Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8094d9fa87093b488494ac97e9dff9afd30388d3.cer
File:                     8094d9fa87093b488494ac97e9dff9afd30388d3.cer (raw, json)
Hash identifier:          8imHt3He45XUKQsgnfqtGwlNgiHgNRKZ5GbvizzFmIo=
Subject key identifier:   36:15:0C:39:09:D3:5F:A1:C9:6F:69:D2:B4:6D:4A:76:5A:7B:C1:6E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECDDCF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/141c3f40-8221-4192-8e6d-4265ed905163/8094d9fa87093b488494ac97e9dff9afd30388d3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/141c3f40-8221-4192-8e6d-4265ed905163/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 15:23:25 +0000
Certificate not after:    Wed 23 Oct 2024 05:00:00 +0000
Subordinate resources:    AS: 273020
                          IP: 2803:1390::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15523279 (0xecddcf)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 15:23:25 2023 GMT
            Not After : Oct 23 05:00:00 2024 GMT
        Subject: CN=8094d9fa87093b488494ac97e9dff9afd30388d3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:11:44:fe:34:e9:fc:fa:02:6e:e3:4b:e6:9c:
                    b6:80:1a:77:63:66:8b:c6:38:0f:ca:ef:9f:36:94:
                    2d:5e:a7:bc:77:af:a9:3a:78:ef:8e:7e:07:f1:55:
                    de:be:d3:25:6c:d7:84:a0:c1:c1:15:1b:56:41:69:
                    fb:07:c7:d8:1b:07:a7:6e:5e:b2:f3:06:c7:a1:c7:
                    80:88:be:19:98:0e:2f:03:d2:b5:16:f0:f1:98:cf:
                    6c:da:b8:d5:f1:30:3d:7c:99:b8:da:fe:f4:81:29:
                    6d:29:f2:36:8f:99:0f:53:bb:3d:ca:9b:40:30:f1:
                    85:79:69:44:71:78:c9:76:e0:3b:64:33:37:d9:63:
                    59:65:a3:c3:61:90:c9:b5:79:58:a1:fd:9d:3b:71:
                    34:4d:01:cc:e1:97:92:22:18:e7:1f:67:ce:38:58:
                    8d:42:41:6c:55:94:94:9c:bb:74:3e:bd:8f:3b:8b:
                    3b:e8:4b:37:98:d5:24:ee:3f:10:52:54:37:67:02:
                    08:eb:c4:cc:a0:fe:b6:da:5a:8c:f5:3c:8f:8f:04:
                    31:47:fb:28:3d:4e:e4:29:8f:b5:92:84:9d:a5:2e:
                    ad:91:45:c5:9b:ed:ee:50:f1:31:dc:8d:af:08:69:
                    45:20:8b:d5:ce:17:9e:b8:2a:66:6a:37:2c:f9:fd:
                    0a:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:15:0C:39:09:D3:5F:A1:C9:6F:69:D2:B4:6D:4A:76:5A:7B:C1:6E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/141c3f40-8221-4192-8e6d-4265ed905163/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/141c3f40-8221-4192-8e6d-4265ed905163/8094d9fa87093b488494ac97e9dff9afd30388d3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1390::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273020

    Signature Algorithm: sha256WithRSAEncryption
         a2:b4:68:43:06:cf:fe:68:d3:d5:29:0a:48:6b:b9:b9:a5:6f:
         50:8d:b7:ca:31:91:1e:0f:7e:6d:e5:ea:81:ea:4b:4c:b7:c1:
         57:e0:2c:0c:84:5e:b3:41:81:ba:06:44:63:ed:ef:49:be:26:
         9d:7c:b6:ae:d7:cb:3c:8f:ef:56:33:c9:5b:ac:4e:87:1d:b3:
         fa:a9:6c:01:b5:72:10:96:ad:34:96:79:42:12:c6:ab:b8:ad:
         82:71:ac:41:96:d4:22:4d:46:6a:cb:63:83:4e:a8:b2:13:73:
         18:c9:4e:93:40:a4:79:63:3e:4c:70:6a:cf:32:e2:38:aa:4a:
         5c:a7:09:7f:4d:ba:10:1c:62:33:c0:e9:d6:19:8e:ad:ff:c9:
         36:d4:40:39:1e:b3:7f:1a:a6:8f:c5:a6:c0:8e:8e:44:7e:93:
         c3:57:8e:f8:a3:f0:1b:1e:ca:a1:37:85:4b:05:4c:77:56:e1:
         30:6e:f7:65:79:5f:4f:a3:5b:ea:c8:2b:d4:56:66:41:27:b6:
         5d:a9:fd:de:d4:cb:b9:2a:df:96:c1:b6:af:a5:2b:c5:3c:60:
         53:ff:bf:0a:91:4d:00:1a:a8:5e:6b:e3:38:e8:0e:79:f6:06:
         fd:fe:a7:d3:0e:8e:fd:58:c1:68:52:cc:9a:0d:ac:87:82:bf:
         4c:30:b3:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----