Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.cer
File:                     db50cae8c7b8d849e6d97a29ff403e7d5753afc5.cer (raw, json)
Hash identifier:          w8tDFuq9h9sUV4CqpMwwAG9nhqzSiPFtj0Ijf/Mswho=
Subject key identifier:   91:01:B3:CB:73:60:8D:DD:10:2A:0F:A6:85:B1:BA:E4:6C:9E:FE:F7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01071CA1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/03538c50-0187-4aa4-b5c2-04e202f6ed01/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/03538c50-0187-4aa4-b5c2-04e202f6ed01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 18 Jan 2024 03:08:35 +0000
Certificate not after:    Fri 22 Aug 2025 16:04:02 +0000
Subordinate resources:    AS: 272003
                          IP: 2803:a910::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17243297 (0x1071ca1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 18 03:08:35 2024 GMT
            Not After : Aug 22 16:04:02 2025 GMT
        Subject: CN=db50cae8c7b8d849e6d97a29ff403e7d5753afc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:f1:e6:6e:89:06:bb:b8:6f:10:ec:5e:35:81:
                    5e:71:c8:ec:f4:11:f9:59:f6:c9:1a:5e:65:c0:1d:
                    64:30:44:0b:33:0f:ba:76:25:0b:19:f0:fd:3a:44:
                    7b:bb:5c:57:3e:d0:ce:53:28:f9:19:a8:24:c3:11:
                    98:de:ae:8e:92:14:5b:6c:ad:20:57:c2:97:ce:87:
                    37:d3:aa:70:2d:8d:df:b0:cb:de:74:fc:44:87:e1:
                    0d:48:f1:17:8d:1a:aa:e0:3a:07:44:02:3b:ac:fa:
                    a3:d5:30:2a:d4:fe:0d:22:6c:2a:77:71:cf:5b:28:
                    e4:df:06:a9:61:6a:3c:94:59:39:fe:cf:1a:8a:e2:
                    50:d6:ad:8b:e0:4a:9b:a1:10:4d:83:b9:88:32:c6:
                    34:5e:8d:0c:ae:d0:7e:3f:8c:09:f1:f9:a0:c7:2d:
                    2a:9a:cf:34:94:cf:62:93:8a:94:b5:13:83:08:39:
                    93:db:a0:89:6c:00:20:a1:61:84:55:69:6c:b3:b4:
                    5d:fb:50:a5:fc:d9:2c:ee:14:ba:87:12:85:62:66:
                    35:da:4d:4d:88:04:ba:b6:d9:99:57:1d:43:83:1f:
                    d3:33:fc:05:33:53:3e:ea:27:2c:f1:87:0d:19:37:
                    4b:78:24:cc:14:a8:ee:86:3f:13:cf:b0:4e:b6:9e:
                    5e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:01:B3:CB:73:60:8D:DD:10:2A:0F:A6:85:B1:BA:E4:6C:9E:FE:F7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/03538c50-0187-4aa4-b5c2-04e202f6ed01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/03538c50-0187-4aa4-b5c2-04e202f6ed01/db50cae8c7b8d849e6d97a29ff403e7d5753afc5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272003

    Signature Algorithm: sha256WithRSAEncryption
         a6:81:fb:63:4e:35:78:57:07:ac:5d:ba:f2:f2:ec:c5:8d:eb:
         2a:4f:97:70:ed:af:59:b4:a1:55:99:ad:cb:30:a5:ee:2d:2b:
         39:28:c4:83:29:6d:e6:e9:49:f6:aa:23:cb:28:ff:9c:c5:6b:
         26:82:ad:c7:3c:75:79:2c:1e:73:de:12:21:14:a0:ed:ee:59:
         c4:53:ac:73:4a:98:c3:bf:5f:ab:d5:e5:45:9a:a6:4d:99:d7:
         ad:9c:0e:98:32:0c:6e:ef:77:8d:7c:f5:80:87:18:6b:56:d2:
         60:b2:03:52:cb:9a:5f:4a:2e:4a:9d:32:8c:fa:52:2d:0c:dd:
         bf:e7:92:e5:d7:82:35:99:19:3c:8a:c7:21:41:3c:a4:66:88:
         f1:26:e7:b0:e0:36:7c:67:14:8e:1d:b9:9a:ab:11:59:b3:a4:
         bb:34:4d:2e:96:bf:0d:27:44:85:78:7d:2a:68:1d:89:8d:72:
         15:5b:81:16:3e:b4:de:09:80:f0:35:f9:9a:38:3a:76:85:72:
         20:99:98:c9:3c:cf:64:69:82:0a:f0:35:d0:66:6f:48:96:72:
         d0:33:99:0c:e1:fa:0f:8e:31:cf:92:e5:c7:07:bf:f9:d8:4b:
         d3:e9:a3:73:b1:b1:4c:c8:66:2c:c2:86:6f:9d:c1:f7:e2:a3:
         dc:12:fa:21
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org