Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3a8082753aad1d2a9d0a0ff8dfd18c2b82834990.cer
File:                     3a8082753aad1d2a9d0a0ff8dfd18c2b82834990.cer (raw, json)
Hash identifier:          8fA0KeGl4y8+lpLg21sBrQez5y6F2DEE8ctAzG8MTvo=
Subject key identifier:   30:30:D3:CC:CE:CC:95:94:FB:97:3B:23:D0:F5:E3:4A:2E:7C:6D:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010CF5C7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2c0d307c-586a-44dd-bec8-001d6c722448/3a8082753aad1d2a9d0a0ff8dfd18c2b82834990.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2c0d307c-586a-44dd-bec8-001d6c722448/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 06 Mar 2024 16:11:14 +0000
Certificate not after:    Mon 17 Nov 2025 04:00:00 +0000
Subordinate resources:    AS: 52427
                          IP: 138.121.76.0/22
                          IP: 200.124.123.0/24
                          IP: 2801:0:260::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17626567 (0x10cf5c7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  6 16:11:14 2024 GMT
            Not After : Nov 17 04:00:00 2025 GMT
        Subject: CN=3a8082753aad1d2a9d0a0ff8dfd18c2b82834990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:65:d6:df:03:bc:40:83:d8:27:d1:0a:3f:3a:
                    b1:ca:72:c1:45:7b:14:60:ba:8e:39:d8:18:b8:dc:
                    3c:3f:65:27:a5:42:46:cd:7c:fe:bd:fa:a5:5a:ca:
                    fa:f5:8a:92:ee:18:45:5f:57:08:88:02:06:b6:ed:
                    35:bd:b2:c0:6f:05:0f:48:56:29:6e:f1:cf:b3:cf:
                    2f:63:74:aa:f8:d3:6a:74:46:43:cf:77:18:bd:8a:
                    67:57:ef:41:41:c3:96:24:a0:1d:c1:f4:4c:5d:73:
                    61:87:ec:0e:a7:11:ea:2d:bd:e2:c2:33:c9:6d:e7:
                    c0:4b:2e:f3:7e:8a:5e:bd:45:7d:a1:cc:54:b3:8d:
                    10:31:3c:d1:e5:6f:8e:a8:2a:71:b9:ab:f6:d8:90:
                    f0:98:8a:52:ae:68:99:8e:93:87:02:e8:a4:58:cd:
                    96:cf:c7:c3:40:5b:a9:ac:e1:7a:d0:34:dd:e1:0f:
                    27:4d:c4:b7:e5:fd:d5:7d:1c:d1:70:59:e6:d2:46:
                    cc:ef:bd:bc:22:fe:f6:9f:9c:af:5b:1f:b0:f5:e4:
                    78:26:77:89:1a:32:49:e3:87:e5:1a:84:ae:67:c8:
                    09:4c:72:ca:ce:38:8d:73:17:15:82:a0:1b:ff:bd:
                    be:08:4f:3b:57:9b:6b:75:9a:65:6f:14:e0:74:b2:
                    f4:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                30:30:D3:CC:CE:CC:95:94:FB:97:3B:23:D0:F5:E3:4A:2E:7C:6D:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2c0d307c-586a-44dd-bec8-001d6c722448/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2c0d307c-586a-44dd-bec8-001d6c722448/3a8082753aad1d2a9d0a0ff8dfd18c2b82834990.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.121.76.0/22
                  200.124.123.0/24
                IPv6:
                  2801:0:260::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52427

    Signature Algorithm: sha256WithRSAEncryption
         18:20:fb:9d:f8:91:06:f9:85:04:11:45:81:d7:f5:e5:d7:4c:
         26:f8:8d:5e:8f:98:a8:8a:e6:3d:80:a5:42:f7:06:79:69:d7:
         df:4f:c7:28:05:18:da:00:78:d8:d5:bc:d4:09:2a:db:ab:a9:
         d7:53:ab:4f:34:fa:44:91:48:c9:0a:3e:28:24:3e:cb:bb:5b:
         00:77:d8:d1:76:cd:ee:51:bd:73:96:5f:8b:58:1d:66:c8:dc:
         94:61:a2:b8:f7:c9:24:b7:3b:25:f7:56:af:81:50:a0:c0:93:
         2d:70:e7:75:73:19:e6:90:da:bf:50:91:b1:59:af:13:54:ba:
         be:4a:04:0a:9c:04:dc:dc:bd:d4:0a:a3:09:8f:d5:12:6e:31:
         c5:e6:d8:15:1f:b4:1b:22:ea:b3:c0:35:2b:6a:af:ab:3e:c1:
         f6:8a:f3:28:4a:23:e9:74:6d:ba:07:0c:eb:c1:e8:b3:b9:d9:
         a6:35:0a:45:f1:0e:15:e6:48:e9:bc:f4:b5:1a:c6:10:d6:78:
         40:c0:55:c7:e4:31:05:57:11:f9:99:93:43:fa:f7:ad:21:b9:
         d5:77:fc:27:ae:14:1d:54:4e:48:68:4a:89:b9:5d:9a:b8:b9:
         c1:4e:6a:e9:37:c1:50:dc:1b:b4:62:00:24:6b:b1:39:61:a6:
         5e:73:56:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----