Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a4ce04f782d878c1cf22e114a477353236e07a8.cer
File:                     3a4ce04f782d878c1cf22e114a477353236e07a8.cer (raw, json)
Hash identifier:          C0edKiBmnoXUDfy/gNQ2mJW99M24DHdEzTclpfmAtYs=
Subject key identifier:   8C:63:B5:54:1D:83:53:A8:3C:0A:A1:34:B2:2D:0C:2F:DE:B8:56:3E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106533F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e46c901b-4194-43ba-9bc0-8643632767a8/3a4ce04f782d878c1cf22e114a477353236e07a8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e46c901b-4194-43ba-9bc0-8643632767a8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 18:06:33 +0000
Certificate not after:    Wed 01 Oct 2025 11:52:27 +0000
Subordinate resources:    AS: 262650
                          IP: 2804:c54::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17191743 (0x106533f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 18:06:33 2023 GMT
            Not After : Oct  1 11:52:27 2025 GMT
        Subject: CN=3a4ce04f782d878c1cf22e114a477353236e07a8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e9:74:5f:67:98:ca:ba:74:59:13:f1:8b:d3:
                    88:40:8e:ef:b3:00:c2:c4:2e:96:0d:2e:2c:fe:dc:
                    cb:26:56:03:aa:57:ea:1b:39:8c:92:6c:ef:bf:be:
                    64:54:20:17:f8:9a:29:62:6c:99:ba:b7:18:6c:0e:
                    07:6e:27:dc:3a:2c:77:8a:63:99:84:ae:da:b8:38:
                    db:be:86:c3:12:5b:53:f6:04:d0:a3:a0:fc:3b:18:
                    06:b1:72:f2:5b:df:9e:b9:a3:99:54:aa:be:ce:bf:
                    7c:e9:ae:29:13:c7:56:5d:67:50:71:7c:67:90:64:
                    27:6f:fb:d3:6a:f7:4e:b8:55:35:b0:ea:5a:1f:7a:
                    e9:fd:cf:20:2b:d6:cd:40:b1:a8:77:c7:f5:1d:d3:
                    3c:a1:03:8b:f2:84:8e:ba:b5:d7:e5:75:b3:22:a7:
                    96:90:c8:94:74:7b:9a:ed:22:41:d3:83:f8:f1:c4:
                    b4:19:dc:49:43:57:b8:c8:a8:5a:7f:23:a4:c5:59:
                    c9:7f:df:7b:cf:b8:92:f0:99:3f:02:8d:6a:b8:52:
                    db:47:cc:0c:74:e0:98:4b:f2:fe:59:eb:52:54:1e:
                    ef:d4:0f:82:58:a7:1b:25:ba:07:ba:6a:93:e0:e6:
                    27:fd:83:d6:04:93:ba:9e:58:f1:c7:ff:7c:36:1c:
                    dc:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:63:B5:54:1D:83:53:A8:3C:0A:A1:34:B2:2D:0C:2F:DE:B8:56:3E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e46c901b-4194-43ba-9bc0-8643632767a8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e46c901b-4194-43ba-9bc0-8643632767a8/3a4ce04f782d878c1cf22e114a477353236e07a8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c54::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262650

    Signature Algorithm: sha256WithRSAEncryption
         39:2c:94:0f:60:f3:be:2d:02:23:c8:4c:ee:4e:e8:1e:f9:98:
         d2:2e:4e:3a:b9:7f:8c:f8:c1:12:2e:ef:50:c6:87:98:c2:52:
         d6:f8:ea:a6:ac:ce:fc:01:be:0c:cf:e1:27:23:10:e4:2b:85:
         24:9b:a8:ec:4d:df:ae:80:2c:4c:1f:a6:95:0d:9a:0b:65:ea:
         b3:5a:dc:51:e6:9c:55:48:46:53:72:9c:9f:4d:94:de:85:fa:
         c0:42:ec:01:51:9a:13:4d:cf:4e:66:cf:51:af:12:6d:73:14:
         85:cf:da:d4:67:02:44:2e:71:4b:12:9d:64:57:d5:e5:f7:06:
         f9:c9:80:8f:e4:f6:ba:06:f2:19:56:d6:0f:1d:48:f4:ed:71:
         bd:ca:4d:4a:fd:88:41:21:62:ca:87:1f:72:4d:01:39:45:c9:
         cb:56:aa:44:96:2d:f1:62:f0:78:8e:64:c5:90:d3:ba:5e:5c:
         9c:3c:b8:b7:97:18:d2:5b:3e:b1:07:d6:e8:9b:52:b2:ba:b6:
         be:8f:4f:64:40:2d:20:fa:97:63:7b:80:f7:a0:5f:82:e1:22:
         2a:7b:db:78:9c:a9:85:26:7e:25:60:3b:e5:dc:d5:a2:09:85:
         75:b1:2f:ed:39:3e:0f:93:48:64:eb:aa:52:dd:b5:5a:42:94:
         7f:a7:f3:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----