Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c3b2eb960eb97ca4410d60bb16df8e07bd0dba96.cer
File:                     c3b2eb960eb97ca4410d60bb16df8e07bd0dba96.cer (raw, json)
Hash identifier:          Lo3JTEFQkW0SnUWMwKSs4Lz7V9Lbx/b5xRPBYu//fBQ=
Subject key identifier:   3E:46:B1:C7:E6:78:A8:42:48:E7:DE:DB:38:31:13:7C:42:54:77:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01037784
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/56ec7707-afdb-40ba-8595-e4bdae32ac9e/c3b2eb960eb97ca4410d60bb16df8e07bd0dba96.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/56ec7707-afdb-40ba-8595-e4bdae32ac9e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 11 Dec 2023 15:49:14 +0000
Certificate not after:    Sun 19 Jan 2025 18:01:47 +0000
Subordinate resources:    IP: 200.58.252.0/22
                          IP: 2806:3ad::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17004420 (0x1037784)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 11 15:49:14 2023 GMT
            Not After : Jan 19 18:01:47 2025 GMT
        Subject: CN=c3b2eb960eb97ca4410d60bb16df8e07bd0dba96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:a1:6d:ac:aa:6d:b3:3c:ce:0b:4a:a9:81:a5:
                    a3:14:ea:36:a1:d9:a6:13:f4:5e:d6:4e:41:d1:75:
                    c5:b2:06:48:71:1f:75:a8:d6:23:a3:32:aa:d3:73:
                    90:33:32:8e:19:d7:ff:8f:68:fd:23:13:cf:a5:69:
                    85:9b:10:de:2b:d2:62:9a:16:89:6f:17:bc:e1:eb:
                    c8:14:44:8c:6d:44:68:0e:e4:ec:bc:af:59:87:d6:
                    c7:dd:c5:ff:3e:bd:e7:7c:37:18:0e:de:0a:32:27:
                    cd:41:de:89:cb:eb:b7:dc:cf:e6:e2:2d:09:45:0e:
                    bd:dc:62:db:b5:2f:71:1e:98:ea:5a:b4:2f:8d:79:
                    11:3f:0a:8b:05:2c:f6:c0:47:33:df:34:7f:04:55:
                    87:f1:de:f7:32:12:0f:a0:e8:c7:d9:29:6f:16:74:
                    a1:7c:e3:63:0a:65:45:84:49:e6:2b:02:60:81:21:
                    16:96:22:a7:d1:55:db:fc:a1:d4:0e:e6:2d:c8:af:
                    c9:55:04:ce:d9:80:5c:74:95:36:64:1c:b7:1f:79:
                    8c:53:d3:29:8a:97:e5:83:70:0f:ce:cb:ce:f6:a3:
                    12:d5:3f:fc:c6:a1:9e:ab:84:79:00:6d:80:49:08:
                    3a:ad:1b:02:33:4e:1d:4a:4b:5f:bd:ab:0a:84:0b:
                    a7:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:46:B1:C7:E6:78:A8:42:48:E7:DE:DB:38:31:13:7C:42:54:77:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/56ec7707-afdb-40ba-8595-e4bdae32ac9e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/56ec7707-afdb-40ba-8595-e4bdae32ac9e/c3b2eb960eb97ca4410d60bb16df8e07bd0dba96.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.58.252.0/22
                IPv6:
                  2806:3ad::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:5e:39:2b:47:ac:2e:6b:c1:85:0f:61:c5:a1:3f:a2:77:dc:
         17:f4:63:31:ae:ba:fc:a3:51:50:01:02:8d:3b:d5:03:41:bd:
         f2:14:9c:e6:64:7e:33:f6:57:d2:05:00:12:a2:e6:b3:de:01:
         27:12:94:7c:21:5e:bc:14:49:b6:35:99:47:b5:83:d2:fc:6c:
         56:04:94:49:ef:4c:24:7b:6c:03:ba:40:b8:6c:2c:67:3b:16:
         3c:f1:eb:a0:1c:1d:0e:de:86:c0:66:1a:34:e5:d5:02:0d:be:
         ed:82:a2:bb:9a:37:c5:48:f4:91:85:4e:da:6e:a3:88:52:1c:
         33:1c:c1:99:cb:d1:68:bf:92:4b:c3:37:26:c1:84:6b:1b:74:
         95:20:3c:e7:0c:a4:91:8b:1a:4e:f9:a6:63:44:c4:19:dd:82:
         87:69:e5:1d:5f:da:f8:5a:f0:c4:04:c4:00:4f:a2:83:56:71:
         fa:fe:33:dc:fd:85:9d:3a:73:f8:ca:10:3c:03:3a:0a:90:50:
         21:f3:7b:7e:19:b6:6d:c0:22:f9:c3:ba:18:13:c9:c2:15:ef:
         50:c5:fd:7e:e7:79:dc:f7:f8:90:33:ab:7a:d7:1e:60:fa:ec:
         80:07:2f:d2:cb:6a:a0:68:ca:9e:e6:e8:d0:78:97:0c:99:c5:
         ff:2a:c1:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----