Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/79c6c6da7d716f4b859ab40a20ca55ada1b47a4a.cer
File:                     79c6c6da7d716f4b859ab40a20ca55ada1b47a4a.cer (raw, json)
Hash identifier:          R33hEk+SqwbS74IrsCAd5DRj1sy3avIG6PK9UcV0u04=
Subject key identifier:   CF:80:50:B8:9B:E4:91:12:03:83:DC:A1:30:93:E0:7D:67:AA:50:C4
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0106E013
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2821b5b9-8d39-4025-9f04-c554e2e75cc5/79c6c6da7d716f4b859ab40a20ca55ada1b47a4a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2821b5b9-8d39-4025-9f04-c554e2e75cc5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 Jan 2024 12:32:53 +0000
Certificate not after:    Fri 18 Jul 2025 21:20:37 +0000
Subordinate resources:    AS: 273085
                          IP: 2803:df90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17227795 (0x106e013)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 16 12:32:53 2024 GMT
            Not After : Jul 18 21:20:37 2025 GMT
        Subject: CN=79c6c6da7d716f4b859ab40a20ca55ada1b47a4a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:60:dc:76:a7:0c:34:13:10:83:55:ee:f9:4b:
                    fc:9f:82:94:43:63:e5:c7:74:2b:b6:a6:8b:ba:89:
                    c9:4f:1f:0d:87:57:d7:73:96:e1:15:1d:36:dd:8d:
                    eb:19:3e:29:5a:ff:6c:df:01:5f:58:bd:c5:ae:ed:
                    71:db:d6:5f:2b:7a:0c:f6:44:b5:c5:0a:d4:5b:be:
                    94:6e:3e:56:8b:6d:5b:76:7f:f5:59:1e:33:0f:93:
                    2e:d1:b0:b5:f6:5d:50:2d:df:9c:bd:62:ed:97:c6:
                    fe:85:ca:93:a8:1b:fc:82:af:82:0e:66:4e:ce:a3:
                    da:d1:4c:c1:6b:49:fe:9f:64:67:eb:86:2e:2b:1d:
                    63:47:52:f7:08:c9:9c:47:e8:48:9d:5b:32:1f:eb:
                    f0:28:4f:b1:11:16:34:bc:30:bc:44:0d:fd:4a:0a:
                    cc:de:5d:6e:9a:60:9a:b1:e2:7f:69:8d:bf:88:2a:
                    0a:20:74:19:06:1e:69:73:3f:38:40:56:e1:cd:85:
                    38:ac:76:ff:4e:b3:7b:34:a9:d4:30:21:81:9b:bc:
                    5f:cb:ba:ec:59:62:df:ad:c8:7c:fb:3f:22:f7:b4:
                    6e:66:72:3c:8a:a6:de:e1:6d:f6:e3:66:28:74:57:
                    db:5a:08:79:92:df:51:23:fd:c0:e9:8d:68:a9:44:
                    8a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CF:80:50:B8:9B:E4:91:12:03:83:DC:A1:30:93:E0:7D:67:AA:50:C4
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2821b5b9-8d39-4025-9f04-c554e2e75cc5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2821b5b9-8d39-4025-9f04-c554e2e75cc5/79c6c6da7d716f4b859ab40a20ca55ada1b47a4a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:df90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273085

    Signature Algorithm: sha256WithRSAEncryption
         46:56:d1:7e:b8:7a:57:b8:cd:3f:f1:c4:04:18:ce:82:fa:22:
         54:89:63:0c:4d:2a:ab:ca:b8:e0:1e:04:2a:48:4c:71:16:a9:
         66:a3:d6:b6:d5:f4:2d:57:e0:4f:11:65:56:d3:5e:5d:75:5f:
         6b:de:0c:cc:cd:3e:14:eb:80:03:3f:ca:3c:be:33:c6:0d:5e:
         16:12:2d:35:53:a2:64:7c:12:17:c8:2b:1c:0f:21:fc:e7:f4:
         76:be:76:26:1e:3e:d3:45:1d:98:4b:a5:99:b8:69:8b:b8:86:
         0c:af:79:7e:e4:8d:6d:1d:4d:b2:53:69:29:cf:e5:c5:a1:27:
         95:1e:bc:d5:db:11:5a:f7:19:8e:77:74:78:ef:ec:61:ae:c7:
         50:34:2f:20:6c:2a:ed:ec:82:75:e6:4a:fd:e6:f8:bd:b3:8f:
         bc:07:f9:62:f7:f8:2c:7a:b4:a2:3f:32:ad:47:f1:39:1e:88:
         b7:e7:a2:6b:3c:c7:1a:10:d3:37:f5:03:1a:57:36:de:d0:59:
         71:8a:07:a9:aa:68:8b:5e:7c:11:0a:82:78:db:2d:bc:5c:a8:
         66:85:43:7b:9f:d5:7f:b6:ba:e6:97:63:29:0e:48:46:e9:d6:
         78:13:f9:26:d7:82:f3:80:05:dd:0a:6f:26:82:b4:cd:e6:81:
         ef:ed:ac:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----