Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d435f506a41492f875d672be3243509dbf91c0f2.cer
File:                     d435f506a41492f875d672be3243509dbf91c0f2.cer (raw, json)
Hash identifier:          dwk3aaoQ2E/JLGXdMS2X4lsUKdjMZ0915+KVn7N5tXo=
Subject key identifier:   E9:09:D6:0B:A4:73:FB:DD:03:A6:75:5B:6E:0B:A2:6B:CC:33:35:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       BF3A63
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ec2a97d1-1dc5-4f76-aa32-9dafe7b11ec2/d435f506a41492f875d672be3243509dbf91c0f2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ec2a97d1-1dc5-4f76-aa32-9dafe7b11ec2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Feb 2022 06:25:46 +0000
Certificate not after:    Sat 29 Jul 2023 20:32:36 +0000
Subordinate resources:    AS: 271986
                          IP: 2803:c110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12532323 (0xbf3a63)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  1 06:25:46 2022 GMT
            Not After : Jul 29 20:32:36 2023 GMT
        Subject: CN=d435f506a41492f875d672be3243509dbf91c0f2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:f7:28:5c:76:25:09:3b:85:73:fd:9c:73:db:
                    30:68:61:98:ce:0f:57:c5:f7:bd:b3:3a:90:db:fe:
                    4f:a4:e5:a7:c3:74:84:2f:d1:94:18:42:aa:4c:7f:
                    8c:c2:90:50:38:19:31:a4:aa:ee:e0:57:e7:c3:30:
                    4a:d4:0f:25:1b:e6:9c:d4:38:00:c6:1e:3c:f9:b5:
                    67:2a:d4:3f:23:fe:b1:99:ad:7e:ba:cd:13:02:6f:
                    da:3b:70:94:fa:7d:95:d7:1e:32:33:b8:39:52:a5:
                    8a:c6:88:09:68:12:bc:b4:7b:6a:42:6c:d2:08:dd:
                    7d:40:e6:a2:7b:85:0a:72:05:c0:ff:d0:6c:cf:86:
                    0a:a8:dc:cc:57:36:67:ff:fd:c0:c1:01:80:7a:9f:
                    6c:13:ac:2c:09:e8:ac:6f:2d:92:98:c2:b5:0d:ee:
                    f5:7a:74:14:1b:9e:47:b3:36:26:cc:8a:9a:b7:7e:
                    51:2a:9a:41:50:ff:c9:fe:94:bb:88:56:54:e6:ef:
                    76:b6:b8:96:f4:fa:23:88:fc:b8:85:e2:71:72:c0:
                    05:97:c7:90:50:f4:81:23:68:b8:c7:ee:d0:7e:da:
                    a3:91:a4:bf:59:bb:a0:21:80:9b:29:90:f8:57:fc:
                    ec:a1:2c:90:0f:e7:bb:c8:be:e1:61:c0:af:00:9e:
                    39:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:09:D6:0B:A4:73:FB:DD:03:A6:75:5B:6E:0B:A2:6B:CC:33:35:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ec2a97d1-1dc5-4f76-aa32-9dafe7b11ec2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ec2a97d1-1dc5-4f76-aa32-9dafe7b11ec2/d435f506a41492f875d672be3243509dbf91c0f2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:c110::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271986

    Signature Algorithm: sha256WithRSAEncryption
         3f:05:84:c0:6d:c9:70:86:58:be:83:f7:47:9b:d8:05:86:b5:
         98:41:62:7a:a5:49:13:ac:fe:85:b9:34:26:e5:1c:70:f6:f2:
         22:f3:43:72:19:70:42:e3:e8:d2:d8:e6:80:92:80:f8:fd:cb:
         e3:ef:1a:6b:d3:41:de:72:77:1f:af:27:ae:fd:4c:d0:36:85:
         b6:a9:e8:24:54:68:32:6a:b7:bd:34:79:db:31:8a:a0:d7:c0:
         9a:9f:b8:de:a7:f8:2b:2e:09:cb:04:96:3c:55:62:8f:7b:79:
         f5:b4:1c:79:a2:3e:3d:33:d0:1f:55:5b:1c:7f:a9:eb:38:37:
         88:4a:34:c5:a4:d7:9d:61:71:26:d5:b5:fa:87:52:e9:cb:eb:
         db:ca:1a:1f:db:1f:8e:fc:eb:f4:08:a9:f5:3e:fa:b4:2b:a5:
         34:3c:68:a8:4c:fd:1e:50:22:0d:0d:29:44:fc:b9:67:be:e1:
         d0:7d:72:0b:32:1a:94:2a:28:ce:3c:28:c2:1d:4c:3e:33:9d:
         aa:9e:1e:ca:b2:55:47:ce:19:73:78:ce:79:e1:ed:6c:19:1f:
         4f:08:ca:1f:1a:9e:8b:55:02:82:67:75:cf:57:cb:29:8e:a6:
         68:aa:86:24:67:2b:6f:b8:25:bb:36:23:a0:b3:2b:77:5b:d9:
         ff:ef:b7:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----