Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3308a5b26910f70bfa1e6a7d373a8a9a01883b86.cer
File:                     3308a5b26910f70bfa1e6a7d373a8a9a01883b86.cer (raw, json)
Hash identifier:          IXl4NUvQKtqjiVn47vrlcXRq4V0CPpP/SQCFlE6l0t8=
Subject key identifier:   5F:E6:39:DF:AA:0B:ED:E4:61:94:5C:BD:AA:44:F1:24:C2:C7:14:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01008DB6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a2d47fb8-d89f-44f8-921a-f28bfbf7cb13/3308a5b26910f70bfa1e6a7d373a8a9a01883b86.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a2d47fb8-d89f-44f8-921a-f28bfbf7cb13/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:06:26 +0000
Certificate not after:    Wed 23 Apr 2025 14:14:21 +0000
Subordinate resources:    AS: 61789
                          IP: 131.161.96.0/22
                          IP: 138.0.220.0/22
                          IP: 143.137.104.0/22
                          IP: 200.229.112.0/24
                          IP: 2801:80:b00::/48
                          IP: 2804:2188::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16813494 (0x1008db6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:06:26 2023 GMT
            Not After : Apr 23 14:14:21 2025 GMT
        Subject: CN=3308a5b26910f70bfa1e6a7d373a8a9a01883b86
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:d4:fa:be:9a:4d:90:11:d4:4d:85:29:56:8f:
                    ea:02:dc:7c:ba:df:71:e7:4d:54:f0:18:51:50:e5:
                    0c:46:73:cc:d6:33:f1:83:7f:f1:85:f0:ea:c6:a7:
                    db:37:f5:b6:72:48:9f:4f:93:99:00:41:64:e4:59:
                    12:73:2d:4a:6f:79:cb:ef:07:7e:04:59:2b:e4:a0:
                    9c:1f:94:89:fb:62:59:b9:bd:8f:4e:60:e8:c9:54:
                    a0:13:bb:a3:e4:c0:f1:1b:69:d3:3a:bb:cb:d3:f4:
                    8f:3a:9f:8b:a0:c5:cf:91:39:07:7e:58:d3:93:cf:
                    fa:93:36:05:a5:7e:e2:01:86:53:b7:dd:33:c3:e5:
                    4c:52:0b:8d:99:73:41:6b:b3:b7:40:d5:41:b6:75:
                    73:02:7f:c4:88:11:e6:87:c6:c5:ef:32:36:0e:ec:
                    cb:fc:30:65:2e:d1:79:81:54:89:f4:31:ca:8f:72:
                    a3:4f:36:a3:01:7f:0d:0f:22:f4:1f:3b:b1:f6:36:
                    e5:9d:eb:a8:2b:94:48:4c:f1:de:87:ec:69:4f:fa:
                    77:9e:fc:d6:eb:63:ef:c6:40:bf:85:e7:97:e2:af:
                    40:d8:a7:5a:aa:8d:0a:dd:17:50:f6:b8:4e:33:5c:
                    e4:60:21:6b:2b:0b:1f:6a:e5:61:98:0b:0f:dc:5a:
                    0a:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:E6:39:DF:AA:0B:ED:E4:61:94:5C:BD:AA:44:F1:24:C2:C7:14:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d47fb8-d89f-44f8-921a-f28bfbf7cb13/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a2d47fb8-d89f-44f8-921a-f28bfbf7cb13/3308a5b26910f70bfa1e6a7d373a8a9a01883b86.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.96.0/22
                  138.0.220.0/22
                  143.137.104.0/22
                  200.229.112.0/24
                IPv6:
                  2801:80:b00::/48
                  2804:2188::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61789

    Signature Algorithm: sha256WithRSAEncryption
         5a:b0:f7:db:36:36:b2:52:47:19:e7:49:c7:b1:e5:96:1e:90:
         4f:75:48:4a:30:5d:eb:be:24:d8:c8:31:b9:b0:4b:6e:95:c5:
         44:ed:e7:81:13:f2:50:6b:3d:cc:db:8b:0c:fb:a8:27:b5:b2:
         74:94:64:73:09:9c:35:38:c5:6e:fc:5d:97:69:81:38:95:0a:
         e0:6e:33:13:77:ef:28:aa:98:4c:a0:d5:ea:16:33:67:5b:1e:
         f9:b8:7a:f0:27:9d:ae:a0:8a:ca:7f:37:d0:fa:b2:88:17:3b:
         2d:1d:ad:4e:1b:0b:28:54:37:db:19:ef:ea:c0:03:cb:92:ed:
         04:bd:ca:1c:fe:3c:85:59:a2:cc:15:5c:e5:95:9b:d6:40:55:
         79:9f:ae:ab:fc:ed:7b:a5:25:d6:60:66:10:6a:bc:90:a1:7a:
         6b:1e:6b:7d:e9:32:0e:80:a6:75:51:c0:81:a1:84:96:a7:82:
         83:e8:37:ad:61:c8:59:23:12:c4:16:62:9c:3a:b1:e8:33:a5:
         2a:45:3b:a8:68:ca:40:14:fb:e9:91:fb:82:5a:4e:d9:b3:dc:
         33:a9:51:52:96:42:fc:16:05:ed:f4:99:f1:dc:00:55:dd:ef:
         c1:5f:44:39:95:16:da:33:2b:8b:1c:f1:f7:33:5f:81:98:b5:
         c8:6c:82:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----