Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3dac863f68a616cbdb18febc1698a1c6c3e9e747.cer
File:                     3dac863f68a616cbdb18febc1698a1c6c3e9e747.cer (raw, json)
Hash identifier:          S5HffkU/45ytrj+pKuIgDsmb9F2kQuExfBnQM/pPGqk=
Subject key identifier:   D1:A3:83:11:D9:8C:B7:C3:15:87:26:DC:0B:03:99:63:66:45:39:AF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF6E48
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4361ccb4-3378-4e0b-99d9-fb57f6da81cb/3dac863f68a616cbdb18febc1698a1c6c3e9e747.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4361ccb4-3378-4e0b-99d9-fb57f6da81cb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:22:11 +0000
Certificate not after:    Thu 28 Nov 2024 13:36:27 +0000
Subordinate resources:    AS: 61689
                          IP: 131.108.124.0/22
                          IP: 177.84.236.0/22
                          IP: 200.34.216.0/22
                          IP: 2804:1d04::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16739912 (0xff6e48)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:22:11 2023 GMT
            Not After : Nov 28 13:36:27 2024 GMT
        Subject: CN=3dac863f68a616cbdb18febc1698a1c6c3e9e747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:a4:f4:7e:24:a7:4e:e0:e0:34:99:4f:40:80:
                    9a:67:d3:23:12:99:a4:66:46:ed:51:7f:e7:98:e8:
                    b7:6f:0d:2c:af:b7:e7:8e:23:53:ed:1e:6e:66:64:
                    9b:62:c4:8e:31:12:bf:88:d3:ae:2a:66:ac:b1:ff:
                    d8:14:d9:5f:35:f3:b8:82:b1:07:02:0c:da:57:24:
                    1a:ca:3f:f0:a4:17:06:ad:e9:0a:a4:c2:88:17:8a:
                    08:3f:65:f6:a9:4a:31:04:ae:3e:55:f5:cd:fe:44:
                    d2:21:76:79:7d:bc:38:a7:39:86:1f:ec:52:86:52:
                    bb:93:04:01:0a:be:39:66:5a:26:2a:05:50:8a:62:
                    89:b4:b7:10:04:a4:99:6a:20:c4:eb:0e:59:ff:26:
                    63:22:20:32:d2:ad:47:45:59:78:62:04:15:8e:ad:
                    a7:ca:3d:30:65:b6:d1:1c:a4:20:a4:b0:73:08:07:
                    0e:3d:93:ef:6e:7c:5e:6d:be:37:74:7b:d6:41:35:
                    57:8c:ea:6a:b1:a7:3c:1a:10:2b:aa:36:e1:e4:86:
                    3b:03:66:63:ca:5d:9c:78:00:69:5b:08:b4:56:46:
                    09:04:cc:ff:f8:ae:ee:4e:0c:89:6a:3c:19:c9:3c:
                    dd:dc:75:20:a0:ed:06:92:96:75:93:6c:27:ef:d2:
                    38:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D1:A3:83:11:D9:8C:B7:C3:15:87:26:DC:0B:03:99:63:66:45:39:AF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4361ccb4-3378-4e0b-99d9-fb57f6da81cb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4361ccb4-3378-4e0b-99d9-fb57f6da81cb/3dac863f68a616cbdb18febc1698a1c6c3e9e747.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.108.124.0/22
                  177.84.236.0/22
                  200.34.216.0/22
                IPv6:
                  2804:1d04::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61689

    Signature Algorithm: sha256WithRSAEncryption
         bd:6e:6f:1d:cc:a3:3a:d7:90:cc:85:53:b1:23:a1:e5:7e:15:
         34:72:aa:04:e4:a2:87:59:66:2c:35:e9:5e:86:32:0c:61:f9:
         b9:e0:ee:dc:b6:03:fd:d1:da:03:49:36:cd:ea:90:8f:9c:0d:
         d6:bd:93:15:9f:95:73:bf:26:63:63:54:6d:be:31:0c:e0:da:
         cb:a6:1f:d2:87:6f:41:f5:33:2e:1c:ab:6d:e3:8d:b0:91:c1:
         49:2f:fe:c7:4c:1b:05:f2:a9:e5:3d:8e:d2:ef:32:2a:af:b5:
         ae:c0:1d:65:19:f1:9b:ab:07:73:60:ea:fc:48:75:c2:fe:d2:
         37:00:dc:da:38:3a:1c:1a:e3:c2:51:ba:62:6e:c9:1e:76:dc:
         be:5d:98:87:f9:7c:4c:3f:84:d1:28:bc:fc:8b:2e:92:f2:3d:
         09:d9:31:74:95:1a:79:8a:18:98:0d:ff:2e:35:db:15:df:90:
         fc:79:b8:94:3e:75:c6:27:bc:ae:9f:39:24:5d:72:a9:50:03:
         7f:4c:dd:1c:1b:62:40:d8:48:ec:6b:ab:fc:85:e4:7f:ff:2c:
         2b:a7:a1:5f:68:66:84:c3:d4:cc:f2:c2:b3:10:bf:8f:91:49:
         8e:21:14:d6:8a:22:d1:b9:ab:d6:b1:29:ff:0b:70:b9:5b:d5:
         66:58:68:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----