Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cb01b4878a10050cae0b36f8965928065d824923.cer
File:                     cb01b4878a10050cae0b36f8965928065d824923.cer (raw, json)
Hash identifier:          qLgAWoqKq2jCf5GBN5ZM4OsxmFokVSgM1iExe2xT8NA=
Subject key identifier:   28:11:D1:44:6F:B1:AA:82:59:45:78:52:3B:E1:42:19:84:30:A0:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEE675
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/382efd38-92eb-4c47-8c8d-d4ec0178e945/cb01b4878a10050cae0b36f8965928065d824923.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/382efd38-92eb-4c47-8c8d-d4ec0178e945/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:48:35 +0000
Certificate not after:    Tue 22 Jul 2025 20:33:44 +0000
Subordinate resources:    AS: 28252
                          IP: 179.189.240.0/20
                          IP: 187.1.160.0/20
                          IP: 2804:1544::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16705141 (0xfee675)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:48:35 2023 GMT
            Not After : Jul 22 20:33:44 2025 GMT
        Subject: CN=cb01b4878a10050cae0b36f8965928065d824923
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:fa:d5:a4:41:ca:07:07:20:9d:be:09:54:68:
                    69:e0:0e:9e:f2:c1:96:ed:b0:3e:b4:e1:d0:e0:df:
                    67:c3:45:db:7e:ab:dc:2d:51:67:5c:5f:d7:35:c6:
                    af:fa:59:69:dc:d8:1b:ac:2c:bc:b4:9b:3b:af:ac:
                    5e:70:b7:45:a6:ed:0d:cd:7e:d0:ec:ff:88:a5:72:
                    55:b7:d3:89:f7:3a:13:dd:3b:13:ee:a7:ad:18:e2:
                    46:e0:34:c9:84:81:55:7c:d1:f5:66:2e:65:be:04:
                    66:11:39:4b:fe:25:ab:bb:32:72:eb:13:cc:66:af:
                    01:97:aa:c2:56:0c:ac:fb:5d:c7:8d:40:2d:74:e4:
                    8e:49:51:38:ab:9b:e3:74:70:10:8e:2a:2b:f7:2c:
                    7b:86:79:3f:fa:48:91:65:03:6a:5c:02:41:14:06:
                    47:b7:a4:c3:57:76:0f:5a:1d:ac:ec:cb:f8:e9:47:
                    e1:bb:09:0b:5e:d3:09:04:54:67:a0:5d:78:d6:23:
                    61:4c:98:bd:46:e0:b2:b5:cc:4e:78:a3:08:9b:7a:
                    47:f5:22:83:a7:56:fd:1d:91:81:b6:db:90:d2:5d:
                    89:53:d5:54:c5:50:21:a4:0e:b0:e8:b8:c6:41:3d:
                    4e:6f:ae:0d:ff:49:bd:03:98:97:cb:1b:74:0e:05:
                    00:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:11:D1:44:6F:B1:AA:82:59:45:78:52:3B:E1:42:19:84:30:A0:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/382efd38-92eb-4c47-8c8d-d4ec0178e945/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/382efd38-92eb-4c47-8c8d-d4ec0178e945/cb01b4878a10050cae0b36f8965928065d824923.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.189.240.0/20
                  187.1.160.0/20
                IPv6:
                  2804:1544::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28252

    Signature Algorithm: sha256WithRSAEncryption
         a3:27:ba:ed:fe:fe:c1:24:bc:8a:ab:c9:31:6f:0d:35:e8:85:
         e5:a6:64:34:17:92:62:1f:0e:29:a5:75:75:df:ed:6c:f9:4f:
         99:9e:90:fb:f7:ef:6d:28:4b:69:45:02:e9:9d:14:a3:ff:6d:
         b4:72:15:13:25:cb:64:63:68:ec:07:e6:91:12:9b:94:d1:7b:
         81:49:f5:cf:b0:97:4a:cd:f3:c2:c3:87:3b:72:b2:60:ce:d6:
         0a:82:7c:f2:4c:94:e6:51:10:e8:0b:7b:6a:29:11:03:60:29:
         ef:55:45:c7:73:e6:09:9c:b8:68:27:31:fc:c0:67:20:83:87:
         b0:82:c0:3f:4c:51:b5:dd:10:47:a9:bd:0e:c6:f5:9d:9e:48:
         fd:ec:33:71:3d:8c:fa:e4:4b:14:a5:4b:db:82:7b:51:a3:fa:
         31:5b:fd:c4:03:4d:c7:81:57:4e:57:e4:c8:2b:3a:be:39:e6:
         8a:e6:00:3d:43:15:30:91:c2:ab:c0:25:58:ed:fd:6b:9c:95:
         39:8a:ce:74:28:41:db:78:a8:e7:3b:7b:45:40:d0:9d:44:87:
         68:b0:c9:63:cd:88:da:12:b7:24:60:34:91:74:50:42:55:94:
         53:f5:29:1b:d1:4b:4b:40:54:1c:50:50:31:56:72:bf:6e:f2:
         d1:5c:dd:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----