Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/09ea57b6c3d069e4ac033a5234fa650369f30845.cer
File:                     09ea57b6c3d069e4ac033a5234fa650369f30845.cer (raw, json)
Hash identifier:          gjSqSwHF6HIi9R5R9dOv1iEYXkauev7hp1+6G+5qcAQ=
Subject key identifier:   75:DD:B1:DF:36:71:BA:70:BB:A6:EF:6B:E9:2F:44:5F:AB:73:54:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EB3A7E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7ae41452-82a3-4557-879a-b5f9306601a1/09ea57b6c3d069e4ac033a5234fa650369f30845.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7ae41452-82a3-4557-879a-b5f9306601a1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 18 Sep 2021 12:17:34 +0000
Certificate not after:    Mon 24 Jun 2024 22:47:30 +0000
Subordinate resources:    AS: 271965
                          IP: 2803:4e10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15415934 (0xeb3a7e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 18 12:17:34 2021 GMT
            Not After : Jun 24 22:47:30 2024 GMT
        Subject: CN=09ea57b6c3d069e4ac033a5234fa650369f30845
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:19:04:a3:50:16:2e:52:cb:33:2c:01:34:d6:
                    ce:08:24:72:7d:75:1c:0f:5b:ba:0f:82:4f:2f:26:
                    d3:ce:84:05:6f:37:32:62:5e:84:11:68:08:42:ae:
                    89:af:9e:93:65:72:a3:ab:de:c8:37:53:33:3a:61:
                    2f:71:c5:db:0a:b0:04:be:b1:09:0e:22:73:39:01:
                    60:00:05:77:c4:1c:73:60:8a:e8:eb:7e:7c:98:84:
                    66:d3:6e:da:3b:97:58:45:7f:ff:f9:5f:ed:1f:d2:
                    f2:f2:24:53:2f:50:e4:f0:34:e2:80:1d:02:ce:05:
                    39:31:4d:88:52:88:23:49:3d:a1:bf:65:de:32:ef:
                    ce:31:9f:83:f1:d6:9a:93:eb:dc:0d:85:23:aa:ec:
                    42:53:5a:16:2e:5c:58:c5:b6:57:e8:be:64:ff:86:
                    62:1f:ce:a8:d6:57:ca:98:97:78:8c:ea:81:f8:fd:
                    26:81:4a:8e:8b:6a:c9:38:0c:14:99:36:25:b3:ae:
                    cf:18:da:ae:f5:2e:08:e8:48:d6:57:68:2f:29:94:
                    1b:aa:df:4d:3a:00:a0:52:11:c9:9f:43:f3:c1:f1:
                    61:b0:55:d8:c1:bc:bf:a5:94:3b:fc:ca:c7:2e:ff:
                    ea:72:fe:15:4e:32:5d:d3:b2:d2:e0:29:dc:e1:7f:
                    74:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:DD:B1:DF:36:71:BA:70:BB:A6:EF:6B:E9:2F:44:5F:AB:73:54:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae41452-82a3-4557-879a-b5f9306601a1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7ae41452-82a3-4557-879a-b5f9306601a1/09ea57b6c3d069e4ac033a5234fa650369f30845.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4e10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271965

    Signature Algorithm: sha256WithRSAEncryption
         9d:3f:a4:c0:f2:d9:61:19:f4:c0:87:37:8e:83:4d:80:7e:d8:
         68:75:34:be:da:48:40:76:fa:7c:a7:63:52:39:bd:3c:e0:8f:
         ff:19:a5:a4:b1:69:55:47:cc:48:12:b9:e9:be:31:04:83:e2:
         26:70:0e:fd:6f:a4:97:e9:49:c5:28:bd:46:a9:54:c4:4e:07:
         39:70:9a:bc:21:8a:1a:5c:17:94:54:c1:0a:76:3c:d1:b8:f7:
         6b:28:0b:c6:af:7f:0c:35:e9:95:4d:79:25:63:cd:90:68:ea:
         e4:7c:02:65:66:39:e8:b0:fc:43:89:9f:66:c1:2e:56:1e:fc:
         66:ae:23:f9:3c:52:b0:f1:cf:94:38:36:ef:ca:c5:e4:71:57:
         47:9f:ff:d0:50:9e:67:82:1b:71:6f:57:ba:9d:04:ea:20:a1:
         65:61:df:3e:17:7d:e8:94:a8:2d:38:66:c1:2f:c2:34:4d:2f:
         eb:81:7f:49:27:2b:8b:85:0a:7e:68:40:80:ad:8f:d4:32:8c:
         a4:e0:b6:1b:65:c7:b0:c0:80:dc:17:81:10:81:f3:20:b5:0e:
         47:83:41:4c:fd:e7:c8:11:91:a0:e6:cc:a2:0b:56:21:2e:81:
         ea:a1:5f:0c:7c:b7:20:16:77:e2:43:de:6f:48:fa:b8:d7:3f:
         c3:b3:21:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----