Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a223aa55089a99a1b5d3f1a6bd80d776d311869d.cer
File:                     a223aa55089a99a1b5d3f1a6bd80d776d311869d.cer (raw, json)
Hash identifier:          ByhUomWMBCpU3ciTwO3ZPpWscwMHw/FBjUZqNaX/uXA=
Subject key identifier:   D4:77:2A:5F:A9:CB:C0:3F:76:D6:8A:80:96:5E:9C:E0:05:4B:D3:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F8428F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/19c64d46-3cba-43cb-8035-485cab4d5943/a223aa55089a99a1b5d3f1a6bd80d776d311869d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/19c64d46-3cba-43cb-8035-485cab4d5943/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 14:39:58 +0000
Certificate not after:    Sat 04 Jan 2025 13:53:49 +0000
Subordinate resources:    AS: 271871

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16269967 (0xf8428f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 14:39:58 2023 GMT
            Not After : Jan  4 13:53:49 2025 GMT
        Subject: CN=a223aa55089a99a1b5d3f1a6bd80d776d311869d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:ef:bd:4b:d0:11:84:f0:ab:16:fe:30:20:a0:
                    19:79:60:33:1b:70:00:dd:f3:47:49:5c:9d:76:14:
                    63:1b:c5:0f:21:e9:24:44:bf:46:08:60:0c:8f:66:
                    11:c3:0f:1b:60:f4:1e:97:91:2a:79:88:fa:35:19:
                    88:8b:bc:e4:7e:e2:5c:e0:74:72:a7:ba:78:66:d0:
                    4f:eb:06:db:04:3a:b7:f0:d4:c8:3b:50:72:91:cd:
                    3d:66:97:94:da:2c:5f:f9:ff:ee:2b:73:74:f2:79:
                    1f:25:45:83:53:52:be:73:8b:ec:38:0f:bc:4b:3b:
                    79:3e:89:31:8c:eb:9e:45:e9:99:d4:ea:b0:94:b0:
                    c9:d0:e9:01:6b:c7:fb:c2:19:04:50:4e:b8:13:fa:
                    6a:8b:94:68:73:82:67:fc:e5:c2:e1:0b:ab:92:61:
                    9f:0e:f9:0b:e0:3b:31:9f:16:65:8c:9f:3a:bd:74:
                    c9:ec:36:29:d0:8d:e4:e0:85:ef:05:f7:65:9c:66:
                    66:01:f9:93:e5:9e:60:5d:3a:65:82:40:49:f6:18:
                    0c:f7:71:c8:22:51:f0:0d:80:d5:bc:fb:be:4f:30:
                    31:4f:0e:5f:23:5e:ff:bf:f6:8d:f7:8a:2c:eb:11:
                    ad:dd:48:2e:70:4d:d4:b7:87:3b:17:12:ff:41:fd:
                    5d:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:77:2A:5F:A9:CB:C0:3F:76:D6:8A:80:96:5E:9C:E0:05:4B:D3:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/19c64d46-3cba-43cb-8035-485cab4d5943/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/19c64d46-3cba-43cb-8035-485cab4d5943/a223aa55089a99a1b5d3f1a6bd80d776d311869d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271871

    Signature Algorithm: sha256WithRSAEncryption
         45:c8:09:70:13:54:43:4c:8c:1d:cc:bc:4c:b8:b3:31:96:77:
         c9:8b:d2:b6:0f:f3:0e:86:0b:b6:f4:d5:8a:10:6e:f5:92:ae:
         7c:f9:2a:ba:f4:65:46:f0:3c:f0:da:67:17:5d:fb:c2:37:ed:
         76:43:8c:0e:11:12:d7:a2:91:e2:4c:d8:d9:d0:9f:e6:c6:fc:
         47:31:e3:e7:90:bd:95:44:a6:84:e4:c7:0f:54:91:62:11:7d:
         07:f4:d4:95:57:7a:e9:f1:e3:fe:ba:c3:96:88:dd:3b:bd:87:
         07:cc:4f:16:b2:f0:cb:80:4c:70:4d:61:19:8b:08:ad:33:e4:
         a4:5d:f9:f6:83:9d:78:32:88:89:2c:cb:f9:66:f6:2d:ab:00:
         b9:73:db:f7:4e:bf:b4:8f:7b:2c:fd:a4:0c:df:ef:c1:e4:6a:
         a4:6e:09:34:6d:25:06:20:24:8f:ec:59:b3:13:02:71:3c:16:
         17:9c:9e:a5:c1:f8:6b:99:e8:5c:0d:0c:aa:96:c4:a8:02:86:
         fb:d3:f9:f8:52:0c:72:1b:b8:17:10:58:38:e0:f2:e9:18:30:
         2f:f0:38:bd:8d:2d:51:6f:ae:4f:c6:9c:ca:d7:64:f2:d3:33:
         00:50:ea:82:c4:bd:33:f7:29:dd:b5:42:3a:37:b0:34:46:d3:
         ae:c4:25:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----