Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d122bd1c04d6578adace337338d84ed970c410bd.cer
File:                     d122bd1c04d6578adace337338d84ed970c410bd.cer (raw, json)
Hash identifier:          e9RUXxNeBPGT8CaeboGzJij1ZKnKTiflxF+D4QsnUJQ=
Subject key identifier:   9B:AC:77:55:A7:4C:0D:50:86:5F:74:E3:93:B9:89:53:22:ED:C3:1A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB6F75
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/31a6b703-dc03-476c-9f3f-41d2eab4f9ed/d122bd1c04d6578adace337338d84ed970c410bd.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/31a6b703-dc03-476c-9f3f-41d2eab4f9ed/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 26 May 2023 20:18:54 +0000
Certificate not after:    Thu 11 Jul 2024 15:00:00 +0000
Subordinate resources:    AS: 28546
                          IP: 201.150.32.0/20
                          IP: 2806:322::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15429493 (0xeb6f75)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 26 20:18:54 2023 GMT
            Not After : Jul 11 15:00:00 2024 GMT
        Subject: CN=d122bd1c04d6578adace337338d84ed970c410bd
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:86:55:7f:0e:f0:36:6e:ba:e7:cc:cc:34:2c:
                    38:28:db:50:af:90:48:97:d2:ea:99:a9:47:d8:38:
                    9c:a6:e1:7c:c9:92:f2:e8:bd:d3:d7:75:ba:cb:3e:
                    28:7a:c8:aa:ad:b6:cd:6f:7e:2b:b1:59:96:00:2a:
                    c9:0d:ec:ee:5e:53:e4:7a:a5:03:3a:4c:5e:82:e3:
                    f6:fc:6d:98:9c:04:18:67:9f:1e:b7:f8:26:14:10:
                    73:e2:ae:c3:67:46:76:ad:af:3f:4c:5a:50:0d:de:
                    9d:b8:dd:53:ee:41:40:5a:98:d4:d0:da:75:1b:ee:
                    47:a2:bb:74:ae:a1:bb:54:b0:6d:1f:d8:81:c7:b0:
                    0e:7e:2e:5c:0f:9a:05:b4:d4:74:78:73:3a:bb:9f:
                    14:ee:81:3d:b2:bf:8b:e7:fc:f1:69:0d:50:a2:d9:
                    70:12:9c:18:45:d5:1a:cb:2a:d7:2f:fa:a8:82:31:
                    57:76:ed:ab:f7:44:2f:68:28:3e:8c:00:3a:82:2a:
                    b7:d2:fd:6f:5c:1f:92:61:58:6c:a0:36:c7:40:ad:
                    b6:0c:78:49:a9:db:23:4a:ad:29:3d:0c:57:8b:75:
                    11:bc:38:74:bd:60:45:b7:b4:9a:63:36:61:57:cb:
                    bc:e2:e7:54:7d:4c:2f:20:14:5c:d3:fe:e9:c1:37:
                    3f:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:AC:77:55:A7:4C:0D:50:86:5F:74:E3:93:B9:89:53:22:ED:C3:1A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/31a6b703-dc03-476c-9f3f-41d2eab4f9ed/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/31a6b703-dc03-476c-9f3f-41d2eab4f9ed/d122bd1c04d6578adace337338d84ed970c410bd.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.150.32.0/20
                IPv6:
                  2806:322::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28546

    Signature Algorithm: sha256WithRSAEncryption
         0a:a8:6a:92:45:5e:83:22:05:75:fc:9f:25:63:0d:bc:e0:a8:
         35:22:2a:9a:5b:a6:94:bf:bb:25:45:c8:fb:14:35:20:7f:de:
         05:29:2e:a2:35:d9:42:ee:a0:a5:c6:38:37:58:91:ed:6f:da:
         47:f8:4b:3c:9b:28:22:90:c0:09:f8:04:63:05:64:b4:5b:1d:
         28:b4:b7:7c:30:2e:70:b6:dc:33:b4:33:70:cb:7f:a4:38:ae:
         d2:f0:d2:ea:1a:2c:9c:05:d8:25:28:9d:3f:51:38:e7:ba:ea:
         c9:29:91:54:4e:72:cc:70:bd:b0:5e:43:c1:1b:ea:29:bc:60:
         4b:53:8e:9c:ca:02:43:ff:4c:97:9b:25:16:92:d5:01:c1:70:
         47:c6:19:15:80:a4:59:a0:06:13:b0:f2:cc:78:7d:f6:1a:c6:
         92:7a:76:9d:87:ba:41:be:49:d1:55:64:25:03:23:8f:a3:8d:
         2a:5b:a6:23:43:83:32:94:b8:61:b5:f7:6d:3d:5d:9e:cf:ed:
         b2:44:ee:47:31:b0:89:f8:57:55:88:9e:a9:53:8a:d3:21:c7:
         59:8d:86:73:7f:0b:ce:f6:78:4a:a9:92:e4:af:1e:21:a5:af:
         cd:90:31:d8:fa:4b:91:4c:d6:45:41:20:c3:fa:c0:e6:8d:35:
         d4:47:e1:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----