Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d1d32bc248db779c7a75eb184dfc7f1b43a82490.cer
File:                     d1d32bc248db779c7a75eb184dfc7f1b43a82490.cer (raw, json)
Hash identifier:          AFkNaMRZaR2fkFNfoHsys5Rn7Cy0eTaLuLyv9DGxETg=
Subject key identifier:   ED:E2:6E:F5:00:89:D0:D2:3F:2D:7C:E1:D2:93:69:80:72:4C:FC:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FD1AA2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8ce70f65-18c1-408e-8278-b7eac0b9e7e1/d1d32bc248db779c7a75eb184dfc7f1b43a82490.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8ce70f65-18c1-408e-8278-b7eac0b9e7e1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 17 Oct 2023 17:13:52 +0000
Certificate not after:    Sat 31 Aug 2024 17:05:12 +0000
Subordinate resources:    AS: 272896

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16587426 (0xfd1aa2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 17 17:13:52 2023 GMT
            Not After : Aug 31 17:05:12 2024 GMT
        Subject: CN=d1d32bc248db779c7a75eb184dfc7f1b43a82490
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:c3:9a:59:e6:2b:0a:a4:1d:b9:8e:31:c0:af:
                    4c:10:e9:91:41:a2:64:5f:08:c5:92:0b:23:ba:2e:
                    4f:fd:2e:4d:04:27:14:a2:25:57:d2:ba:23:b9:e8:
                    75:a0:3c:91:92:9d:94:1c:7a:5f:54:1f:69:60:5d:
                    aa:3e:32:77:1f:76:4f:36:30:13:d3:1f:c6:7c:07:
                    0d:88:16:ef:f9:6b:f1:0b:4f:13:ee:26:b5:42:86:
                    c1:00:5e:33:6a:73:14:33:d3:f7:30:b1:e6:90:3c:
                    95:93:70:bb:e2:51:b7:3f:f7:ed:e2:05:69:2b:69:
                    bd:b3:a3:c0:f9:07:f8:d7:bd:4d:7a:d7:df:d2:21:
                    64:85:c1:c1:ee:11:9a:4b:84:6d:66:24:a5:ce:a8:
                    1c:07:d8:75:c4:ad:c0:11:d3:a3:d3:18:96:7f:5f:
                    70:dd:de:d3:81:75:6e:03:75:cc:2d:e5:49:21:30:
                    03:86:b2:8d:24:86:00:0b:5d:d5:2e:aa:c4:f5:78:
                    47:33:a4:d0:45:49:b3:b7:0d:a3:52:63:f8:63:84:
                    2b:84:a1:15:41:33:f9:03:d2:2f:31:38:cb:97:bb:
                    47:62:61:96:20:f8:16:23:87:ff:45:36:f9:84:bf:
                    25:4b:e7:c2:ee:55:ad:0c:2e:ae:47:7a:28:bf:de:
                    cc:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:E2:6E:F5:00:89:D0:D2:3F:2D:7C:E1:D2:93:69:80:72:4C:FC:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8ce70f65-18c1-408e-8278-b7eac0b9e7e1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8ce70f65-18c1-408e-8278-b7eac0b9e7e1/d1d32bc248db779c7a75eb184dfc7f1b43a82490.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272896

    Signature Algorithm: sha256WithRSAEncryption
         44:c7:65:49:fe:f6:02:14:cb:71:76:a0:f1:26:ce:8d:ac:e7:
         3b:b4:a1:6b:d0:35:b0:1a:b5:b9:8f:14:f4:d2:95:21:86:72:
         85:ed:a9:93:29:b8:04:cc:21:19:2e:ce:77:a2:7e:1e:3b:37:
         9e:73:e0:c2:ce:0c:fa:b9:cc:18:e0:d6:14:f4:c4:8d:c5:76:
         e2:9b:51:5c:a7:3e:d3:a6:98:db:e0:58:d7:2c:15:23:86:6a:
         6b:22:68:9c:78:6e:d0:60:c5:65:7a:75:85:29:87:57:2d:a4:
         9d:4a:6e:43:8b:69:2d:5d:f2:f4:69:70:6b:a3:79:bf:93:5b:
         81:cc:3c:4e:03:fe:ed:55:c6:87:04:aa:fb:c3:51:96:85:ea:
         c8:d7:aa:20:96:31:14:7f:c0:ad:f3:f0:37:04:fc:61:e5:bd:
         7a:e0:62:21:49:e0:43:67:69:1c:0a:95:68:d0:a3:76:8b:70:
         08:3a:95:ba:80:cb:ca:f0:f3:ea:f6:bc:3e:23:7c:5b:dd:18:
         9b:45:4c:db:e0:c7:9c:29:96:7f:1d:ff:6b:7e:04:39:5b:2c:
         ae:43:46:98:e5:1d:5e:4d:f5:07:ad:cc:73:48:a5:96:4c:a0:
         37:14:f3:81:61:a2:bb:99:81:be:50:aa:91:f7:76:5f:ae:fc:
         25:82:ab:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----