Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d2aadbb9abca9b357e7b95b41df3ffb323016996.cer
File:                     d2aadbb9abca9b357e7b95b41df3ffb323016996.cer (raw, json)
Hash identifier:          Gk/fq22MFpT5qhyWFZWlu84BRWSsPdAJsX3Vh3sVSbU=
Subject key identifier:   D0:69:1E:FF:8F:A3:DE:99:7A:66:6C:08:A7:91:E5:5B:D8:81:C7:96
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EAC3A9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f8001edf-9876-4545-ab07-68a071a38ffb/d2aadbb9abca9b357e7b95b41df3ffb323016996.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f8001edf-9876-4545-ab07-68a071a38ffb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 16:46:40 +0000
Certificate not after:    Mon 27 Jan 2025 14:00:00 +0000
Subordinate resources:    AS: 23488

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15385513 (0xeac3a9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 22 16:46:40 2023 GMT
            Not After : Jan 27 14:00:00 2025 GMT
        Subject: CN=d2aadbb9abca9b357e7b95b41df3ffb323016996
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:bb:98:6e:7d:66:89:0b:48:5e:9a:a4:7c:ca:
                    a5:a3:f4:44:94:b4:38:51:63:85:12:92:ae:a6:2b:
                    5b:af:7a:1e:9f:76:5b:d8:63:c5:f5:3f:a4:8b:8a:
                    9b:68:20:49:17:d6:fc:62:15:93:ed:8b:a2:d1:d0:
                    d2:1d:51:86:e4:67:5f:08:b4:66:eb:ab:30:6d:64:
                    f5:22:67:08:1e:55:75:29:b8:28:e6:ed:97:0c:19:
                    c1:3d:ed:a7:1d:01:40:67:a1:e4:b5:98:aa:de:4f:
                    55:93:5e:52:4f:68:9d:2b:81:b8:df:16:07:ef:fb:
                    20:db:58:b1:65:e1:13:39:ab:9d:45:3a:5b:d3:db:
                    43:3f:c2:40:28:e8:fb:4a:c0:de:84:76:ae:a0:ed:
                    d0:b6:2d:7e:c7:65:32:ec:74:8e:4c:4f:41:63:aa:
                    56:09:9a:e1:52:0d:72:2b:f6:41:c1:17:86:67:47:
                    f8:48:bd:ef:76:46:bb:27:c7:6b:33:39:a3:d8:1b:
                    df:33:31:01:6c:83:24:2d:54:ca:b9:1b:fc:80:c8:
                    72:dd:dd:5d:94:8b:7f:94:c4:59:3c:ac:3d:70:49:
                    46:cb:cd:7f:37:91:d7:d3:58:1c:d4:18:98:1f:78:
                    1a:04:2b:71:29:c2:e1:db:76:7f:0c:4e:42:ed:e1:
                    82:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:69:1E:FF:8F:A3:DE:99:7A:66:6C:08:A7:91:E5:5B:D8:81:C7:96
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f8001edf-9876-4545-ab07-68a071a38ffb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f8001edf-9876-4545-ab07-68a071a38ffb/d2aadbb9abca9b357e7b95b41df3ffb323016996.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  23488

    Signature Algorithm: sha256WithRSAEncryption
         44:65:b9:19:a5:6d:86:2b:45:8e:a6:1b:1d:0f:ad:11:c1:d3:
         32:52:50:72:38:ae:2b:65:37:76:cb:fe:79:23:fe:2c:69:53:
         59:a9:26:38:4d:a3:f1:ab:62:cc:ec:2c:42:39:32:86:89:6a:
         44:ea:e6:8a:e3:a0:a4:fe:1e:ac:7c:a0:2f:27:d6:b5:57:e1:
         00:53:f2:ac:09:29:e9:cb:90:71:b2:45:83:18:bc:b4:1e:8f:
         99:4c:72:76:6b:5a:46:88:21:df:59:93:f1:fb:e7:b3:f5:8c:
         de:8d:7a:ab:7b:3c:1d:e7:aa:c3:65:64:9c:7b:5f:fe:50:6f:
         46:65:c1:f5:5f:0c:b9:a1:d1:88:b2:b2:1b:f2:2d:f4:88:b0:
         6b:c3:d9:0b:c3:90:27:50:ca:e9:fa:9f:33:6c:97:d5:ab:69:
         5a:95:2a:90:cd:72:b7:a2:90:3e:57:de:9d:1f:35:39:d1:00:
         6c:e6:07:47:df:fe:e9:26:10:49:d1:7e:bd:d7:ba:ff:4a:64:
         71:c4:48:02:82:10:4b:9b:d5:b5:8b:8b:27:b6:f4:b7:5f:ab:
         28:eb:18:5c:15:6d:92:d1:6c:4f:81:19:c2:94:3c:c3:43:e0:
         d6:5b:28:df:d2:b1:04:50:e3:b7:e8:10:99:d5:b8:dc:f1:33:
         36:a2:0c:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----