Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ef3517651cfb6417a6f85eddaecfc8a0a5357d60.cer
File:                     ef3517651cfb6417a6f85eddaecfc8a0a5357d60.cer (raw, json)
Hash identifier:          UpuNokIelK3X8otUfdPFA7r1ZKy6LTwTMz8vT6yfNd8=
Subject key identifier:   85:0E:EE:13:E9:9C:EE:7C:FD:A3:4C:28:BB:E2:4A:CC:71:13:E3:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E55F2F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/863b2f31-d12a-4e39-bb38-901b2ffa1b90/ef3517651cfb6417a6f85eddaecfc8a0a5357d60.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/863b2f31-d12a-4e39-bb38-901b2ffa1b90/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 09:59:55 +0000
Certificate not after:    Thu 18 Apr 2024 06:00:00 +0000
Subordinate resources:    AS: 263778
                          IP: 201.159.8.0/21
                          IP: 2803:2980::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15032111 (0xe55f2f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 09:59:55 2023 GMT
            Not After : Apr 18 06:00:00 2024 GMT
        Subject: CN=ef3517651cfb6417a6f85eddaecfc8a0a5357d60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:b5:bd:c7:39:2e:d7:aa:7d:b0:1f:8d:6b:e9:
                    61:17:bb:aa:03:e1:48:ef:f0:74:4e:75:03:b4:df:
                    8e:46:03:fc:d0:02:bb:f8:e1:e1:36:72:ea:0c:a5:
                    9b:cf:e9:8b:7d:b0:e9:2e:ee:03:73:4f:0d:f6:df:
                    e4:fb:ce:a3:76:69:af:f6:31:3b:f9:b3:ee:03:ce:
                    e7:43:2e:0f:3a:38:73:38:5f:a9:e5:f4:f4:ec:3e:
                    a5:20:95:8c:d2:64:c0:1b:cb:bd:b3:04:cf:a5:4b:
                    51:f0:57:a6:02:64:d3:51:cb:c6:9d:32:78:f9:e9:
                    c6:50:f8:00:47:03:35:54:9d:65:2e:11:d8:ba:56:
                    ff:5e:c0:a8:f5:06:dc:79:32:34:9f:22:18:3b:fa:
                    f6:82:55:80:5d:cf:35:3f:3d:ee:3d:71:00:57:42:
                    fd:68:03:34:18:22:19:ab:57:a0:bf:16:a7:c7:37:
                    3b:f3:ee:8b:74:3e:e3:39:15:c0:18:f1:07:17:1f:
                    7f:0d:3f:3e:e3:6e:d3:42:a1:b7:fd:a7:41:a3:df:
                    27:e3:09:98:24:e0:d8:61:9c:1f:90:41:4b:be:30:
                    e7:1b:e2:44:ff:62:c8:ba:de:30:ec:ee:77:2f:93:
                    80:fe:29:00:fe:3a:db:2c:f7:f5:69:97:35:e8:66:
                    35:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:0E:EE:13:E9:9C:EE:7C:FD:A3:4C:28:BB:E2:4A:CC:71:13:E3:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/863b2f31-d12a-4e39-bb38-901b2ffa1b90/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/863b2f31-d12a-4e39-bb38-901b2ffa1b90/ef3517651cfb6417a6f85eddaecfc8a0a5357d60.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.159.8.0/21
                IPv6:
                  2803:2980::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263778

    Signature Algorithm: sha256WithRSAEncryption
         87:9c:a5:60:93:72:24:3d:3a:b4:26:e5:d4:91:33:c3:28:d3:
         0a:79:07:be:e7:02:8b:3b:2e:f1:99:1e:83:5b:3a:02:17:f4:
         71:73:b5:d6:3f:7a:ca:7d:ea:dc:14:ae:b8:e7:d7:82:ba:9b:
         ee:0c:37:f8:1a:c4:8f:f0:7b:0b:f6:27:e3:89:ff:bb:cb:71:
         41:ed:a2:46:60:f9:5d:ab:57:1d:a3:da:75:ee:e2:80:54:79:
         f8:73:8f:c2:0f:c2:6f:ca:3d:d0:43:4c:f9:6b:1c:2d:01:37:
         00:b2:2a:ae:8d:d7:9c:09:ca:84:6c:aa:cc:9d:95:a3:53:54:
         0e:02:bf:8c:f7:a2:7e:98:6a:98:03:71:20:f3:d3:41:f1:81:
         3b:d3:63:5c:76:74:df:c0:53:7a:30:f8:c5:e0:9a:d8:00:5a:
         11:9e:36:ea:92:3f:f0:c4:cb:fe:9b:92:e9:16:f5:42:0a:b7:
         be:24:35:33:19:c5:36:b0:37:24:e7:93:16:74:2e:fa:a9:aa:
         3a:c5:ff:f3:68:01:f3:0a:f9:1f:a0:40:55:f8:03:44:3c:90:
         74:7d:5a:0e:dc:5b:7b:7a:00:00:ba:82:35:34:94:10:cd:20:
         05:b8:75:a6:0a:0c:b7:f6:fe:16:70:63:2f:0b:b5:35:8e:3c:
         8e:02:f4:7f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----