Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8aa3d74195c66fd6a107c144867854f506dbbdd8.cer
File:                     8aa3d74195c66fd6a107c144867854f506dbbdd8.cer (raw, json)
Hash identifier:          WDXmpZIC/OhI5tPMmzBaVlQ5eMHkAW0yk+QX1b4WBOo=
Subject key identifier:   C4:80:90:07:7D:2D:CF:1D:51:A7:DB:A0:1A:8C:09:9C:73:9F:92:08
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102C43E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a06ee076-96de-45f6-8c67-a48d53b4a770/8aa3d74195c66fd6a107c144867854f506dbbdd8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a06ee076-96de-45f6-8c67-a48d53b4a770/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 02 Dec 2023 21:13:27 +0000
Certificate not after:    Wed 01 Oct 2025 18:44:33 +0000
Subordinate resources:    AS: 273141
                          IP: 2803:4c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16958526 (0x102c43e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec  2 21:13:27 2023 GMT
            Not After : Oct  1 18:44:33 2025 GMT
        Subject: CN=8aa3d74195c66fd6a107c144867854f506dbbdd8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:50:71:39:74:47:f6:3e:34:23:59:d0:4c:cc:
                    43:af:4a:ef:24:43:b9:ec:3d:e2:88:05:44:f6:79:
                    79:c9:67:e9:8c:45:72:38:aa:24:d4:f8:42:fc:8d:
                    f7:22:00:23:5c:be:5c:0d:12:a5:83:15:df:09:b7:
                    ed:ce:0d:08:5f:5c:46:3e:70:67:5a:34:46:08:12:
                    05:63:b4:66:93:03:a3:dc:ce:ea:2f:45:c7:10:f3:
                    7a:44:7f:75:fe:c5:10:05:29:69:3b:39:5b:be:81:
                    ba:95:0d:73:60:56:31:ed:68:5b:ad:c0:45:50:83:
                    87:0c:02:44:a0:74:0d:f6:dd:5d:39:d7:73:64:5d:
                    a2:ce:2a:b7:25:09:be:6a:f7:5d:55:ce:dc:3b:0b:
                    c7:7d:b5:4b:02:3c:44:91:05:13:32:4d:bb:88:6c:
                    0c:eb:d4:a5:41:09:ba:a7:fd:4e:a0:8f:d3:f7:5b:
                    d5:1c:7a:3b:4c:4f:5a:a7:88:87:43:34:08:f0:1a:
                    c4:21:8c:d3:9f:d6:6c:4c:d7:92:cf:71:22:fd:ee:
                    95:e9:d4:e6:d2:4e:ba:7a:9b:a8:44:48:5e:7b:7f:
                    ee:1b:1b:e8:5a:2f:c9:f2:b0:df:e3:07:73:12:1b:
                    b0:d8:a5:a0:01:93:ab:60:e2:a6:f8:dc:b5:15:29:
                    ed:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:80:90:07:7D:2D:CF:1D:51:A7:DB:A0:1A:8C:09:9C:73:9F:92:08
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a06ee076-96de-45f6-8c67-a48d53b4a770/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a06ee076-96de-45f6-8c67-a48d53b4a770/8aa3d74195c66fd6a107c144867854f506dbbdd8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:4c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273141

    Signature Algorithm: sha256WithRSAEncryption
         7f:85:44:85:e8:b3:59:8c:6d:8e:46:8b:13:83:fc:c5:83:09:
         41:be:d5:db:01:ac:74:50:0d:3b:61:7b:42:50:6c:b2:f5:29:
         38:ab:2b:fe:f6:16:a6:29:ec:d5:19:9f:8d:16:52:a0:d5:23:
         53:e9:c8:15:55:5a:93:cd:44:3f:7a:72:ca:a3:c0:b8:14:b7:
         4d:03:33:fb:65:71:60:72:ca:ef:09:35:3e:f1:85:b5:b2:7d:
         9a:c1:97:fb:cf:a3:3a:9a:b6:ca:bc:f1:49:ff:07:b3:aa:9d:
         d9:c1:d8:04:e5:3d:06:20:de:19:f3:14:fe:14:d6:89:3e:a7:
         8a:f1:db:d7:12:b8:a1:0d:07:3e:ed:08:a1:f2:03:8e:63:11:
         29:b3:bd:61:e7:e0:ff:f0:c4:52:cc:02:16:a7:5c:da:3c:67:
         d3:42:43:96:e1:96:05:fa:9d:fb:9b:06:dd:5b:a4:e3:5d:6f:
         32:5a:69:3b:7d:2b:a0:f7:54:e0:35:89:d5:79:ea:a6:19:06:
         43:6f:13:a7:ff:10:e4:e9:2f:4b:e4:01:94:67:1e:10:b7:58:
         36:d0:73:f1:62:e0:29:4b:2d:0c:de:45:bd:e1:2d:1b:e7:8b:
         5b:c9:14:f8:7c:7a:92:ef:43:bf:aa:c7:dc:d6:31:53:15:ca:
         e9:02:a4:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----