Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ec00c889442e355b2b8cf767250012352b20e795.cer
File:                     ec00c889442e355b2b8cf767250012352b20e795.cer (raw, json)
Hash identifier:          CXtOe6VyEasST3irKsmOTatlzhfG6x5l+piq3GjpqGw=
Subject key identifier:   4F:E9:CE:9B:A8:9B:7E:B1:31:D0:DB:8A:B5:45:9C:22:0C:24:D2:E2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC1E29
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1181a67a-bcf0-48a1-9ea0-91f84f176460/ec00c889442e355b2b8cf767250012352b20e795.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1181a67a-bcf0-48a1-9ea0-91f84f176460/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 06 Oct 2023 15:06:42 +0000
Certificate not after:    Sun 15 Jun 2025 17:06:53 +0000
Subordinate resources:    AS: 272845
                          IP: 2803:7c90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16522793 (0xfc1e29)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 15:06:42 2023 GMT
            Not After : Jun 15 17:06:53 2025 GMT
        Subject: CN=ec00c889442e355b2b8cf767250012352b20e795
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:79:48:c9:ad:bb:0a:cf:f2:d1:45:05:73:6e:
                    92:a3:fd:69:de:33:56:2c:b9:8b:46:9d:ce:4d:af:
                    88:d9:9b:00:4a:9d:1d:14:9d:e0:4d:19:17:09:d4:
                    95:2b:a3:e5:ab:8a:ba:fa:a4:a1:e6:90:f7:41:fd:
                    f0:22:e6:53:4d:88:f0:2d:2d:85:d4:07:62:d7:be:
                    de:7a:db:47:a4:1e:a4:3d:05:7b:05:a2:24:a0:b9:
                    48:d8:23:4e:60:a9:10:06:f0:4b:a1:75:be:95:a9:
                    67:30:70:ac:7c:e9:69:1e:a5:fd:f6:78:4b:79:36:
                    28:89:6e:3f:ae:d9:e5:ea:15:6a:74:87:59:87:ce:
                    cb:44:bc:27:b8:dc:38:7f:af:ae:c7:7d:86:fd:aa:
                    e6:4d:a3:63:9e:d1:3f:f2:7f:f6:0e:ae:f9:1b:44:
                    02:a9:6f:14:3e:8a:ae:d1:e4:81:8b:db:0c:62:9d:
                    07:61:d0:c1:0a:5b:19:8b:37:7c:8e:49:ba:db:fd:
                    b2:12:9b:40:b8:51:d9:fa:8d:48:c6:22:bd:39:41:
                    9b:c7:d7:5a:22:c6:25:6a:ca:1d:86:15:4f:b7:ef:
                    d0:e7:6d:f5:e0:70:2d:9e:75:5a:74:c7:69:21:9c:
                    9c:9b:b0:d5:04:14:0c:30:d0:2f:e2:21:85:78:e8:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:E9:CE:9B:A8:9B:7E:B1:31:D0:DB:8A:B5:45:9C:22:0C:24:D2:E2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1181a67a-bcf0-48a1-9ea0-91f84f176460/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1181a67a-bcf0-48a1-9ea0-91f84f176460/ec00c889442e355b2b8cf767250012352b20e795.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272845

    Signature Algorithm: sha256WithRSAEncryption
         61:cd:5a:8f:47:9b:94:07:70:df:5d:f1:9a:8f:5f:80:f2:9e:
         1f:55:fe:0c:dc:d2:51:68:1d:0f:5b:77:c2:fc:2b:cd:86:41:
         e7:3d:55:b2:89:b7:99:e1:82:aa:ca:19:8b:6a:cb:a1:8c:ae:
         d3:ec:b2:ce:34:6d:ae:0a:81:07:7f:ee:47:96:12:92:e6:c4:
         fe:52:b3:69:8b:87:e2:37:b3:76:28:4c:b3:20:77:77:c5:5e:
         07:e4:26:62:1a:f1:c4:05:12:ba:6f:61:9d:ab:05:d3:48:99:
         2b:88:6f:67:c9:60:9a:d9:ed:7a:d5:73:16:04:15:3e:48:2f:
         02:4c:df:32:aa:a1:8b:23:8b:4d:db:be:78:be:ea:58:51:e1:
         71:92:06:0d:03:20:cd:02:f9:72:c5:02:a5:31:29:b3:15:5a:
         b2:b7:07:1d:0e:38:81:50:3f:ca:cb:b1:5c:b6:6b:ad:83:f0:
         f5:0b:53:af:bc:d7:bd:2d:95:f2:31:d4:4e:41:31:f1:e2:bf:
         ec:37:f5:37:43:69:4f:33:47:dd:f8:e4:63:84:8d:11:97:54:
         25:e9:78:7d:52:03:93:91:9c:e0:5e:20:23:6d:0d:ff:a1:db:
         45:5e:16:4f:9e:aa:75:88:3e:20:bd:ab:a6:bc:1d:d2:d8:d0:
         5a:e2:40:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----