Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ab2a51c2938850e62c00c0d6049ad278740430af.cer
File:                     ab2a51c2938850e62c00c0d6049ad278740430af.cer (raw, json)
Hash identifier:          avQCzWnmQv729DSrQ0ZjDjnmrcByzhy4TcQMAz5tWfM=
Subject key identifier:   0E:B9:53:F0:AD:16:F7:45:95:EC:ED:4C:F9:B7:B7:3B:D1:D6:4D:09
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F20360
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7a1ac184-1d6c-442c-b3bd-b64208077902/ab2a51c2938850e62c00c0d6049ad278740430af.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7a1ac184-1d6c-442c-b3bd-b64208077902/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Jul 2023 18:36:27 +0000
Certificate not after:    Tue 24 Sep 2024 06:00:00 +0000
Subordinate resources:    AS: 273038
                          IP: 2801:125::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15860576 (0xf20360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 17 18:36:27 2023 GMT
            Not After : Sep 24 06:00:00 2024 GMT
        Subject: CN=ab2a51c2938850e62c00c0d6049ad278740430af
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:32:1e:68:94:e8:69:4d:34:5c:fd:79:74:49:
                    4b:b2:77:a4:b0:b1:98:14:68:74:63:8c:94:97:51:
                    b1:10:6d:c4:0b:ea:b4:8c:df:1d:ed:4b:4c:6e:24:
                    44:54:71:9f:82:6a:99:0c:cf:08:70:d1:f3:b7:73:
                    76:24:8e:a5:93:6a:7b:7d:10:e2:2f:c2:03:86:18:
                    58:b5:c4:c6:0b:79:b8:b0:76:8d:57:db:24:bb:7e:
                    f1:ac:0a:a2:bf:b2:8c:ff:96:cf:37:da:00:9d:d5:
                    23:2a:7d:81:f0:06:f1:48:f5:26:7d:e0:07:65:0c:
                    8b:8f:26:61:55:74:df:f9:fc:0e:3f:80:df:bd:c9:
                    0e:74:93:f3:36:f4:18:11:b6:18:6f:53:b7:b3:db:
                    72:57:db:b6:a0:26:60:0e:7a:5c:21:ac:49:6d:cf:
                    0a:77:46:7c:b1:fc:29:b4:d4:ea:d3:1d:a0:30:2e:
                    6a:86:68:83:d3:82:2c:1f:1e:cf:b1:f0:49:20:fa:
                    97:98:c7:d8:9b:2a:86:e9:72:6a:25:6f:d8:c7:13:
                    5c:36:5c:f8:ab:55:51:84:07:54:97:b7:f5:7a:7d:
                    7b:e1:07:fe:14:2c:0a:43:d4:18:29:80:38:51:0a:
                    4e:99:a2:5d:95:3b:16:de:b2:0b:57:65:7f:62:5e:
                    90:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:B9:53:F0:AD:16:F7:45:95:EC:ED:4C:F9:B7:B7:3B:D1:D6:4D:09
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7a1ac184-1d6c-442c-b3bd-b64208077902/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7a1ac184-1d6c-442c-b3bd-b64208077902/ab2a51c2938850e62c00c0d6049ad278740430af.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:125::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273038

    Signature Algorithm: sha256WithRSAEncryption
         3f:01:70:4c:eb:db:a1:06:ff:4a:f2:81:e7:c9:b9:e3:7a:34:
         74:ae:c1:ce:ec:57:f4:dd:8a:01:ee:73:0b:29:6b:eb:f8:5e:
         58:6f:70:75:c0:c7:41:fd:aa:89:87:ec:04:72:90:31:f2:c3:
         bd:3a:5d:63:c8:29:ff:35:32:41:73:d1:d7:44:00:08:e9:8e:
         42:08:e5:fd:7c:3b:7d:f4:71:70:8f:00:b4:dd:02:6e:5a:24:
         2e:68:8f:21:48:6f:23:33:de:5a:da:3c:24:ce:11:21:7c:a5:
         51:a4:5f:e8:e9:59:d0:20:30:30:c0:54:c3:ae:ef:81:87:e5:
         e7:73:a5:9f:fc:1f:d8:2b:e1:bf:b8:ae:ef:07:fd:96:e2:2c:
         62:72:79:4a:e9:41:04:00:f3:48:4a:45:7d:a4:dc:63:8d:f3:
         62:4c:89:5c:44:7a:68:80:f1:40:9f:f1:6c:8b:ab:75:9b:2f:
         2d:42:9a:98:d1:c9:3f:db:e4:12:56:c3:a0:88:dc:21:3f:1d:
         bc:02:7f:df:c5:fc:67:5f:30:0f:3a:f2:d4:33:c5:d4:ab:c5:
         59:70:f3:aa:91:7a:00:c2:cf:ca:61:a3:7e:28:2a:8b:bf:1b:
         8b:cb:27:9b:8f:28:aa:a2:0b:d3:f5:a7:45:ab:01:7d:01:3f:
         5a:d6:83:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----