd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 12 00:51:40 2024 GMT
            Not After : Aug 26 17:18:28 2025 GMT
        Subject: CN=9df128f6421ee24e523aa60b3d13f23b4c44cb75
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:0b:85:05:68:c3:16:c2:55:9b:c5:23:78:d6:
                    10:4f:b5:1d:cf:28:08:b9:c4:c3:32:f4:0c:d7:58:
                    14:b0:25:0a:ea:23:a1:83:ed:98:51:90:7f:48:32:
                    e3:97:4c:e2:55:e1:17:7e:33:12:6d:39:81:0a:0d:
                    c7:1f:2e:e9:50:73:3f:68:fd:37:d9:2a:71:93:b6:
                    e9:c6:62:2a:bd:6d:dd:e9:b5:69:b2:a0:4c:2c:d5:
                    d4:5a:7f:3e:e2:c6:b4:04:fb:f3:f3:7c:44:a4:6b:
                    32:fa:a0:96:fb:bd:fe:9f:31:21:87:e5:be:12:dd:
                    2b:a7:93:98:88:17:1a:6c:a8:0b:0c:e7:fe:10:65:
                    ef:32:7d:d5:c6:db:e6:ab:04:d8:d0:97:cd:7f:35:
                    53:2c:dd:ee:d2:3d:a3:4f:08:a8:50:49:ef:5d:1a:
                    1a:5d:38:a7:1d:a7:8c:7c:01:9e:9e:b8:c9:3d:26:
                    bb:70:cb:e1:37:d7:67:80:be:45:62:47:74:95:6e:
                    5b:b1:3e:b3:b6:ce:f0:3b:24:b9:49:c2:71:f6:e7:
                    d0:1e:2f:90:f9:be:eb:cd:64:cd:3d:e3:35:85:57:
                    ff:27:ee:b6:23:2f:5d:1a:d0:68:e7:e1:93:ab:2c:
                    07:fa:76:69:cf:76:c0:b2:3d:5e:ee:d3:fb:6c:b6:
                    a8:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                26:17:C5:84:6D:4D:41:16:2E:DC:C9:09:DC:41:2C:0E:78:94:6F:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d37e4c49-3b8f-43c1-b6b2-b09b6e46f2a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d37e4c49-3b8f-43c1-b6b2-b09b6e46f2a0/9df128f6421ee24e523aa60b3d13f23b4c44cb75.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  148.207.0.0/16
                IPv6:
                  2801:c4:ad::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3632

    Signature Algorithm: sha256WithRSAEncryption
         5a:84:2c:02:ef:4d:97:5b:92:be:d5:75:17:5d:a8:b4:a5:2d:
         d6:c7:52:9c:3b:d0:00:79:ca:da:f9:89:b5:59:cb:56:55:0d:
         27:9b:a4:04:6d:bd:aa:29:b0:bd:39:5f:19:8e:80:5e:bb:f0:
         b5:f3:fd:bc:1b:57:bd:ca:95:a7:1f:55:53:6a:17:3e:b6:76:
         cb:cc:83:68:f7:93:40:1f:cd:59:d9:d8:49:b1:74:63:39:43:
         66:33:e4:2f:6d:d5:09:9d:b3:75:79:44:52:13:94:cf:70:10:
         35:cc:14:8e:c4:61:c2:8e:3d:85:c7:f9:93:78:2d:eb:95:e6:
         d1:99:3f:5d:e3:95:5c:c1:62:7b:db:a2:17:1a:3c:5f:1e:72:
         38:ff:1a:0d:b8:7c:8f:94:91:d6:0b:42:53:a9:ae:ab:c0:64:
         e9:04:0a:36:7a:9f:de:01:5f:52:53:e6:33:46:32:ec:d4:2e:
         a3:1a:a6:ca:df:1c:c7:34:0e:e4:c7:ae:5c:1c:2f:7f:17:6a:
         22:d8:e3:a4:82:b0:0f:79:6c:c3:0b:51:da:f3:42:1c:22:bc:
         4d:61:9f:1f:30:a5:30:25:c8:68:e5:58:11:36:a9:5c:39:43:
         4b:72:d8:8e:ac:1a:a7:55:c1:39:f4:25:d0:51:e3:70:f6:f8:
         93:ea:2a:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----