Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d28828a5d24cec244e501a3185a9154faf801c83.cer
File:                     d28828a5d24cec244e501a3185a9154faf801c83.cer (raw, json)
Hash identifier:          Ub/JjyGDaS1OddTXxq91NYUZKInMEo1NXstJ5fLj4iE=
Subject key identifier:   7D:81:D1:76:38:65:42:17:D9:1D:C3:65:E7:74:5C:B7:5E:ED:C9:5D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E86215
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/95a035e6-2e99-4b36-bd9e-786986de4fce/d28828a5d24cec244e501a3185a9154faf801c83.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/95a035e6-2e99-4b36-bd9e-786986de4fce/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 15:03:07 +0000
Certificate not after:    Fri 01 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 7173
                          IP: 192.100.172.0/24
                          IP: 200.23.5.0/24
                          IP: 2801:c4:20::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15229461 (0xe86215)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 15:03:07 2023 GMT
            Not After : Nov  1 04:00:00 2024 GMT
        Subject: CN=d28828a5d24cec244e501a3185a9154faf801c83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:73:0b:a9:a2:32:ed:7f:4e:1b:15:29:8d:6a:
                    db:d0:a4:48:bb:77:5a:fd:2a:a0:df:c3:bc:df:1a:
                    42:bb:db:4e:ab:a7:13:26:79:e2:70:c1:49:c7:a3:
                    49:ee:d4:ea:73:53:6e:f3:df:91:67:e5:10:5c:6b:
                    36:fb:cf:c9:8e:ab:43:68:95:1d:33:7f:5f:9e:71:
                    75:15:5b:cf:f4:63:2a:33:46:1a:e1:b7:dc:04:f8:
                    f9:2e:3a:7d:81:7d:3b:d0:6d:ca:04:56:db:b2:7d:
                    5c:bf:75:ce:b3:cf:70:2a:61:6a:92:dc:51:8c:2c:
                    81:80:02:b3:13:e2:64:ff:15:bd:7e:5d:c7:31:e9:
                    58:cc:43:f3:c8:46:8b:e9:68:00:f7:12:0f:eb:4a:
                    37:43:c0:30:89:8d:87:16:66:c6:d9:d0:63:43:6a:
                    fb:18:91:64:51:03:f5:b5:cb:b3:92:a6:d1:41:13:
                    4f:d1:59:33:80:0b:34:bb:7f:1a:1a:89:7a:3d:23:
                    af:5d:b9:57:44:02:eb:44:93:fa:75:8b:23:03:ac:
                    29:d1:eb:ce:44:e6:87:a4:2e:9a:77:89:e4:ce:9d:
                    03:bc:90:1d:60:ed:ff:4f:c6:13:6d:2a:ef:3d:58:
                    a9:9c:85:37:99:c3:6f:52:db:88:4c:52:9b:6f:11:
                    b1:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7D:81:D1:76:38:65:42:17:D9:1D:C3:65:E7:74:5C:B7:5E:ED:C9:5D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/95a035e6-2e99-4b36-bd9e-786986de4fce/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/95a035e6-2e99-4b36-bd9e-786986de4fce/d28828a5d24cec244e501a3185a9154faf801c83.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.172.0/24
                  200.23.5.0/24
                IPv6:
                  2801:c4:20::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  7173

    Signature Algorithm: sha256WithRSAEncryption
         a0:f6:ba:83:81:87:a3:80:c7:07:55:18:a1:0d:62:78:b2:35:
         e5:4d:23:d2:34:00:ef:01:28:4d:84:17:b6:0e:29:a6:9f:4f:
         d3:10:dd:0a:af:ba:88:60:07:6e:2e:8b:bb:06:7f:aa:ac:fd:
         51:8d:63:5b:97:ce:5d:bc:b2:09:d0:6e:f6:d2:50:63:df:0c:
         fb:3d:92:1a:15:1f:1f:c8:37:7b:eb:41:c1:91:a4:87:ca:68:
         d1:cc:2a:16:4d:76:1a:ce:78:47:72:c2:f9:63:0e:09:dc:bd:
         b1:3a:50:1c:b6:64:81:38:9e:24:ac:eb:af:64:e2:bd:f4:8b:
         f7:db:0d:ca:70:7d:77:9b:f2:48:1b:87:ab:39:7d:7c:1d:99:
         c0:7f:60:b3:f0:79:d3:82:c9:51:e0:54:22:4c:67:ef:c8:75:
         1e:12:b8:10:37:41:15:e9:2b:c7:e6:dd:75:48:dc:41:80:62:
         2e:52:86:15:3b:cb:f1:67:9c:35:34:d3:7c:10:a8:e4:95:50:
         2f:63:b7:63:0c:14:d0:f3:99:5e:29:19:7c:85:0a:2c:70:86:
         59:4c:37:d1:f3:4f:12:fb:ab:4a:3c:44:3e:ce:35:8e:fc:cf:
         32:2f:63:ca:fc:95:69:b1:58:62:35:7a:cd:55:dc:66:90:75:
         7b:27:eb:77
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----