Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/03a376c63231e2cf5e5ec611543dd02e156ee829.cer
File:                     03a376c63231e2cf5e5ec611543dd02e156ee829.cer (raw, json)
Hash identifier:          wyIInTPDWs1kaam3OFHnYnBeay5VU3d4q+KJkexRkqc=
Subject key identifier:   96:69:62:EA:A2:10:91:2A:2D:BF:9C:16:D4:90:0D:C1:9F:30:5E:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E69BA6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5fb9c42d-b255-41aa-b964-58c263922bf9/03a376c63231e2cf5e5ec611543dd02e156ee829.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5fb9c42d-b255-41aa-b964-58c263922bf9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 19:08:37 +0000
Certificate not after:    Sun 24 Nov 2024 21:29:01 +0000
Subordinate resources:    AS: 269920
                          IP: 201.71.2.0/23
                          IP: 2803:c2e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15113126 (0xe69ba6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 19:08:37 2023 GMT
            Not After : Nov 24 21:29:01 2024 GMT
        Subject: CN=03a376c63231e2cf5e5ec611543dd02e156ee829
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:4a:03:83:19:d4:77:d1:70:6c:f8:27:e9:2a:
                    6d:14:4c:09:fd:77:03:96:ff:27:5a:4d:b9:d4:ad:
                    10:72:78:d5:31:fd:1d:8d:ce:aa:ce:95:83:de:b5:
                    ef:fa:cf:9f:8b:51:f1:aa:7d:98:f3:0a:ef:24:61:
                    19:3c:35:ae:49:62:cb:25:2b:7e:ff:50:1e:9a:78:
                    93:d6:c5:c1:29:2f:63:dc:a7:33:8d:39:f4:b2:28:
                    b5:79:ae:d6:ae:92:96:63:a1:74:41:c1:5a:58:0b:
                    6f:98:97:58:95:84:06:7b:39:36:b6:55:91:88:ec:
                    42:e8:ae:00:d4:24:f4:94:41:15:0e:c5:fa:a7:81:
                    48:26:eb:43:f3:93:4e:69:92:83:24:34:1f:e2:7a:
                    13:85:8f:cd:ca:b8:8a:be:78:31:25:c6:b8:9c:ca:
                    20:dd:83:df:c0:33:ab:59:84:5b:cc:ed:2f:e5:dc:
                    2d:ec:d8:18:c5:d9:4c:9c:40:92:bd:e3:aa:2f:e3:
                    d6:2c:d4:59:66:32:9a:13:1b:81:3d:41:12:0c:3d:
                    d3:eb:9d:3b:90:39:3f:9b:4b:43:4d:d1:28:be:2f:
                    1d:56:61:19:02:54:c7:9f:a5:a5:55:5d:b1:aa:4b:
                    02:00:47:92:c3:a1:a1:fb:97:ea:c3:43:58:c1:7e:
                    04:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:69:62:EA:A2:10:91:2A:2D:BF:9C:16:D4:90:0D:C1:9F:30:5E:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5fb9c42d-b255-41aa-b964-58c263922bf9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5fb9c42d-b255-41aa-b964-58c263922bf9/03a376c63231e2cf5e5ec611543dd02e156ee829.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.71.2.0/23
                IPv6:
                  2803:c2e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269920

    Signature Algorithm: sha256WithRSAEncryption
         1a:d1:1f:59:49:5c:e7:24:3e:8c:7c:8c:36:14:a4:7a:e1:9e:
         d4:6f:f5:6f:05:26:fd:81:fd:4b:e7:82:7b:96:35:ba:84:8d:
         83:53:1d:13:90:86:e4:f3:02:60:24:5d:5d:e5:96:80:d4:96:
         d1:17:94:f0:96:4c:ef:9f:ee:62:d9:98:f4:c0:b5:c5:63:0b:
         c0:b1:dc:ca:5e:91:4d:ee:78:73:02:78:de:33:25:6c:42:bb:
         98:82:7d:be:71:24:0a:fc:f8:4e:ca:92:04:e6:53:3d:b7:45:
         4e:09:0f:b0:be:6b:db:a9:84:5b:d4:38:cc:c4:da:c2:d3:6a:
         71:b8:09:60:2d:8e:95:4d:09:30:1d:d1:56:f8:01:b4:22:b2:
         d0:c6:89:1e:ad:e9:de:8f:88:9e:31:69:51:cc:36:cf:12:8e:
         27:8e:50:f3:a3:d5:7a:61:46:2b:9d:91:8e:4a:57:ba:9e:71:
         b7:e8:f0:db:29:a8:13:61:84:de:2e:87:1e:01:58:d8:1a:77:
         b9:05:55:ea:ec:a1:d6:58:9d:77:95:99:f4:d9:d7:a0:73:ed:
         b7:40:73:e7:0e:5c:d7:c6:83:27:ab:e2:78:81:97:5f:59:34:
         f4:68:c0:a1:0c:19:e1:8f:f7:22:dd:c6:73:42:c5:17:c1:b7:
         52:6f:bd:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----