Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4204d893c3550c50fee069f90b79027763dd3d57.cer
File:                     4204d893c3550c50fee069f90b79027763dd3d57.cer (raw, json)
Hash identifier:          0+2BmUk5YfHhweO7YNuZ+FXsW21iYTUumqTMWXUyfgw=
Subject key identifier:   66:A5:04:19:17:63:74:77:D9:73:8D:76:90:82:E4:13:35:FF:D7:DF
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6FFAE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/face951b-13d2-4e49-a89f-9452eb5ff247/4204d893c3550c50fee069f90b79027763dd3d57.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/face951b-13d2-4e49-a89f-9452eb5ff247/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 15:23:23 +0000
Certificate not after:    Sat 23 Nov 2024 14:55:01 +0000
Subordinate resources:    AS: 272939
                          IP: 2803:b190::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15138734 (0xe6ffae)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 15:23:23 2023 GMT
            Not After : Nov 23 14:55:01 2024 GMT
        Subject: CN=4204d893c3550c50fee069f90b79027763dd3d57
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:1f:57:10:fa:25:03:33:16:33:2a:d6:6b:3d:
                    42:63:99:0f:8d:3a:7c:9d:ad:97:65:5c:30:32:de:
                    4b:ef:a7:fb:8d:1d:a3:da:67:40:c8:74:42:f3:85:
                    e0:e4:2e:8d:90:00:cd:dc:c2:ee:63:b2:88:0c:99:
                    54:69:59:8f:a0:e7:3d:83:29:aa:fa:cf:00:0a:5f:
                    d6:5a:c1:89:c5:75:9c:59:4c:20:53:14:e0:ee:0e:
                    af:46:14:73:59:c9:a9:13:90:dc:4f:cd:7f:53:bc:
                    48:f4:27:7c:48:21:ff:82:a4:b0:fe:63:06:9a:d9:
                    95:a4:f4:7f:ac:97:3a:9b:12:3b:1f:05:97:2d:41:
                    91:45:0a:21:9a:6d:a9:4a:88:38:3c:27:d9:87:10:
                    2d:c1:32:d5:46:30:52:43:b8:58:ba:c5:ea:2a:b6:
                    f1:8d:54:1e:4b:9f:0f:42:65:66:2e:30:58:4b:07:
                    b5:0b:29:a8:9c:79:c0:32:40:90:e3:c1:d3:a3:17:
                    99:04:2b:55:bf:be:86:89:ba:56:66:75:c6:7c:d6:
                    3b:1e:45:ff:c3:5a:56:5e:3b:c5:84:84:64:95:19:
                    89:54:9d:9a:bf:1f:2a:c7:9b:bf:9e:66:d4:cb:cb:
                    d9:a4:42:78:97:fb:5d:ca:e3:a1:1c:29:b1:48:db:
                    a5:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                66:A5:04:19:17:63:74:77:D9:73:8D:76:90:82:E4:13:35:FF:D7:DF
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/face951b-13d2-4e49-a89f-9452eb5ff247/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/face951b-13d2-4e49-a89f-9452eb5ff247/4204d893c3550c50fee069f90b79027763dd3d57.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:b190::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272939

    Signature Algorithm: sha256WithRSAEncryption
         c1:2f:b8:44:43:94:17:d3:8c:a5:64:ed:ea:83:c5:25:2a:fe:
         fb:c9:e3:32:89:83:41:2a:6a:a8:c3:91:0e:a3:c3:41:cb:c3:
         15:68:c5:12:ff:29:77:f0:80:c9:df:bd:3a:88:05:d5:29:af:
         bc:1d:b5:d3:d2:d8:e0:02:f3:54:13:a8:fe:5e:29:e7:0f:20:
         c1:60:d0:b0:58:d4:4b:5a:3a:6b:8b:45:d5:cc:d5:b7:fc:36:
         55:61:ba:25:4c:23:6a:ec:75:8d:f3:f6:8a:a6:b7:32:10:5d:
         d5:4e:2c:4d:00:63:34:0d:c9:06:d5:20:5a:81:e5:de:fa:9f:
         ec:3a:99:e5:44:a0:36:ba:d7:50:81:00:ed:5a:23:b4:cc:c2:
         c8:0a:e6:62:09:f2:44:83:91:29:44:2e:6f:47:72:f0:a2:c4:
         3e:97:57:d6:f7:4b:91:38:f9:6a:fb:6e:a1:bb:4d:e4:a5:32:
         31:9f:9f:10:c7:a4:4d:d9:23:97:83:43:40:fa:37:d9:8d:55:
         e7:b6:45:ed:67:fd:99:c3:b5:61:43:d2:77:e2:e7:eb:c2:65:
         41:96:65:a0:38:9e:7b:dd:1c:7c:a8:1a:e2:09:0f:e4:da:4d:
         17:e2:c5:10:06:e9:a1:38:6f:07:88:c8:71:9f:35:27:4c:f7:
         e3:93:6a:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----