Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer
File:                     e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.cer (raw, json)
Hash identifier:          ss6JuQzRL1Yf3hVHMPDnDk8o2dM7L+sEU5wMMtKAsY4=
Subject key identifier:   CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DC898
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Mar 2024 22:53:33 +0000
Certificate not after:    Thu 22 May 2025 18:06:49 +0000
Subordinate resources:    AS: 28405
                          AS: 262944
                          IP: 138.185.224.0/22
                          IP: 138.186.64.0/22
                          IP: 189.201.192.0/22
                          IP: 2806:205::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17680536 (0x10dc898)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 12 22:53:33 2024 GMT
            Not After : May 22 18:06:49 2025 GMT
        Subject: CN=e338779fd8bf1e94c36b162d8361cfbeb8ad53ed
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:d3:16:d8:67:4b:25:76:c5:b5:fd:3b:ac:ff:
                    46:06:26:cc:aa:7a:b4:60:23:18:3b:6e:2f:5b:a3:
                    73:07:41:b5:c4:ed:eb:86:29:5e:d8:46:68:37:a5:
                    3f:fb:f0:e8:c4:3a:fb:f0:05:2e:d5:7f:14:c0:77:
                    c7:b5:71:96:6e:3a:f0:f9:52:13:d9:d5:14:5c:dc:
                    38:ad:b8:18:cc:40:09:fa:b4:e9:50:54:b6:59:5f:
                    fb:8a:79:31:27:24:42:27:4a:e0:ad:e3:18:0c:74:
                    ff:e0:26:a1:a9:36:5c:16:14:43:92:dc:ed:c8:6d:
                    51:71:bb:6c:74:3d:49:fe:02:21:24:bc:2b:91:fa:
                    7c:e4:8e:4e:27:5d:76:f8:f8:d7:66:11:9f:d7:fa:
                    80:46:25:91:77:bc:85:1e:6b:bc:3b:47:30:66:8a:
                    c0:f0:48:7b:b5:a2:86:d9:19:aa:c4:74:50:eb:65:
                    9c:67:43:52:01:34:92:46:e5:2a:0c:c5:e9:7e:de:
                    56:33:39:98:fd:07:23:4b:75:6c:13:59:f1:50:a2:
                    4c:d7:35:2c:f5:56:95:7d:bb:ff:aa:87:61:19:e9:
                    a4:be:96:6b:6f:7a:36:c4:70:c7:91:1a:a1:d0:09:
                    b5:a2:d7:62:a1:69:dd:56:07:be:ab:49:6a:d8:ca:
                    4a:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:01:5A:CA:76:D5:64:F6:7B:6C:9D:E4:1E:DC:F9:AC:4A:80:41:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c75b588-b992-492e-82db-524efc1d8981/e338779fd8bf1e94c36b162d8361cfbeb8ad53ed.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.185.224.0/22
                  138.186.64.0/22
                  189.201.192.0/22
                IPv6:
                  2806:205::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28405
                  262944

    Signature Algorithm: sha256WithRSAEncryption
         20:4c:7a:6f:32:e0:5a:2b:fe:50:80:ef:11:70:60:ef:94:47:
         c4:55:cb:e9:a9:e6:b1:0b:16:dd:cc:dd:be:6a:ff:1c:da:b5:
         20:60:ee:d9:58:c8:72:8d:ca:ee:5f:e2:43:cf:78:cd:d1:51:
         6f:43:2e:59:6d:d7:b2:81:05:46:de:ec:47:ff:ad:b1:9c:e4:
         bb:67:89:27:4a:01:87:e7:90:97:f8:92:2f:af:cf:40:00:1b:
         7c:57:28:83:2e:43:b0:9a:2e:d6:e4:27:22:1c:50:c6:3a:02:
         cd:0a:f7:96:4e:ae:8f:e3:e5:51:84:53:a3:92:98:1d:f3:fe:
         c6:6c:63:aa:18:62:ce:cc:e5:bb:38:0d:10:6d:be:f7:30:3d:
         2d:d4:ca:a6:b9:3e:10:7f:2d:17:27:65:76:6d:14:11:ee:49:
         bb:e2:ec:72:37:a4:77:9e:bc:9d:f6:da:8a:81:e0:b8:80:41:
         92:6a:49:3b:54:17:85:c7:1d:30:b6:b1:c0:ad:d5:6d:fc:b3:
         17:9c:9c:7e:c0:dc:09:42:46:de:49:e1:f2:1e:0c:b9:7e:f3:
         ea:89:6e:35:9a:83:b7:44:ee:65:c8:d6:9a:e7:fb:2a:d6:16:
         75:8d:c6:d6:43:30:44:28:ad:08:d9:c6:6b:a5:fd:c2:fc:9d:
         76:f6:90:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----