Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0128a9beec89928dc5f022688cbcc4fec9a52d70.cer
File:                     0128a9beec89928dc5f022688cbcc4fec9a52d70.cer (raw, json)
Hash identifier:          nBNHFOPpBLwYCcSqLFWstAePjzFMJJxvZ3WjsVJSuY4=
Subject key identifier:   FB:31:3D:DB:FA:9C:F7:FD:82:56:43:9F:B4:8A:DA:10:92:58:B0:03
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CE632E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e29f5986-e367-46e1-adcc-14f9172aedc4/0128a9beec89928dc5f022688cbcc4fec9a52d70.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e29f5986-e367-46e1-adcc-14f9172aedc4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 29 Jul 2022 17:00:12 +0000
Certificate not after:    Sat 25 May 2024 17:27:47 +0000
Subordinate resources:    AS: 272833
                          IP: 2803:8c90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13525806 (0xce632e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 29 17:00:12 2022 GMT
            Not After : May 25 17:27:47 2024 GMT
        Subject: CN=0128a9beec89928dc5f022688cbcc4fec9a52d70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:96:92:f5:87:04:28:21:10:18:7c:ab:f1:4a:
                    83:e8:1e:e0:a1:8d:40:2c:c4:b7:c7:a7:c5:92:8f:
                    07:99:1b:31:ba:f3:83:1e:d0:ea:2c:99:33:db:f5:
                    3a:e3:1f:45:9f:10:e4:ad:63:6e:c1:8e:7b:7d:c7:
                    8f:c2:0f:9f:da:7c:99:ba:cb:20:57:bd:d9:08:39:
                    4f:35:60:8a:fa:c5:21:cf:99:70:d1:36:3e:17:92:
                    3c:ee:ac:a3:8e:49:a0:4d:a7:dc:67:9d:ae:bf:cc:
                    25:2f:d9:a1:3f:49:79:70:64:07:2f:f9:c6:65:5d:
                    be:a0:5d:2e:fa:6f:88:62:31:b9:30:dc:7f:ae:7d:
                    57:12:56:ab:05:28:0c:ea:e8:d3:cd:12:17:f5:0a:
                    48:37:e6:4a:04:36:65:c4:f5:71:81:2c:d0:95:c4:
                    7d:b9:97:d4:1a:d4:bf:41:a0:6f:b2:6f:3c:a0:09:
                    73:be:03:dc:57:85:5f:33:33:e7:42:d2:2f:1b:1e:
                    f1:9b:6b:1e:be:3d:41:f8:bb:2d:6d:43:13:39:93:
                    3f:98:61:56:98:88:20:f0:8f:ec:7f:c2:83:90:2c:
                    b5:77:5c:cd:d4:9a:97:b4:60:c2:f2:ec:d6:16:f9:
                    da:28:f4:2d:7f:96:74:9d:49:0b:c0:3f:61:e9:86:
                    10:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:31:3D:DB:FA:9C:F7:FD:82:56:43:9F:B4:8A:DA:10:92:58:B0:03
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e29f5986-e367-46e1-adcc-14f9172aedc4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e29f5986-e367-46e1-adcc-14f9172aedc4/0128a9beec89928dc5f022688cbcc4fec9a52d70.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8c90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272833

    Signature Algorithm: sha256WithRSAEncryption
         6d:00:5e:42:5b:06:a6:88:a9:7d:bb:e5:0c:a3:0e:8c:3c:c2:
         8a:3a:6e:35:4e:dc:f1:66:86:89:62:49:50:5b:62:57:11:6d:
         16:e7:13:af:18:75:b3:56:f7:ba:93:54:2e:0e:35:d1:51:d8:
         07:bc:27:a5:26:80:f9:38:53:bc:21:3a:5c:4c:67:80:df:5a:
         b9:28:32:60:f6:ce:3e:48:56:09:83:be:30:3e:7c:9c:e7:67:
         d8:f0:98:28:3f:02:30:32:d6:bf:11:2d:a1:f7:37:0f:5b:e2:
         f8:ed:3e:0e:3f:4b:6d:58:0a:1d:af:9a:97:84:e5:34:35:df:
         f1:8a:ce:30:94:17:bb:ff:5b:a6:a1:e3:83:fd:b3:8e:e8:ca:
         5e:b1:9f:c0:f1:ca:ac:a8:47:23:f7:8e:5a:8a:22:ed:a7:22:
         2a:04:cf:55:db:3f:74:96:ab:aa:22:d9:55:88:9b:0a:36:c9:
         b7:80:13:0f:14:07:19:68:89:bc:5c:79:99:f4:da:02:fd:79:
         79:7f:77:23:0c:31:c2:d9:c2:6a:40:b5:cf:58:a1:7e:4c:6c:
         7d:fd:0c:8b:18:f6:3f:66:7a:a5:dc:b1:34:72:3c:d1:d2:f6:
         ac:b5:42:da:31:18:dd:5f:f3:d6:bf:3e:ee:15:18:73:3b:39:
         c0:8e:42:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----