Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.cer
File:                     0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.cer (raw, json)
Hash identifier:          6OMOJn1eZdaQToC0753HGaz7kFphO6l3G+tn1IQ3yqc=
Subject key identifier:   41:0E:AC:7C:47:5D:F5:8B:2C:87:92:10:F6:2C:D3:8A:1E:4F:43:D1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E39CB0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Apr 2023 17:22:35 +0000
Certificate not after:    Tue 06 Feb 2024 19:33:50 +0000
Subordinate resources:    AS: 263751
                          IP: 138.97.160.0/22
                          IP: 2803:1040::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14916784 (0xe39cb0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  4 17:22:35 2023 GMT
            Not After : Feb  6 19:33:50 2024 GMT
        Subject: CN=0a9b0c850b0e3d642c9616f419a02c86c57e4ef3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:91:89:a6:be:e8:e7:d3:88:a5:c4:4a:90:a6:
                    5f:5b:54:d0:7b:69:bb:a9:95:ff:2a:02:29:e4:76:
                    b9:2a:86:d0:32:04:64:06:3e:b1:59:8c:11:f0:86:
                    3b:ee:a6:df:07:01:01:f8:11:4e:d5:58:65:93:23:
                    69:ee:37:4d:25:5c:0a:00:b8:2f:e0:15:20:08:53:
                    df:57:1e:c9:d2:c2:71:d9:75:71:a6:83:e5:ee:ed:
                    75:b7:ab:b5:aa:4a:55:09:66:62:5e:52:55:ae:15:
                    9d:ed:17:8d:af:5d:70:28:98:83:60:1c:bf:e4:f6:
                    c5:11:ac:8d:ad:9d:3d:29:18:8f:79:af:d1:05:78:
                    c4:7f:b2:2c:19:8d:c2:0e:1e:b0:cf:05:f0:9d:a2:
                    9b:6c:58:19:73:f1:76:cf:3a:8e:36:68:d7:d8:72:
                    4c:f3:98:0a:18:19:f2:42:0d:31:69:bd:b5:5a:e9:
                    0f:b9:c0:98:6d:c2:a2:6e:0a:c7:c5:b0:3b:7e:fa:
                    73:18:e5:fd:a4:e8:1b:df:f4:58:88:50:9f:1e:dc:
                    e3:60:1c:4c:b0:aa:09:de:22:4f:f5:78:be:59:55:
                    ae:a5:30:50:ac:56:ac:40:17:58:f3:97:8d:0f:73:
                    85:a4:20:74:56:50:0e:ab:1f:4a:ab:00:f8:ba:d2:
                    a6:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0E:AC:7C:47:5D:F5:8B:2C:87:92:10:F6:2C:D3:8A:1E:4F:43:D1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dc77419c-f9b1-4800-841c-892182d2a346/0a9b0c850b0e3d642c9616f419a02c86c57e4ef3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.160.0/22
                IPv6:
                  2803:1040::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263751

    Signature Algorithm: sha256WithRSAEncryption
         69:20:0b:36:06:17:f3:15:f8:42:1e:f1:ee:0d:77:1f:66:1c:
         7c:81:f8:80:aa:ea:e8:b7:52:4a:ec:4e:6e:44:7e:12:c8:a7:
         6e:2e:20:09:07:da:cf:75:d6:2b:29:1b:60:c4:42:eb:a0:bc:
         4a:6f:99:7b:46:e0:91:20:4b:88:3f:10:ff:0d:fb:de:08:b3:
         4c:06:9f:a6:ac:75:4b:47:69:55:eb:b3:2c:f7:17:d8:12:5c:
         1b:cf:51:c4:cc:d4:85:c3:5b:29:7d:c9:e2:e0:ab:b2:bc:91:
         2f:51:0c:0b:54:9d:f8:eb:06:c9:d9:6e:a4:e0:20:9f:5b:d4:
         87:50:57:c4:07:db:53:3b:c6:ac:63:b3:d3:5f:70:5c:07:88:
         aa:e3:00:c8:e1:9f:e6:ec:98:b5:04:1f:07:4d:0e:47:c2:44:
         00:da:ed:7e:03:07:e0:d8:6f:07:33:d5:af:36:98:c7:14:2d:
         fc:85:4a:cd:7a:fd:98:c8:4d:ec:f2:53:7d:b8:ce:0a:f0:f1:
         11:18:03:82:02:04:fb:3a:35:14:70:e0:d9:8e:f7:1e:c4:81:
         ca:be:9a:32:ad:32:41:ba:3e:cd:90:59:43:4f:83:e4:db:ce:
         91:ec:3f:50:c9:ad:2f:21:51:29:c0:27:62:78:c6:1f:9d:8f:
         26:d8:d0:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----