Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/98834bfd0132eab6137c87d8399ed92a67d866d2.cer
File:                     98834bfd0132eab6137c87d8399ed92a67d866d2.cer (raw, json)
Hash identifier:          +1c8v5fBXLTuSms0P0tCCAJtPW9VE8BWh8GOSe1lLt8=
Subject key identifier:   9F:F3:16:61:BB:68:F7:AB:85:17:F5:CD:51:4E:6F:7C:A5:AA:DE:BC
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0105CCBD
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7e091cfe-d372-498c-9bb3-159887435d64/98834bfd0132eab6137c87d8399ed92a67d866d2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7e091cfe-d372-498c-9bb3-159887435d64/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 Jan 2024 16:55:57 +0000
Certificate not after:    Sun 02 Nov 2025 16:08:34 +0000
Subordinate resources:    AS: 273154
                          IP: 2803:7c50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17157309 (0x105ccbd)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  4 16:55:57 2024 GMT
            Not After : Nov  2 16:08:34 2025 GMT
        Subject: CN=98834bfd0132eab6137c87d8399ed92a67d866d2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:9d:ba:36:51:6a:ff:3b:a5:d5:fa:e1:a8:c3:
                    e8:54:2f:66:bf:39:dc:b1:14:f0:ae:56:d3:93:4d:
                    ee:80:7a:e8:50:4b:ff:97:98:ae:25:bd:dc:e2:3a:
                    fc:61:16:9d:5d:2b:a2:4e:45:6f:8b:70:36:06:bf:
                    c6:db:43:77:73:52:77:fd:75:87:c0:41:af:06:c9:
                    76:71:48:95:8b:26:57:fd:7e:13:6c:a5:56:94:ed:
                    8a:79:e7:27:78:0f:67:4f:22:97:e2:f6:df:3a:cd:
                    0e:f2:71:b2:5e:f6:44:2d:47:2b:9b:d1:32:ca:e8:
                    df:ab:93:89:f2:01:d2:ca:29:8d:1f:71:ee:c8:8e:
                    5c:67:09:43:6f:ed:72:77:56:e7:f2:67:e7:d7:71:
                    5a:f8:bd:fc:d9:05:78:d2:e7:b6:1e:f0:83:2a:5c:
                    72:3e:a9:5f:00:af:34:af:80:43:f7:cc:a3:a0:e3:
                    52:f7:50:cf:d3:9c:c0:1d:27:3b:aa:cb:69:82:12:
                    9f:d6:cd:7b:82:5f:89:b0:95:95:7c:4d:a4:d5:3d:
                    c5:7e:af:4f:bc:da:06:cb:ad:f9:d6:c9:44:3f:b8:
                    0a:30:0a:6a:bd:8d:5d:79:9b:2f:15:6d:14:07:62:
                    c8:73:16:2d:b6:ca:e7:87:ef:c3:f6:8a:e2:44:6f:
                    ea:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:F3:16:61:BB:68:F7:AB:85:17:F5:CD:51:4E:6F:7C:A5:AA:DE:BC
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7e091cfe-d372-498c-9bb3-159887435d64/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7e091cfe-d372-498c-9bb3-159887435d64/98834bfd0132eab6137c87d8399ed92a67d866d2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:7c50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273154

    Signature Algorithm: sha256WithRSAEncryption
         97:8a:03:61:8f:f8:14:6c:5a:3d:9d:fe:5d:54:15:4e:7a:33:
         03:9c:b3:be:e6:fb:f3:94:6b:19:4f:f7:ba:cf:62:73:b2:3e:
         b3:99:b1:3f:02:d8:2c:32:5e:64:62:08:06:53:f4:cd:82:3d:
         f5:c4:84:ef:c6:47:84:78:9a:af:7f:de:67:30:d9:b8:f5:7a:
         b8:be:8f:13:59:09:b2:49:00:34:d7:70:f2:f5:ca:32:44:c5:
         35:d1:3f:26:fe:9b:84:39:7b:d9:58:3e:53:4b:44:dc:0a:5c:
         19:c8:97:e4:2f:c2:9e:85:0f:e6:bd:47:3c:32:7a:fb:df:ef:
         b1:51:cc:34:8a:ed:93:ce:35:45:ff:10:30:c5:ea:4c:36:15:
         ea:ac:2c:83:3d:d6:11:24:dc:9c:c1:5a:60:00:3c:51:55:31:
         51:e1:27:ee:bb:13:9a:56:0a:0a:f7:d8:46:49:3c:66:69:24:
         88:d6:c4:97:f8:3b:03:5d:13:44:d7:a5:ea:13:2b:a3:db:09:
         e7:f3:07:53:2e:16:55:3b:7e:7b:4c:01:71:d3:2e:56:b2:40:
         4f:b6:2f:85:51:6a:43:57:3f:56:2a:83:65:a3:23:78:2a:03:
         50:c4:d0:53:57:4c:01:47:0c:6a:42:47:2e:95:23:6e:8f:e2:
         cf:42:69:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----