Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/509d9391b5757633313f524285b515e2caaf37d5.cer
File:                     509d9391b5757633313f524285b515e2caaf37d5.cer (raw, json)
Hash identifier:          TkoPglbWGYOcx+ChZZoBBV7pp9xhf5Q+Z2urV2rrETE=
Subject key identifier:   90:60:4B:C7:DC:F1:E9:28:1A:5C:6F:9A:9B:A7:A3:46:E2:20:D4:E2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D2D7F4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/041b0382-626d-4fb2-a29c-95afe571cf3e/509d9391b5757633313f524285b515e2caaf37d5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/041b0382-626d-4fb2-a29c-95afe571cf3e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 23 Sep 2022 22:04:32 +0000
Certificate not after:    Sun 21 Jul 2024 22:46:15 +0000
Subordinate resources:    AS: 272876
                          IP: 2803:ca90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13817844 (0xd2d7f4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 23 22:04:32 2022 GMT
            Not After : Jul 21 22:46:15 2024 GMT
        Subject: CN=509d9391b5757633313f524285b515e2caaf37d5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:77:ce:27:87:0b:7c:19:8c:5f:16:a9:e6:81:
                    d0:d3:e4:9f:76:7a:e0:b1:aa:d5:32:fb:18:d1:55:
                    6a:20:74:cf:b2:a3:52:6f:3d:46:bc:dd:17:a0:20:
                    a8:2c:9d:23:6e:d7:3b:bd:cb:7b:f9:d3:86:3c:b7:
                    a3:fd:39:5a:0c:5a:37:db:6d:41:c2:8e:d6:88:8c:
                    52:af:c4:09:5d:c4:4e:93:d0:b4:59:21:b7:bd:b7:
                    60:05:1d:79:51:34:03:61:3e:97:f7:e0:7b:9f:71:
                    88:1e:1f:cd:77:28:84:b6:08:79:2d:3f:6b:05:55:
                    70:98:5e:b0:50:55:f4:a2:21:77:0a:2c:56:75:01:
                    73:74:ec:25:73:86:8d:ab:dc:15:a9:d8:61:8b:91:
                    0e:a1:ac:30:72:ed:b9:6e:f3:e2:5c:43:a9:35:f9:
                    bf:4a:e6:c4:e0:57:01:7a:bc:8d:51:41:63:ed:b9:
                    4a:57:f0:e0:95:73:b7:59:85:cb:3d:c4:3b:81:38:
                    f4:bb:0b:64:c0:17:c2:34:52:df:72:c7:52:23:ef:
                    48:ff:2c:50:0b:c4:6c:59:07:e6:23:a6:5f:0d:ea:
                    8b:a3:d0:d6:b5:4f:f8:e1:2a:94:3e:e3:4a:95:f9:
                    05:d8:00:e6:57:8b:4c:7e:f1:42:d7:a3:0b:7b:27:
                    5b:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:60:4B:C7:DC:F1:E9:28:1A:5C:6F:9A:9B:A7:A3:46:E2:20:D4:E2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/041b0382-626d-4fb2-a29c-95afe571cf3e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/041b0382-626d-4fb2-a29c-95afe571cf3e/509d9391b5757633313f524285b515e2caaf37d5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:ca90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272876

    Signature Algorithm: sha256WithRSAEncryption
         98:dc:9f:f8:97:86:f3:5f:a4:f1:f4:14:0c:5b:89:82:67:d3:
         63:3f:ae:de:cb:d9:54:7c:21:56:ac:db:26:bc:67:52:35:27:
         6a:15:0d:34:07:73:8b:b4:47:9d:a4:35:79:b0:bc:41:90:3e:
         15:24:94:22:85:51:3a:18:2d:30:df:84:23:28:20:fe:92:84:
         f5:84:e8:64:d0:37:8a:bc:63:69:07:01:83:c7:f0:6b:10:76:
         78:fd:3e:c8:4d:18:db:4d:88:56:99:c8:fd:7b:13:ee:60:31:
         e3:1f:10:90:6f:42:28:cc:d7:ec:f9:79:44:7e:9f:fb:35:54:
         b6:d6:46:0f:61:8d:cc:a1:9d:73:e2:65:a0:d5:4b:7a:b6:b6:
         f0:18:11:0c:47:cc:b7:cf:c5:7d:19:85:88:3a:2b:cc:bf:55:
         ea:52:a6:4d:cc:74:70:f6:0d:b5:c7:15:32:24:69:8e:26:50:
         16:5c:75:0a:bb:12:34:2a:a1:00:9e:78:93:d0:1c:4a:8e:c9:
         81:5b:0b:57:c7:ea:35:1d:90:03:b0:f2:75:69:f6:a4:44:57:
         77:c6:54:a4:63:ae:eb:3e:cc:c2:93:be:78:b1:9f:00:f1:96:
         91:1a:30:25:5a:36:74:6f:2d:53:57:5b:a6:f2:53:17:97:f3:
         fd:94:cb:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----