Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/efe3625182357b646f68e6b8aef66bcfb0e2c63e.cer
File:                     efe3625182357b646f68e6b8aef66bcfb0e2c63e.cer (raw, json)
Hash identifier:          hzQ8pPw9dfCuxzXsrOCgf74ZNrXsplV1TafTcsnjUH4=
Subject key identifier:   D7:47:8F:68:24:B8:9D:15:B2:EA:DC:1D:FE:3F:C6:7D:CF:F0:2B:A5
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D7BDC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a33dcaa2-2c72-4cbc-ad1f-bbf6e770a218/efe3625182357b646f68e6b8aef66bcfb0e2c63e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a33dcaa2-2c72-4cbc-ad1f-bbf6e770a218/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 10 Mar 2024 14:12:25 +0000
Certificate not after:    Tue 18 Nov 2025 19:48:05 +0000
Subordinate resources:    AS: 273164
                          IP: 2803:1250::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17660892 (0x10d7bdc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 10 14:12:25 2024 GMT
            Not After : Nov 18 19:48:05 2025 GMT
        Subject: CN=efe3625182357b646f68e6b8aef66bcfb0e2c63e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:0f:ac:13:f6:bf:b6:56:e8:7f:52:9b:a7:a7:
                    4b:20:a5:a9:83:e6:55:70:82:12:f1:92:8b:79:34:
                    7a:af:2f:6b:19:a1:30:58:33:5a:3d:06:ae:c3:0a:
                    eb:76:13:e3:f2:86:9d:d9:3c:cf:2f:dc:f5:ec:66:
                    af:9e:5f:c2:e8:99:f5:fe:a9:71:35:02:3a:7a:4e:
                    c9:aa:fe:d9:e2:67:ce:3f:6b:c1:07:e9:9e:92:36:
                    a5:31:04:b6:69:4f:c8:07:cf:84:1a:de:a1:ab:51:
                    b8:da:78:80:0d:01:4b:cb:cb:68:a0:eb:79:aa:1f:
                    80:96:44:7e:86:7c:79:aa:d1:56:a5:0b:9f:40:ad:
                    0f:94:7b:5d:d2:9c:b4:58:a9:ef:74:b5:f8:db:30:
                    59:b0:d9:f4:d1:20:e7:ba:82:2f:06:ad:5f:f8:34:
                    d9:89:eb:91:fd:a9:5c:a4:ea:79:62:66:5c:a0:56:
                    0f:96:0f:df:06:d1:89:4c:6d:48:ab:42:ab:0f:19:
                    b6:6c:e8:9f:21:e6:2c:ea:96:49:d3:7f:24:c4:10:
                    a0:7b:70:5c:d0:bb:0c:22:a4:c3:24:a8:02:aa:f4:
                    3b:1a:ba:b0:77:a2:55:54:93:57:c4:e4:57:29:83:
                    2f:bd:1d:2f:3c:96:26:e0:92:46:c1:c3:4a:61:67:
                    22:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D7:47:8F:68:24:B8:9D:15:B2:EA:DC:1D:FE:3F:C6:7D:CF:F0:2B:A5
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a33dcaa2-2c72-4cbc-ad1f-bbf6e770a218/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a33dcaa2-2c72-4cbc-ad1f-bbf6e770a218/efe3625182357b646f68e6b8aef66bcfb0e2c63e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1250::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273164

    Signature Algorithm: sha256WithRSAEncryption
         1b:59:6c:63:0f:9a:71:1b:ae:09:a2:82:77:47:38:ee:b4:8d:
         e0:63:2c:f6:a6:08:cb:1e:ea:6e:3f:8f:e6:cb:85:74:82:3b:
         10:1a:cc:d0:89:0a:74:f0:20:71:a8:eb:69:54:15:d8:07:c6:
         0e:21:80:83:b6:cf:d7:a8:67:c4:61:db:84:10:7e:36:0a:83:
         a1:b9:5b:21:1c:56:db:bb:f6:65:8b:b9:2e:4c:c1:38:84:b3:
         09:bc:fc:88:e6:92:01:0c:72:7f:c3:5a:75:55:57:c7:ef:7c:
         ea:57:7d:c1:90:4d:0e:3e:49:a2:98:8c:59:b1:14:42:4f:29:
         ea:86:36:f6:36:29:eb:b6:66:d3:29:83:30:b7:f2:13:ac:e9:
         6b:72:b3:ed:aa:2f:ae:4d:76:b2:c5:fa:df:2c:2d:72:06:e6:
         fa:73:50:bd:3c:63:79:bd:2c:dc:10:c1:06:27:3d:81:75:e9:
         50:ad:c2:1e:cf:cd:8b:88:eb:cb:26:7a:29:51:fb:e0:c1:e8:
         a4:11:28:b5:34:78:e6:bf:be:9d:4c:bb:5e:71:0d:42:c9:ae:
         35:bb:89:fa:e6:5a:89:65:f8:60:89:9e:2d:8d:6e:ab:d4:9b:
         65:62:ca:4e:5e:43:ed:e0:53:47:d3:59:de:e4:80:4b:60:9c:
         31:68:ff:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----