Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/294ba34ccbc1f641150e42131f2f376fb4b7a934.cer
File:                     294ba34ccbc1f641150e42131f2f376fb4b7a934.cer (raw, json)
Hash identifier:          Cb4+CprPPd6Hbn1UDsR9F4ae6mACOSaI7/QjRw93r28=
Subject key identifier:   3C:C5:3B:2F:FC:CD:D4:19:5B:A2:DF:DD:BC:32:71:DC:5B:6B:1A:E3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FBCC61
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b8f0c69f-fad1-4f95-b9bf-730ed3e9476d/294ba34ccbc1f641150e42131f2f376fb4b7a934.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b8f0c69f-fad1-4f95-b9bf-730ed3e9476d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 03 Oct 2023 15:30:04 +0000
Certificate not after:    Sun 27 Jul 2025 21:22:35 +0000
Subordinate resources:    IP: 2803:4110::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16501857 (0xfbcc61)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  3 15:30:04 2023 GMT
            Not After : Jul 27 21:22:35 2025 GMT
        Subject: CN=294ba34ccbc1f641150e42131f2f376fb4b7a934
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:a6:ab:66:3a:1b:33:5e:ae:87:73:a0:07:ad:
                    68:1b:b1:5c:f3:c4:ce:36:14:1d:7d:80:a7:d6:55:
                    82:ed:5e:3b:77:b3:3a:87:5f:48:66:5b:2c:f2:1c:
                    d0:f1:e2:b7:a3:ed:ec:40:57:74:1c:c0:a9:c6:5b:
                    11:d1:7d:ea:89:35:bc:3f:13:9b:4c:92:49:fc:94:
                    ef:60:f9:21:3f:7e:d5:ab:e8:96:43:b1:3e:db:13:
                    d8:de:6c:02:09:28:63:9b:3b:04:fd:df:61:9d:8c:
                    f2:93:46:02:6a:fc:1e:40:81:a1:0a:d4:ac:ae:a2:
                    8b:a6:32:b1:74:36:aa:74:b7:4a:b4:61:6b:2c:f0:
                    08:8a:37:06:8f:df:c1:d1:0e:86:26:a5:71:1e:98:
                    51:61:29:de:65:86:52:58:02:0b:e1:1f:98:74:0a:
                    a2:b6:7d:f9:b2:9d:b8:23:09:7b:b0:82:d7:98:93:
                    cc:d7:94:4a:3c:cc:92:e9:43:7d:c2:f2:84:10:45:
                    99:b1:ed:d8:41:40:ee:1a:20:87:b4:4d:71:c4:1d:
                    ac:cf:d0:74:88:6a:31:e4:93:6e:bc:87:2d:0f:d7:
                    df:fb:f1:39:f1:fe:c6:5f:bf:7b:46:6c:90:77:3f:
                    f9:ad:73:10:1f:94:84:3b:a4:88:bf:76:16:b0:72:
                    c1:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:C5:3B:2F:FC:CD:D4:19:5B:A2:DF:DD:BC:32:71:DC:5B:6B:1A:E3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b8f0c69f-fad1-4f95-b9bf-730ed3e9476d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b8f0c69f-fad1-4f95-b9bf-730ed3e9476d/294ba34ccbc1f641150e42131f2f376fb4b7a934.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4110::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:e8:d7:7f:f2:12:64:0e:31:73:1d:b8:64:b3:05:78:5d:8a:
         be:d8:37:5d:7e:9c:2e:d3:dc:2d:b8:9b:4d:28:28:47:75:a6:
         10:66:d3:7b:72:fe:bd:63:9a:08:e7:49:ce:bf:49:a3:13:39:
         c1:de:b8:98:c1:53:59:d6:93:82:28:d2:9c:42:69:32:88:27:
         59:94:ad:5e:e5:04:26:c1:15:42:e5:48:18:8b:8f:c3:74:7a:
         89:c7:13:40:75:4b:5c:f5:e4:41:9e:0c:4f:3f:e7:27:bd:73:
         d9:3b:2b:4a:ee:aa:9c:a5:3e:cc:b5:19:6a:56:c3:9d:b1:8f:
         b6:62:9e:f8:19:a4:31:98:43:38:92:37:8a:a2:24:7b:69:7b:
         bd:5d:71:81:d7:c2:c3:c6:e3:89:18:9f:4a:e1:83:e2:30:76:
         7f:0d:4e:7b:c8:b7:6a:aa:04:66:17:fe:60:90:ff:a9:9c:33:
         a9:ae:64:e1:c5:1a:62:7b:d0:b8:86:38:cf:ff:b5:c8:eb:e8:
         b2:c4:3e:fb:d7:3d:57:21:56:f3:e9:4b:8c:fe:3d:de:e0:08:
         c2:ab:13:7f:c3:fa:a1:05:ea:14:a7:f5:2e:72:d6:e8:84:68:
         c2:cb:74:c7:be:0d:ec:14:e7:6c:10:a9:aa:be:5c:82:5a:9b:
         bf:32:59:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----