Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ea3edaebfa74bb3b93d61bfa7553bd06f421db71.cer
File:                     ea3edaebfa74bb3b93d61bfa7553bd06f421db71.cer (raw, json)
Hash identifier:          n8c5LZj8JiYSE76gHBNXF7iE2iKE9PXsJl8f/fiVUg8=
Subject key identifier:   FD:75:C5:8D:DD:24:0A:7A:59:02:0E:23:6E:BA:3D:29:8A:96:CB:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3EB65
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6186fb0b-71dd-408c-a96d-77f3bdb2e97b/ea3edaebfa74bb3b93d61bfa7553bd06f421db71.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6186fb0b-71dd-408c-a96d-77f3bdb2e97b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 19:44:40 +0000
Certificate not after:    Thu 26 Dec 2024 14:00:00 +0000
Subordinate resources:    AS: 27961

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14936933 (0xe3eb65)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 19:44:40 2023 GMT
            Not After : Dec 26 14:00:00 2024 GMT
        Subject: CN=ea3edaebfa74bb3b93d61bfa7553bd06f421db71
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:c5:44:1d:f9:71:07:29:a0:37:28:49:3c:8e:
                    01:9f:58:cb:e6:aa:59:75:17:29:d1:40:50:8b:46:
                    35:af:05:31:9a:c5:4d:09:d6:80:e5:f6:71:4b:c3:
                    28:28:80:41:75:34:d2:26:46:08:27:77:ad:71:83:
                    ec:4a:30:aa:1d:03:3b:4c:da:cd:ec:04:60:f3:c7:
                    9b:6b:4b:9a:03:bb:3d:08:1d:65:fb:40:b1:b9:f8:
                    3d:0d:3b:09:72:46:f8:7b:74:cc:77:22:46:62:af:
                    e2:3d:f4:45:9f:83:dd:c0:3d:2e:4d:7b:52:8d:11:
                    d0:44:3e:fc:a7:ad:ae:76:66:33:2b:82:2b:17:8d:
                    a7:26:d7:b9:e1:d3:af:a1:e1:11:27:a5:e4:8e:86:
                    39:fc:39:44:04:7e:81:c0:3b:92:94:2d:76:ec:f8:
                    f6:c9:29:dc:d1:b4:d5:13:d4:7e:ab:76:23:a4:c5:
                    f5:6a:1d:e9:13:87:50:8b:e2:c5:04:0d:f7:66:a1:
                    99:3d:c9:2c:c9:77:b9:53:9d:6d:4a:04:de:ad:ba:
                    8b:9f:a4:1a:51:8d:78:35:72:5c:24:64:1f:ea:4f:
                    b5:40:db:d9:1b:3f:62:30:e2:fe:88:a1:3a:6a:c4:
                    09:21:9c:d1:f9:ce:df:9c:ee:0e:a4:56:d8:76:74:
                    62:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:75:C5:8D:DD:24:0A:7A:59:02:0E:23:6E:BA:3D:29:8A:96:CB:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6186fb0b-71dd-408c-a96d-77f3bdb2e97b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6186fb0b-71dd-408c-a96d-77f3bdb2e97b/ea3edaebfa74bb3b93d61bfa7553bd06f421db71.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  27961

    Signature Algorithm: sha256WithRSAEncryption
         92:2f:bc:27:8d:bf:f9:15:94:6d:ba:05:d9:6b:28:c8:48:82:
         48:e0:3f:76:01:9e:45:35:a7:01:86:ba:f4:98:0a:d5:4f:a1:
         0e:ec:49:68:d6:8d:fd:9d:0c:b5:28:ec:5a:00:ad:b4:df:10:
         e0:b2:b4:f6:7f:86:5c:25:57:b0:1d:40:a0:a6:fe:9f:e5:18:
         ce:8d:6b:0f:c1:cc:a2:3f:da:ea:2c:d8:b2:1c:84:64:20:d8:
         cf:64:6f:97:4e:3a:0e:62:68:b9:1d:5c:95:68:b0:14:60:95:
         62:8d:e9:fc:3f:1d:9f:49:3f:18:63:b0:2a:69:05:7d:72:35:
         ec:a6:cf:9d:bd:c6:9d:fd:f2:1d:ec:af:d4:80:db:df:f0:05:
         22:d0:c8:49:cd:80:c8:8b:2e:df:1d:58:d9:a1:4f:a7:18:8a:
         0a:a7:d0:d2:1a:a1:d1:af:bc:b6:02:70:4f:93:b6:aa:9e:4c:
         13:eb:71:6f:93:ad:da:5f:cd:b5:59:ac:20:da:4e:65:0b:6b:
         71:e9:01:12:94:fb:c2:75:19:32:c3:25:ec:32:22:23:eb:fe:
         d8:20:0b:e8:b0:2d:f3:f7:08:2b:88:79:2f:c8:d1:d8:01:56:
         50:8c:28:ca:ff:dc:45:8e:ba:a2:22:9f:55:a9:25:49:cc:15:
         cd:e3:0f:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----