Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer
File:                     08a33ea95ff454bf3ca0e41f79f9a22294d74785.cer (raw, json)
Hash identifier:          YakwMPO5WScynUc7PvzneJFWnecOg/QDkpR5sA5Xt5A=
Subject key identifier:   5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       CAEAF1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/08a33ea95ff454bf3ca0e41f79f9a22294d74785.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 23 Jun 2022 20:04:03 +0000
Certificate not after:    Sat 16 Mar 2024 19:09:31 +0000
Subordinate resources:    AS: 272146
                          IP: 2803:d090::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13298417 (0xcaeaf1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 23 20:04:03 2022 GMT
            Not After : Mar 16 19:09:31 2024 GMT
        Subject: CN=08a33ea95ff454bf3ca0e41f79f9a22294d74785
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:93:ae:0d:7a:a1:a9:3e:85:80:c2:a2:b9:52:
                    72:d3:cb:ba:61:5b:00:74:24:d2:c4:f8:10:c4:68:
                    71:a1:cc:cc:07:f5:a0:d4:5d:88:97:b4:c4:57:79:
                    66:7c:69:57:d2:35:68:18:85:56:3a:26:b0:c8:89:
                    98:73:13:be:ce:03:a2:27:c3:b7:ec:4b:6c:99:99:
                    48:8d:d5:6e:50:05:15:a8:bf:58:63:99:b2:07:b3:
                    fd:dc:53:df:92:4b:f5:25:a6:29:f8:66:f0:4a:ac:
                    da:ac:55:c4:89:58:05:47:dc:58:0f:c7:ad:4b:a1:
                    f6:bb:46:a4:1c:de:85:78:82:00:25:c1:62:3f:af:
                    46:3d:11:6f:b7:22:44:b2:00:3c:2a:7b:1a:e6:f0:
                    91:2c:da:6d:a8:c9:c0:50:54:7d:89:93:06:90:41:
                    52:67:06:7e:85:5f:d8:cd:ad:c8:d7:12:43:e5:d6:
                    46:0e:8e:8c:7d:24:8a:4e:18:68:c0:89:7c:07:81:
                    33:9c:90:00:3f:1c:4a:12:a8:77:2a:8f:ac:3b:cf:
                    c8:70:3f:c3:30:28:a0:31:7a:83:5f:e0:9c:45:5b:
                    8f:91:8a:ae:4e:78:04:0f:e6:55:e8:97:71:27:79:
                    de:89:78:0d:59:72:1f:49:69:5d:be:f7:72:7d:9d:
                    a3:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:3F:A7:3B:75:30:56:98:E1:BF:F0:D6:71:03:0B:25:22:A9:34:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6ce952a8-4fc2-45a5-b8bf-39b837e1dd9c/08a33ea95ff454bf3ca0e41f79f9a22294d74785.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272146

    Signature Algorithm: sha256WithRSAEncryption
         a6:8a:be:1e:ec:ed:35:b4:5f:18:f9:1e:7e:31:60:66:2c:56:
         ca:2a:26:0d:5f:e3:87:91:18:1c:25:f1:03:f9:34:b0:57:0c:
         fb:ae:25:7a:e3:59:19:c9:01:1d:18:b7:cb:0c:6a:0e:a5:f3:
         b1:86:ba:b9:e8:1e:c7:67:2c:9d:1f:15:41:e4:9d:e7:2b:94:
         33:ea:56:b4:d3:82:5e:cc:0f:7a:25:26:58:38:a2:ed:32:bb:
         fa:d3:16:2a:bd:c5:77:23:72:1d:00:c5:f6:bb:b5:2d:c8:d5:
         bf:89:54:0c:6c:a9:5b:82:76:4d:c4:25:23:4b:5b:6e:0e:4f:
         b0:cb:f4:f8:72:c7:08:36:df:6c:da:d1:4a:13:a9:f1:63:47:
         da:20:5c:35:a7:bc:3f:1e:54:1f:ea:18:1f:5f:8a:1b:8b:cf:
         18:92:91:da:1c:f1:e4:97:f4:a9:32:2c:5b:47:75:e6:bd:93:
         09:b8:ac:bd:be:c5:07:c7:1f:fc:fd:35:76:84:00:2b:84:c3:
         31:35:e9:19:e1:85:5d:b4:56:06:35:a4:55:e9:36:5b:5d:46:
         af:e8:13:12:62:75:d5:15:35:ef:61:3a:d4:23:19:7d:c1:8b:
         60:89:3d:42:87:f0:1e:98:1e:3d:ee:a8:3d:1c:ec:51:73:f9:
         72:4c:43:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----