Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4133015f8fb4d07739d73fccc154d01ff4ec15a1.cer
File:                     4133015f8fb4d07739d73fccc154d01ff4ec15a1.cer (raw, json)
Hash identifier:          +LOU/k7jT3KJjCd/zRy+hZqzF0qZG4OeVl2NNT5w1IM=
Subject key identifier:   6F:20:A4:B5:40:63:76:6A:E5:3E:3A:18:AB:5E:02:16:B7:B6:0E:CC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E76E49
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/10d6e628-c7ec-42e1-9505-5265e78cec09/4133015f8fb4d07739d73fccc154d01ff4ec15a1.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/10d6e628-c7ec-42e1-9505-5265e78cec09/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 26 Apr 2023 21:43:18 +0000
Certificate not after:    Sun 08 Sep 2024 23:42:01 +0000
Subordinate resources:    AS: 272010
                          IP: 2803:5910::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15167049 (0xe76e49)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 26 21:43:18 2023 GMT
            Not After : Sep  8 23:42:01 2024 GMT
        Subject: CN=4133015f8fb4d07739d73fccc154d01ff4ec15a1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:bb:10:e4:b8:dc:5d:ee:b1:16:c3:08:e2:2c:
                    84:c5:23:c1:f2:d8:54:b5:6e:7c:2d:04:88:60:b9:
                    ff:82:dc:16:38:2b:bd:8b:fa:69:0b:0d:9a:57:9c:
                    26:b8:86:8b:76:d1:2f:91:47:bc:49:07:42:bc:86:
                    c5:6e:bc:88:f2:02:94:fa:34:54:be:d1:1a:dd:ae:
                    1f:91:e7:e9:07:7b:dc:0c:ea:46:6d:02:7f:89:31:
                    a9:75:b5:04:ff:77:02:74:52:2e:9e:63:f6:4f:92:
                    35:7c:43:fe:51:c9:44:ca:63:30:ed:e1:a9:78:b3:
                    ff:c4:6a:06:73:63:b4:ff:ad:27:a7:2d:91:7d:90:
                    9d:ac:2e:df:00:7d:0e:aa:31:8f:b1:6c:69:30:25:
                    ef:7d:9c:c2:fc:ff:03:18:27:e0:2a:43:05:74:bc:
                    ee:e0:2b:21:18:49:04:d2:6b:ed:40:02:6a:e4:70:
                    2a:34:39:76:42:74:86:3e:e0:cf:82:db:f6:d6:50:
                    46:8e:cf:2e:4b:46:b1:68:53:ba:64:b6:46:d5:e7:
                    90:df:4d:56:08:bf:a9:1c:2b:b1:9c:2b:aa:00:8f:
                    bb:a0:d5:ab:f9:ab:7c:8c:2e:a9:51:b2:1e:52:3c:
                    0c:35:d0:ee:4e:ff:59:99:af:ce:cf:47:e0:fe:88:
                    ff:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:20:A4:B5:40:63:76:6A:E5:3E:3A:18:AB:5E:02:16:B7:B6:0E:CC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/10d6e628-c7ec-42e1-9505-5265e78cec09/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/10d6e628-c7ec-42e1-9505-5265e78cec09/4133015f8fb4d07739d73fccc154d01ff4ec15a1.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5910::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272010

    Signature Algorithm: sha256WithRSAEncryption
         1d:1b:82:bb:b2:53:2d:6c:f7:02:f6:f3:8c:06:12:f0:55:c4:
         87:74:2f:77:f7:d8:93:39:8c:19:30:69:02:f5:ff:35:1b:99:
         8e:14:05:fe:55:cb:86:3e:c9:0b:d5:fa:04:eb:96:3b:39:82:
         08:36:53:8f:3f:f0:0c:fd:c8:02:0a:04:60:8c:44:e4:bf:4c:
         54:00:1a:59:e7:8c:26:e9:73:2d:dd:1b:9e:35:d1:88:48:6e:
         48:f9:c4:4c:bb:0b:cf:b6:b2:41:e7:7d:69:61:f8:49:77:03:
         4a:86:5f:0e:1b:69:3f:30:11:5d:10:45:00:ff:82:6b:3b:1a:
         ec:8b:d4:51:e3:85:16:0b:fb:b9:a0:38:9d:ee:4f:2a:b9:43:
         c8:24:14:fb:00:86:65:3a:3c:e9:f4:6d:76:99:f3:86:45:c0:
         c0:62:a8:00:5c:8b:bf:3e:f7:90:6e:35:f0:4a:9e:ec:14:9d:
         16:3e:68:68:f5:5f:f2:8f:0d:11:ae:b5:9a:d7:73:c2:7f:20:
         12:e2:7f:7f:78:4b:00:04:0c:00:f4:0f:9e:b6:50:9f:5f:0e:
         df:ca:46:1d:ba:0c:cf:1b:1d:7d:f3:5d:74:48:8c:2e:c3:15:
         49:87:9d:71:b2:d8:21:e9:9b:9b:c1:dc:f5:bb:fa:c2:62:e3:
         c2:37:3c:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----