Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5220face2fbd882c498dc428f842249674f14ec5.cer
File:                     5220face2fbd882c498dc428f842249674f14ec5.cer (raw, json)
Hash identifier:          usanjMYvSmQsNGaJzjfBWROvMT/PFrHaounIVCoFLI4=
Subject key identifier:   2B:81:76:D4:48:6A:83:EE:EB:2E:FA:10:17:9F:7C:08:84:C6:F1:B7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F16588
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f0578321-e6d2-4803-944a-2e531fd7445a/5220face2fbd882c498dc428f842249674f14ec5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f0578321-e6d2-4803-944a-2e531fd7445a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Jul 2023 19:52:14 +0000
Certificate not after:    Sun 30 Mar 2025 15:37:35 +0000
Subordinate resources:    AS: 273015
                          IP: 2803:a390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15820168 (0xf16588)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 11 19:52:14 2023 GMT
            Not After : Mar 30 15:37:35 2025 GMT
        Subject: CN=5220face2fbd882c498dc428f842249674f14ec5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:bb:0d:fc:9f:0c:51:71:cd:53:ad:d9:47:6a:
                    9f:a4:c8:cf:42:93:9d:e3:48:68:11:54:7f:e1:e7:
                    cd:f6:eb:8e:11:e5:6c:de:1d:34:80:1d:76:d2:86:
                    ca:4c:dd:84:65:d8:92:aa:a6:dc:41:e6:d7:53:ec:
                    fe:1a:d8:10:18:3d:39:a6:43:d3:d9:9a:a1:47:46:
                    26:6f:10:48:8e:71:6d:9b:62:3b:f3:d3:a7:e8:9b:
                    21:3e:f7:06:e3:af:fa:72:79:ca:9b:02:43:cd:f7:
                    46:5f:3d:e3:88:17:7e:5d:26:ad:68:07:25:90:a3:
                    e0:f2:b7:bc:ac:85:26:43:8a:37:6a:6f:b9:e0:8d:
                    37:20:20:61:f8:1b:25:e5:26:64:ec:38:b8:30:6d:
                    e0:f1:ea:2d:48:42:de:80:7b:7f:e4:7d:1c:63:08:
                    26:95:5a:1e:de:b5:2d:4d:7c:e5:77:4c:95:cc:99:
                    54:ae:7f:8e:43:b2:78:e9:53:b1:83:48:b4:c0:9b:
                    16:15:e3:86:a2:3d:6e:05:63:fc:ac:b2:73:f8:53:
                    82:7e:b3:e3:5a:41:02:cd:10:e0:4a:84:05:05:d5:
                    2d:ad:c8:21:94:87:ba:20:9c:61:7b:0e:ff:4f:df:
                    52:c5:22:78:b1:67:e2:59:3b:bc:d2:38:9c:34:a9:
                    03:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:81:76:D4:48:6A:83:EE:EB:2E:FA:10:17:9F:7C:08:84:C6:F1:B7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f0578321-e6d2-4803-944a-2e531fd7445a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f0578321-e6d2-4803-944a-2e531fd7445a/5220face2fbd882c498dc428f842249674f14ec5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273015

    Signature Algorithm: sha256WithRSAEncryption
         72:4e:c2:40:ce:b9:db:72:eb:96:f3:b0:8e:51:54:b3:1c:c5:
         72:4b:78:8e:16:c3:b4:db:f7:dd:fb:40:22:5b:48:b1:0b:67:
         b1:d1:46:47:cd:5d:8c:74:00:19:c1:6a:17:a5:5c:20:ab:ed:
         52:30:11:15:78:49:49:bd:ff:8f:8e:6c:7b:71:bb:8b:83:23:
         22:d5:82:3b:85:38:ed:20:45:18:31:7b:9e:36:87:91:6d:e1:
         5d:11:17:35:f3:c6:39:60:0a:ee:34:38:7a:4c:a1:b1:f2:a5:
         7d:cb:11:2c:63:0a:d4:5e:96:50:2e:a3:7a:39:48:d3:f5:21:
         9c:6e:f7:8a:07:72:9d:f1:b6:75:97:78:a0:1c:db:72:a9:86:
         4a:8b:15:5c:d8:84:b8:fb:b2:17:85:0b:63:7b:97:32:ef:a6:
         2c:d3:b6:2b:4c:4d:0f:8a:4b:da:c8:97:e3:a3:18:c4:19:63:
         e9:14:9b:76:5a:7d:29:f1:78:07:78:10:90:37:00:b5:f9:2c:
         69:d7:c0:2b:ee:b2:7c:72:3c:b2:09:e0:14:4f:14:8c:19:e6:
         5a:b3:b0:b8:44:63:45:34:fe:1f:5b:a0:97:42:bf:0b:5e:c0:
         e8:1b:9e:c8:5c:af:f6:53:aa:20:c8:0d:7b:3f:59:3c:98:aa:
         e5:92:34:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----