Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/cfe8620b507bcc59eb4ec1876e24fe1ba72dea97.cer
File:                     cfe8620b507bcc59eb4ec1876e24fe1ba72dea97.cer (raw, json)
Hash identifier:          MfCaXOlqRrmVoZJr7VY70DcMFWhTJ7kgIbYx24jQeIA=
Subject key identifier:   7E:D5:AB:AD:55:55:9F:75:9F:9E:0E:04:EB:53:1F:02:F5:02:58:34
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F50DB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7d88831b-5618-43f9-aab7-44fd91019bd3/cfe8620b507bcc59eb4ec1876e24fe1ba72dea97.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7d88831b-5618-43f9-aab7-44fd91019bd3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 14 Aug 2023 13:40:42 +0000
Certificate not after:    Wed 11 Jun 2025 19:39:43 +0000
Subordinate resources:    AS: 273055
                          IP: 2801:1c:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16059824 (0xf50db0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 14 13:40:42 2023 GMT
            Not After : Jun 11 19:39:43 2025 GMT
        Subject: CN=cfe8620b507bcc59eb4ec1876e24fe1ba72dea97
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:a6:10:6a:55:1c:24:b6:47:8f:3e:b5:d0:5a:
                    ea:07:34:bd:d9:c9:7b:35:1a:af:09:d4:bb:89:76:
                    62:fe:3f:65:ff:52:b1:a1:82:a1:74:3c:cf:67:4d:
                    62:77:f1:dd:1b:db:e1:6e:e9:a1:e5:51:19:ff:19:
                    b0:c4:ca:9f:39:99:75:aa:2f:c9:a5:90:a3:27:a8:
                    d5:2f:da:5e:d4:8c:79:f4:e7:d4:8d:d5:c2:40:e8:
                    e0:bd:fa:e4:4e:2a:1b:15:9d:b5:04:2f:60:87:94:
                    7a:12:d5:de:5c:60:fc:77:91:19:23:15:7e:17:a7:
                    52:b8:d2:98:1f:4f:6d:7a:e2:2b:20:d7:bf:1e:34:
                    a1:32:af:f5:df:77:08:be:85:30:f5:1e:ac:e0:5a:
                    4a:6c:55:54:8c:fd:c7:23:a0:9f:81:26:2b:6f:ae:
                    16:82:15:a3:1f:1e:fa:f5:dc:11:aa:21:fd:a6:70:
                    cd:2a:d8:c4:4a:1b:78:87:4b:53:3c:f7:7b:76:82:
                    e3:ec:44:33:70:05:8a:a9:6d:1c:e0:d2:95:4f:b9:
                    74:a0:62:75:de:36:1e:7a:37:98:b4:21:15:a4:fb:
                    57:f6:50:ad:ce:4d:3c:58:a3:08:f5:c7:b1:96:f2:
                    2e:ac:66:b4:61:ca:25:28:74:21:03:b1:9b:b3:fc:
                    42:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:D5:AB:AD:55:55:9F:75:9F:9E:0E:04:EB:53:1F:02:F5:02:58:34
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7d88831b-5618-43f9-aab7-44fd91019bd3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7d88831b-5618-43f9-aab7-44fd91019bd3/cfe8620b507bcc59eb4ec1876e24fe1ba72dea97.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1c:b800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273055

    Signature Algorithm: sha256WithRSAEncryption
         90:dc:52:1a:5a:49:54:8a:98:fe:65:7d:e8:d4:c8:02:e0:57:
         bf:a1:3a:22:f6:e0:65:72:e7:ac:ed:03:1a:cd:dc:3f:92:1c:
         38:8a:54:e6:a7:42:7d:bd:62:33:8b:9b:28:5d:1e:75:e7:51:
         81:64:ac:a4:b8:db:70:67:25:18:98:05:4f:f7:9e:e3:b0:79:
         d9:72:34:b1:bf:23:7a:f9:af:82:cb:00:49:94:1e:5f:ad:c9:
         79:ce:73:a6:e3:cf:68:99:27:24:85:48:9f:fa:c2:93:dc:84:
         29:83:e1:f9:cb:db:0a:33:79:d3:23:6f:71:fa:6a:8d:2f:87:
         72:ba:f2:24:6f:75:1f:c0:4d:d8:b4:3c:25:8c:99:28:00:26:
         1f:d7:a6:dc:20:b3:96:a6:60:15:8b:8f:64:c1:61:4a:5d:9f:
         8e:bc:c0:57:c2:61:e6:b0:c2:61:bd:e0:36:38:77:92:e8:49:
         16:1d:20:48:72:40:66:1c:62:de:56:bb:d2:49:2f:41:ef:87:
         87:46:01:b2:6e:f3:31:67:03:79:66:c6:ae:6e:b8:4d:e2:1d:
         ef:42:83:de:7e:c4:77:83:21:09:05:18:c2:4a:36:6e:e0:00:
         af:90:73:1e:4a:24:92:63:91:fe:69:57:2d:e6:c0:14:d5:a7:
         53:b3:e2:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----