Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eb995e77eb4988c2a3eb4666447854593e146f8d.cer
File:                     eb995e77eb4988c2a3eb4666447854593e146f8d.cer (raw, json)
Hash identifier:          mm2Isjv5OAMDN5bQ7P2uP81JK4lyuJjnJRXCQrUzCBk=
Subject key identifier:   C3:B9:FC:4D:6C:02:E7:F8:97:BF:0D:67:8A:29:7A:62:05:A1:2C:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0107BF92
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5ed7e6d0-a83d-4215-82c2-8b10d88e8c61/eb995e77eb4988c2a3eb4666447854593e146f8d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5ed7e6d0-a83d-4215-82c2-8b10d88e8c61/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 13:49:34 +0000
Certificate not after:    Sat 22 Feb 2025 18:45:49 +0000
Subordinate resources:    AS: 272127

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17285010 (0x107bf92)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 13:49:34 2023 GMT
            Not After : Feb 22 18:45:49 2025 GMT
        Subject: CN=eb995e77eb4988c2a3eb4666447854593e146f8d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:8c:1d:2e:6f:a8:33:ee:72:50:4c:e5:04:ba:
                    67:2a:84:1b:67:dd:47:6f:3f:ae:ac:45:4a:6d:e7:
                    fb:66:bb:9e:f5:f2:74:55:a8:e5:a3:d3:f0:ce:a6:
                    71:f5:99:49:4f:f8:69:03:3d:1a:63:8d:bf:51:c2:
                    b9:6a:d9:f2:79:9c:9b:c7:5c:d8:a1:9b:8f:32:a3:
                    8b:99:8d:7b:fe:49:15:f3:34:b9:a1:6a:1a:d7:f6:
                    fd:f2:e3:7f:08:ff:99:08:0b:00:25:52:75:16:01:
                    81:df:39:7d:21:1c:04:cf:9b:e5:26:c0:08:8c:84:
                    7e:1a:00:c3:9c:de:24:38:5f:96:7c:2b:c5:9d:61:
                    0e:71:03:9b:8e:49:a3:65:55:f2:d9:1f:e1:aa:2a:
                    16:13:6c:8f:a8:64:f5:40:b1:0e:68:d7:97:bc:72:
                    36:04:b2:5d:77:23:76:af:c8:de:a1:b1:74:9f:30:
                    d9:51:91:51:c1:73:a9:9e:0f:0e:5c:aa:31:7e:05:
                    f9:31:2d:89:58:43:0f:68:33:32:ac:59:f5:0f:0b:
                    45:58:47:30:b7:6c:e3:a1:15:42:30:0d:20:44:55:
                    ec:97:6b:c3:d3:f5:b5:95:dc:59:e4:28:99:e7:d7:
                    0d:56:8e:a9:9f:8b:e4:3b:26:ae:11:23:3e:d4:63:
                    33:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C3:B9:FC:4D:6C:02:E7:F8:97:BF:0D:67:8A:29:7A:62:05:A1:2C:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5ed7e6d0-a83d-4215-82c2-8b10d88e8c61/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5ed7e6d0-a83d-4215-82c2-8b10d88e8c61/eb995e77eb4988c2a3eb4666447854593e146f8d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272127

    Signature Algorithm: sha256WithRSAEncryption
         af:b2:92:3c:e9:ea:e1:ee:90:d2:77:e0:61:7c:c5:f2:5c:47:
         85:3b:3a:7a:81:6f:5e:33:5b:7d:d4:90:39:ef:08:60:ff:4a:
         80:dd:a2:1a:80:ec:16:01:ba:c3:2f:a9:74:45:8f:36:58:54:
         46:14:d3:46:a0:12:d7:df:cc:27:46:73:91:27:a1:13:d9:ed:
         84:7c:6b:ea:16:14:f9:57:3d:44:22:ba:33:4e:1f:f3:0c:dc:
         ca:31:53:a7:f3:0c:24:72:ab:0b:f9:a1:ee:9f:3b:51:f2:93:
         b0:f1:7b:93:b9:c9:24:a8:df:2f:2e:71:a4:86:a8:07:84:a8:
         00:3a:87:d4:b0:44:a4:7b:78:43:0e:69:23:0f:8f:95:5c:e4:
         39:49:70:e3:78:27:44:90:d3:60:d2:d7:74:32:33:41:41:ce:
         24:5b:d8:f3:36:42:61:cd:1a:25:43:ec:b2:25:d8:5c:9b:78:
         8a:70:08:5d:6f:28:bf:bb:83:17:44:d1:cd:3a:40:d3:ac:9b:
         5a:96:cb:b8:a8:61:22:27:02:7c:78:07:b6:a2:6d:31:28:81:
         f9:dc:2f:12:13:45:d4:ae:f4:e3:24:76:58:a1:9a:9d:a2:b3:
         91:13:00:d2:e8:d3:7e:d3:bc:f5:d2:73:ec:a2:3c:60:1d:74:
         54:ee:d5:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----