Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fdeb60c3ba4ca8ab635179d772e8fdec1201752f.cer
File:                     fdeb60c3ba4ca8ab635179d772e8fdec1201752f.cer (raw, json)
Hash identifier:          +eTyOTeU5yeLCOyEDKALK55OO2uXm1zsSPcQ62SPjic=
Subject key identifier:   B4:E2:F3:66:F1:C6:96:46:57:FA:79:00:13:38:DB:F2:11:FB:BA:E4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0109CEB4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/920e5113-c262-4189-b374-1686c322c9cd/fdeb60c3ba4ca8ab635179d772e8fdec1201752f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/920e5113-c262-4189-b374-1686c322c9cd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 31 May 2023 17:00:57 +0000
Certificate not after:    Wed 19 Mar 2025 15:25:02 +0000
Subordinate resources:    AS: 273004
                          IP: 69.164.80.0/24
                          IP: 2803:bd90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17419956 (0x109ceb4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 31 17:00:57 2023 GMT
            Not After : Mar 19 15:25:02 2025 GMT
        Subject: CN=fdeb60c3ba4ca8ab635179d772e8fdec1201752f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:88:c9:6a:81:16:c2:a7:26:71:b6:a8:c0:5b:
                    29:30:a8:25:d1:aa:14:3d:0a:e1:6e:3b:6d:25:43:
                    ce:3b:b5:d0:d8:dc:39:5f:fb:e2:65:9c:ef:0e:70:
                    96:a3:c9:38:fd:f6:fc:94:0c:59:e2:62:61:d8:74:
                    67:9e:fb:02:c3:bd:b5:5a:76:ce:fe:3d:8f:08:f0:
                    a3:e5:25:c6:e7:d3:44:74:bc:82:5d:0e:2c:10:27:
                    b6:9b:f9:24:1b:19:31:4d:bc:ed:32:47:3d:c5:c3:
                    e1:93:0e:bf:f2:45:f4:b5:e8:88:f8:fb:5f:78:59:
                    ac:d1:07:ca:00:ca:78:d4:3e:28:c9:67:09:0a:fd:
                    86:d3:b1:e0:a7:55:9e:31:85:78:f4:f4:42:40:98:
                    2d:86:65:34:eb:9f:cf:1c:b1:ac:47:8f:aa:a1:e9:
                    ed:fc:46:cb:a3:e9:6e:15:93:dd:cc:06:f4:86:90:
                    aa:7f:e1:0e:ba:31:93:f9:17:7d:76:7b:ae:d2:39:
                    ec:0a:0d:45:ef:b4:4a:38:4b:6e:c8:fd:23:28:2a:
                    28:82:a8:b7:47:db:6d:e8:59:e1:ab:12:e6:86:8f:
                    9f:7a:c2:05:19:88:db:0e:8e:3b:29:d1:ed:2f:23:
                    de:b5:13:df:73:3f:87:49:4f:19:6a:6e:1c:57:da:
                    10:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:E2:F3:66:F1:C6:96:46:57:FA:79:00:13:38:DB:F2:11:FB:BA:E4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/920e5113-c262-4189-b374-1686c322c9cd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/920e5113-c262-4189-b374-1686c322c9cd/fdeb60c3ba4ca8ab635179d772e8fdec1201752f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  69.164.80.0/24
                IPv6:
                  2803:bd90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273004

    Signature Algorithm: sha256WithRSAEncryption
         3c:2a:2e:87:72:d6:b8:18:f1:3c:a8:09:76:55:63:72:a4:65:
         bd:e1:7c:1a:59:20:20:76:a4:23:e5:8d:ce:73:0e:9e:2d:65:
         19:48:b3:18:c3:9a:8c:36:73:ea:f8:e7:8a:c1:f7:50:f3:db:
         dd:a5:26:8e:b2:7b:00:82:d6:3f:9f:be:22:ae:44:d9:dc:44:
         af:0b:a0:48:fb:53:64:63:3d:7d:a1:18:c3:12:98:7f:fb:b6:
         62:ca:50:2a:84:e9:f7:30:07:16:8a:e3:81:03:d7:2d:0c:8a:
         cc:7a:4c:20:fb:44:62:b3:3e:3b:8e:02:64:34:e9:f2:45:f4:
         bd:9d:9c:24:f1:00:bd:6a:3b:ce:d7:7a:05:b1:5c:59:d7:68:
         98:45:0b:46:14:0e:b4:ab:e1:11:ec:48:4b:83:9e:b8:d9:3d:
         49:c6:fe:87:4b:fb:b6:87:96:4f:1d:a2:98:8c:2c:db:3e:47:
         1b:02:ee:02:68:67:f2:d8:a2:92:95:13:9a:06:91:75:3d:ab:
         51:5e:85:a5:62:a5:1e:09:1c:87:8a:11:6b:74:4d:8c:61:d3:
         06:da:8b:33:13:15:f6:72:37:85:16:49:0a:10:94:32:69:66:
         fb:40:01:fc:13:73:37:a8:81:0f:f2:15:a6:67:ad:8f:ee:19:
         df:61:25:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----