Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d287d9bace0aaa89c8a18b31d258122387e847f.cer
File:                     2d287d9bace0aaa89c8a18b31d258122387e847f.cer (raw, json)
Hash identifier:          3LYmnVLtJRUOn2ZObgKXsofumWYMxrsX1eJV4wt0IE8=
Subject key identifier:   80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D8BD99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 20 May 2022 23:14:56 +0000
Certificate not after:    Tue 05 Mar 2024 20:21:03 +0000
Subordinate resources:    AS: 272137
                          IP: 2803:6090::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14204313 (0xd8bd99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 20 23:14:56 2022 GMT
            Not After : Mar  5 20:21:03 2024 GMT
        Subject: CN=2d287d9bace0aaa89c8a18b31d258122387e847f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:51:9a:cf:6f:09:f1:89:b7:31:10:9d:30:55:
                    b8:d4:2b:82:ce:64:da:9c:db:1d:11:1a:d5:c1:3a:
                    5b:07:6d:ab:25:07:25:28:de:56:7c:20:73:c5:29:
                    53:a9:6c:23:5f:59:c2:09:6c:4b:f8:cb:63:00:66:
                    60:25:93:9b:fd:1a:d4:0a:fa:a4:26:11:bd:4a:8a:
                    a9:b6:21:a6:39:7d:58:cd:8e:3e:46:f2:d8:3b:51:
                    d3:7e:12:f7:35:d8:22:48:02:c8:58:d6:8f:9c:12:
                    bd:5c:51:cb:56:17:87:0c:9e:ba:14:d6:ec:c7:6e:
                    0e:12:be:74:ca:e8:4e:e9:8b:aa:de:b7:c8:30:1d:
                    9b:54:40:0c:39:f7:18:2f:70:10:be:87:66:55:ea:
                    a6:e2:1d:e8:58:2d:d4:c9:b9:7f:06:ac:b3:77:44:
                    bb:1d:87:07:8a:85:52:4b:8e:1e:e5:42:f0:0f:28:
                    37:dd:32:b9:5e:66:65:51:5c:60:99:7d:07:cc:db:
                    9d:03:a1:b5:49:fc:78:33:84:52:c6:5a:84:8b:62:
                    ab:12:93:e1:f8:fe:dc:b7:06:d2:39:f1:1c:b1:31:
                    48:0f:20:ab:42:79:7a:e6:a0:ff:97:be:2e:08:6f:
                    e4:43:eb:c7:d8:01:ec:93:c4:56:9b:a7:95:fe:32:
                    a6:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:34:D5:7F:00:0A:74:D4:3B:7E:88:9A:12:19:8C:87:E6:5D:00:CD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a20a021a-597a-43c8-970c-17e56460a244/2d287d9bace0aaa89c8a18b31d258122387e847f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6090::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272137

    Signature Algorithm: sha256WithRSAEncryption
         1f:a4:f2:38:a1:68:51:42:03:ce:9e:c2:05:0a:8c:00:f7:b3:
         ee:ff:96:96:bc:37:cf:36:e2:53:57:cb:9c:89:11:71:3b:07:
         2e:29:a7:03:c2:c9:f0:ad:d0:ea:c1:04:f8:cc:68:34:37:ed:
         0d:eb:8a:f7:cc:f5:ec:2b:40:1b:36:7b:6c:89:1a:16:27:a4:
         16:15:54:98:e8:f4:24:81:ea:3d:3b:ef:93:57:d6:57:be:43:
         7b:e2:3a:b4:1f:4e:e0:8d:b8:72:7e:9d:4e:20:71:0b:1e:ab:
         42:e3:d4:98:40:52:c3:be:ca:f0:ad:d4:ec:7d:c0:cd:79:22:
         4b:2e:fd:5d:eb:0c:ee:a1:83:94:93:c5:74:ba:ea:db:65:7b:
         bc:76:e5:3a:d8:01:c0:03:0c:ab:54:46:8d:9c:1a:15:4f:5a:
         c6:d6:3a:03:18:4a:72:3d:9c:51:99:c7:c7:b9:5e:5c:96:51:
         07:14:3c:9a:90:1e:ec:f1:e3:f2:6b:18:bc:85:df:9d:68:b3:
         35:b1:2d:5e:8b:9c:3e:70:16:38:54:4f:70:a0:d0:f9:d8:68:
         ba:0c:13:e6:b5:9f:6a:ff:a3:f9:2f:2f:69:f2:10:a5:4b:01:
         13:5c:bb:fd:a1:dd:56:b2:00:9d:f8:f9:57:5e:01:3e:67:fa:
         ac:51:d0:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----