Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7.cer
File:                     4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7.cer (raw, json)
Hash identifier:          Nd0Hg52sLDcc5jQQDdLomlmCyXimTDmKiR6XMDczTC8=
Subject key identifier:   C5:84:0F:7E:86:D5:0A:85:21:4B:2B:D0:AB:A8:4A:C6:91:F2:49:C3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F557F6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/32f41cc6-03b6-41b0-aa7b-089b633eeaee/4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/32f41cc6-03b6-41b0-aa7b-089b633eeaee/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 17:13:50 +0000
Certificate not after:    Sun 04 May 2025 19:36:02 +0000
Subordinate resources:    AS: 273032
                          IP: 2803:2790::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16078838 (0xf557f6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 13 17:13:50 2023 GMT
            Not After : May  4 19:36:02 2025 GMT
        Subject: CN=4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:a3:57:2b:e4:63:66:4e:e5:36:99:31:68:0d:
                    c9:b9:a1:69:80:00:28:4b:8b:9e:bb:9d:76:cb:d9:
                    cc:a4:92:ba:d2:4f:d7:05:61:23:86:95:bc:85:75:
                    88:bc:1c:8e:c3:01:a1:e0:a7:82:d4:64:f0:74:e7:
                    2e:d2:33:29:b2:35:c8:18:c5:92:81:53:7e:3f:f0:
                    42:84:ac:66:d4:55:35:8e:dd:c6:77:d3:ec:2c:a4:
                    65:b3:7f:f6:8b:53:7b:63:15:43:3c:7a:2e:5b:86:
                    cf:b3:16:89:8c:8c:12:36:45:1d:37:e6:60:5d:39:
                    0c:6f:b1:48:a3:51:9d:eb:5a:15:de:a8:d4:14:b0:
                    d2:d4:59:20:ed:58:a5:8f:92:63:a7:90:c9:41:be:
                    8a:a1:d6:d2:fa:9e:2f:5a:8f:a2:f3:f0:65:ae:a8:
                    15:c9:e7:ee:f0:61:c0:b7:96:ee:c8:37:22:5b:d0:
                    99:e0:a3:a6:b3:c3:04:c3:41:e3:03:5e:cf:e7:e3:
                    31:1d:04:30:01:14:df:66:a6:b6:df:73:05:cc:f2:
                    1a:44:0b:0e:dd:5a:b6:24:0f:86:30:99:8a:9b:bb:
                    34:03:0f:56:8e:a7:59:03:31:46:27:ac:ce:b1:f5:
                    ef:fc:93:12:a0:f0:46:cc:2f:02:5f:f8:bc:b1:c7:
                    8c:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:84:0F:7E:86:D5:0A:85:21:4B:2B:D0:AB:A8:4A:C6:91:F2:49:C3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/32f41cc6-03b6-41b0-aa7b-089b633eeaee/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/32f41cc6-03b6-41b0-aa7b-089b633eeaee/4bb26e7a02e6fa25f2e8d9c85d5fe608025833c7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:2790::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273032

    Signature Algorithm: sha256WithRSAEncryption
         53:cd:f9:e1:e8:44:70:11:12:a5:93:72:9e:71:a8:be:55:c4:
         f3:f4:45:46:d6:b6:c9:50:df:8e:2d:25:47:56:5c:ba:7e:5a:
         ca:bf:2c:6d:fa:c4:cd:eb:aa:4b:b6:06:1a:82:5c:09:50:ec:
         ca:a6:72:5a:b0:36:50:fb:7e:ea:b7:51:18:ec:0e:cb:c5:73:
         1d:e5:cb:49:cd:8e:47:2b:53:56:f5:dc:55:09:95:08:ed:91:
         4b:83:a4:2d:79:0c:37:b0:27:b0:cb:a4:05:ae:84:47:97:7f:
         b5:28:71:24:81:4a:e1:90:30:f8:73:58:f9:41:51:3e:eb:c3:
         85:5d:a3:8f:d9:fe:fa:85:c6:83:81:9d:77:5e:d7:d7:8b:ac:
         4b:1f:41:b7:e1:be:3a:84:54:26:39:78:48:97:3b:f7:dc:65:
         18:f8:45:33:c2:12:71:1c:40:10:6d:1a:b5:fd:ac:e9:ed:cc:
         a9:ea:f6:6c:d5:17:a1:46:9b:db:94:c6:e2:6f:7d:7c:4e:a5:
         62:c9:88:4d:c8:33:8b:8b:f9:9b:fa:c4:26:24:0c:b7:40:ba:
         a8:d1:27:e0:ff:d9:63:6a:41:dc:fa:56:4b:0d:39:8c:1b:b1:
         0a:ff:e3:e3:eb:81:45:87:09:75:69:eb:22:49:90:a9:13:f7:
         22:a3:97:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----