Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a67a5836dc9853631f6c8907db804e846494c34c.cer
File:                     a67a5836dc9853631f6c8907db804e846494c34c.cer (raw, json)
Hash identifier:          iTe3Mzx+VZAHWH3xF+90Lp9yOS67vmLqyWGs7LuDNt4=
Subject key identifier:   C0:83:C4:44:9A:DC:D9:3F:D6:23:10:F7:CD:F9:FA:37:D7:DA:03:BF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E930FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/daf8c07b-98f9-434b-889c-fafe34595dc1/a67a5836dc9853631f6c8907db804e846494c34c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/daf8c07b-98f9-434b-889c-fafe34595dc1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 10 May 2023 12:52:58 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    AS: 3631

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15282431 (0xe930ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 10 12:52:58 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=a67a5836dc9853631f6c8907db804e846494c34c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:33:1d:e7:86:9a:40:16:5c:7c:a0:02:0a:64:
                    60:c0:ef:cd:44:36:22:25:16:7e:17:e2:57:0c:c7:
                    33:36:38:05:09:ed:c7:6d:0a:ed:54:c6:36:6c:59:
                    76:e1:a0:f7:b0:ca:64:62:20:bd:11:f9:5d:83:60:
                    cf:26:15:e7:67:2f:b8:0d:23:07:2c:95:79:87:aa:
                    b8:86:e5:47:1c:8d:cd:06:2f:36:c5:61:53:df:9e:
                    15:40:d5:2d:7e:c1:f6:78:0d:f0:2f:cc:f7:c2:1d:
                    56:e2:e5:53:13:2f:66:6c:e9:da:45:67:68:ef:88:
                    62:33:4f:cc:01:a4:5e:a5:50:2c:bb:45:95:35:b8:
                    7a:f9:51:a5:f6:b6:4c:00:3b:29:ec:d1:f7:08:7e:
                    53:e3:13:bc:67:62:d2:47:45:da:f5:cf:e0:b0:1c:
                    64:3a:ff:3a:b1:20:4e:0b:45:54:e8:3a:13:66:8d:
                    79:62:d4:ad:c4:8d:0f:43:43:2c:19:ac:a5:48:d2:
                    79:04:ac:16:ba:ca:d3:58:d6:4a:70:38:b5:64:bb:
                    9d:5d:d4:bc:71:ae:0f:3c:d0:30:5b:94:2f:63:fc:
                    fd:03:d6:0a:cc:bc:ec:f4:f7:21:86:39:64:ac:f3:
                    db:44:de:03:62:8f:16:7a:2e:fb:d1:04:2a:1b:6b:
                    e6:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:83:C4:44:9A:DC:D9:3F:D6:23:10:F7:CD:F9:FA:37:D7:DA:03:BF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/daf8c07b-98f9-434b-889c-fafe34595dc1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/daf8c07b-98f9-434b-889c-fafe34595dc1/a67a5836dc9853631f6c8907db804e846494c34c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3631

    Signature Algorithm: sha256WithRSAEncryption
         59:0b:a7:89:2c:44:04:8e:24:b5:6a:b4:79:af:af:d7:e0:53:
         ca:b3:8d:b6:59:71:e6:df:c8:1d:4c:11:ed:19:fe:cd:d4:61:
         b2:25:2b:11:9d:b2:dd:9a:ea:b4:33:3e:8b:b3:f6:a8:ba:eb:
         0b:07:1d:cc:8e:e2:55:bb:e0:bd:64:95:39:ca:a1:b5:13:e7:
         d0:ae:be:fe:be:bc:30:2d:82:1e:74:33:94:17:1f:ad:56:43:
         5e:bb:f1:cc:c6:23:78:40:5a:1b:77:a0:de:9c:88:b4:7c:2e:
         79:5e:91:ed:be:41:74:cd:c1:5c:12:f8:85:4f:6b:ca:96:c3:
         a1:56:d7:4a:43:1b:ce:5a:7f:be:b4:ae:02:77:c7:e6:88:7a:
         fb:b0:2b:06:ae:83:92:29:87:a9:49:19:75:b0:09:ef:bf:e5:
         1d:dd:8d:71:9b:66:e2:3e:00:54:bf:59:ea:b7:3e:2a:78:fc:
         00:d9:53:dd:0a:9b:e9:67:e7:3d:6e:39:c8:43:1c:9c:66:30:
         0b:7c:58:5a:ee:3e:a5:d7:10:f0:2e:a3:90:72:54:da:b5:fc:
         2c:7d:77:95:b8:70:e4:cd:80:f0:f4:c4:49:f6:e7:6d:1f:c6:
         b8:b5:d4:3f:4c:7b:fb:0a:b8:21:86:12:01:be:24:9f:a2:7c:
         f6:45:11:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----