Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c65f5754090ab6dca66978bb528442fa8d950c9a.cer
File:                     c65f5754090ab6dca66978bb528442fa8d950c9a.cer (raw, json)
Hash identifier:          +e4TQl7qZpTnvrlNPdJJAOq/JxIJiOMjDG4ZwXZZyzg=
Subject key identifier:   2B:0F:51:2C:B6:51:6A:B3:53:F9:F0:B2:AA:AB:5E:AE:A1:DA:54:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0110424E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c7372c01-962e-4761-8e21-ab9123d2b254/c65f5754090ab6dca66978bb528442fa8d950c9a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c7372c01-962e-4761-8e21-ab9123d2b254/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 Apr 2024 18:56:10 +0000
Certificate not after:    Mon 30 Jun 2025 15:36:39 +0000
Subordinate resources:    AS: 271972
                          IP: 2803:6e10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17842766 (0x110424e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 18:56:10 2024 GMT
            Not After : Jun 30 15:36:39 2025 GMT
        Subject: CN=c65f5754090ab6dca66978bb528442fa8d950c9a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:52:7b:8f:2f:a5:89:54:03:2f:19:32:41:18:
                    89:29:66:1b:77:7b:25:69:9d:e5:6d:9d:89:c7:25:
                    75:59:00:16:b7:92:25:f5:28:5c:99:52:ea:34:ee:
                    73:cb:23:2d:dc:bb:e7:84:54:29:d7:9a:ad:8d:57:
                    32:c4:b5:4d:6e:4e:7f:9a:b3:77:c5:b5:e2:a9:10:
                    0b:67:4d:02:35:d2:2c:58:26:46:c8:32:a8:be:88:
                    df:e4:0f:2a:4e:29:c3:90:83:96:0e:79:b1:3b:42:
                    ec:b7:d4:43:8a:b5:60:17:2c:7e:15:d1:1b:db:37:
                    06:9a:80:13:26:27:38:c3:3b:fb:09:22:8a:29:56:
                    ea:1a:71:6a:4b:3a:a7:7b:9f:bc:69:c4:7b:9e:ab:
                    a7:2e:25:1d:f2:41:84:90:5f:26:9b:d8:bd:f6:f1:
                    b5:04:cc:7d:45:86:bf:53:c8:03:80:b0:6e:f7:07:
                    11:0f:da:d9:58:b8:7c:5f:1b:ce:bb:14:a6:ce:20:
                    39:2f:d0:eb:12:e1:04:da:a6:55:50:06:a0:b6:67:
                    a4:e7:16:fd:21:05:0b:e8:76:60:52:24:9d:81:17:
                    66:5b:7b:03:6b:26:bc:75:8d:69:57:c1:9e:fb:94:
                    2a:0b:cd:14:26:47:b2:d4:84:88:b1:81:4d:f8:ca:
                    39:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:0F:51:2C:B6:51:6A:B3:53:F9:F0:B2:AA:AB:5E:AE:A1:DA:54:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c7372c01-962e-4761-8e21-ab9123d2b254/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c7372c01-962e-4761-8e21-ab9123d2b254/c65f5754090ab6dca66978bb528442fa8d950c9a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271972

    Signature Algorithm: sha256WithRSAEncryption
         0f:32:cb:50:bf:16:57:17:31:af:ed:1e:86:eb:ac:5f:8d:bd:
         4d:15:c8:e0:a3:11:90:63:ad:6a:11:4b:d5:98:dc:0d:f3:0c:
         b2:e7:44:24:47:02:6e:cc:6a:9d:00:d8:7f:32:6f:32:73:79:
         27:88:aa:00:55:a2:21:8b:b7:9b:a6:9b:fc:19:02:df:3c:3c:
         96:2e:40:eb:98:6a:b2:d3:85:a0:68:d9:83:57:39:df:d8:5e:
         59:89:f1:f3:b2:e1:85:8f:86:db:6c:b5:e5:2e:30:79:c2:b1:
         23:60:d6:c5:89:e0:e1:4a:86:08:72:6f:16:35:b7:33:9c:04:
         df:67:c8:66:af:40:6e:76:57:b6:e2:b7:8f:10:4d:bc:83:c5:
         11:a4:51:2d:e5:43:46:36:2c:e6:b9:bc:cf:ce:b2:a3:30:95:
         8c:c0:8b:01:58:36:2e:ef:2d:91:06:12:af:bf:21:6e:75:c2:
         c2:d5:4f:1d:a3:51:1a:7c:07:38:42:98:a6:db:d9:66:18:94:
         38:cc:91:50:29:a5:a3:84:15:76:76:0d:e0:f0:76:66:39:c8:
         9e:47:95:e8:ea:22:ed:76:f9:6a:6e:b5:22:45:e9:aa:fd:60:
         4e:47:25:65:86:0d:ca:00:c3:2b:33:ce:ec:3c:9b:de:df:0a:
         76:4b:ac:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----