Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fde7995e468e5dff38f4af7bca3fc88753dc8931.cer
File:                     fde7995e468e5dff38f4af7bca3fc88753dc8931.cer (raw, json)
Hash identifier:          fLULORz2bbMPdklrAfRDMM5JoH/gbeq3xggXCsj6ghc=
Subject key identifier:   82:55:8C:8D:80:08:16:C3:A3:64:F4:EF:38:38:0F:F4:87:46:2B:F6
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B5A5B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ffdf8eb8-3066-4b1b-a9b0-3d3342791b4d/fde7995e468e5dff38f4af7bca3fc88753dc8931.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ffdf8eb8-3066-4b1b-a9b0-3d3342791b4d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Feb 2024 21:10:15 +0000
Certificate not after:    Fri 31 Jan 2025 16:49:23 +0000
Subordinate resources:    IP: 2801:1b1::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17521243 (0x10b5a5b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 21 21:10:15 2024 GMT
            Not After : Jan 31 16:49:23 2025 GMT
        Subject: CN=fde7995e468e5dff38f4af7bca3fc88753dc8931
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:68:3f:51:89:29:18:b4:2e:5b:d2:c0:80:79:
                    fb:6d:c5:fc:92:d1:6a:da:f0:cd:4f:0c:4d:1d:5f:
                    d9:12:72:38:b4:85:9a:75:a4:9f:30:14:40:32:c1:
                    62:7d:4f:63:83:55:e0:01:5f:57:58:04:28:92:59:
                    53:72:aa:9a:aa:97:b6:41:cb:f4:4e:7e:8a:5e:a4:
                    fa:7b:92:2f:8b:7b:82:60:b8:e7:59:ae:5b:9a:87:
                    c2:6d:e4:52:ff:4e:ee:7e:d0:b9:b9:e5:ad:01:9a:
                    28:bd:16:90:5e:50:e5:bb:49:fa:32:69:00:b0:68:
                    9e:94:6d:99:b1:73:e1:97:73:39:9a:51:c7:28:20:
                    fd:71:a1:29:ef:e1:d1:35:43:01:93:d7:20:6c:c0:
                    f6:99:a9:7c:66:5a:f7:d4:a3:b5:23:38:9e:50:09:
                    20:d1:88:6d:f0:9e:87:c6:c9:4c:ad:dc:4e:c5:bf:
                    8e:27:9e:e3:55:ad:8e:dd:20:bb:e2:c7:f0:eb:6c:
                    bd:79:d7:4b:db:a8:51:80:a7:b7:29:21:c7:4d:df:
                    28:8f:42:b6:f5:7c:a9:a3:14:72:c6:d0:77:be:48:
                    74:d3:b7:79:7f:0f:d4:c4:6b:40:11:22:8f:83:ab:
                    26:00:1f:61:4c:29:a2:ea:ab:10:01:72:94:c4:3e:
                    ca:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:55:8C:8D:80:08:16:C3:A3:64:F4:EF:38:38:0F:F4:87:46:2B:F6
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ffdf8eb8-3066-4b1b-a9b0-3d3342791b4d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ffdf8eb8-3066-4b1b-a9b0-3d3342791b4d/fde7995e468e5dff38f4af7bca3fc88753dc8931.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:1b1::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:a1:bc:ee:82:40:32:8a:bb:11:9a:27:00:36:b7:80:38:7e:
         cc:d5:c5:13:41:13:dc:e0:03:c7:5a:f3:a8:b7:c0:10:81:92:
         5f:0e:20:02:16:82:4a:1a:7e:47:f8:91:7c:ef:9a:9a:58:c4:
         a8:e1:54:32:12:e3:fd:2e:da:ef:b9:2a:cd:51:b1:ea:cb:fb:
         da:44:4b:7c:b9:81:a6:be:da:7f:7c:8d:0b:cf:ef:fd:67:0c:
         e7:92:2e:b7:9a:24:aa:bd:43:5a:2f:43:b8:65:5c:44:6e:f5:
         dc:55:a9:56:5e:0d:31:21:af:e8:77:63:f8:85:eb:c4:04:79:
         59:68:3c:e7:68:35:78:0c:a1:c3:26:44:75:7d:63:aa:fb:3d:
         32:b8:b9:44:11:38:72:67:0b:6d:a3:6f:55:3e:37:5a:a5:b6:
         22:e5:8c:6e:33:72:2b:c7:68:8b:85:dd:21:33:0a:72:ce:be:
         58:d5:cb:c7:ec:ee:9a:6b:eb:49:ac:22:da:99:ee:2a:d9:6c:
         41:b3:a6:2e:38:5a:6b:60:43:7d:b7:18:91:76:bc:6d:29:74:
         c8:5c:05:45:e9:78:b9:6f:4e:d2:21:31:fd:b3:ab:bf:a5:86:
         2d:6c:7f:29:d9:e5:29:04:54:6e:47:ac:4c:bc:0f:49:5e:6d:
         7c:92:84:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----