Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9d5b3e84ffd9a3e670162c4091de4244a77f4c26.cer
File:                     9d5b3e84ffd9a3e670162c4091de4244a77f4c26.cer (raw, json)
Hash identifier:          Vu1S5onk7iK0d5jeHtzTkrbZ8kzasf2KseIg1pZHpZs=
Subject key identifier:   C1:41:45:93:D5:A5:B1:7B:D0:61:45:AE:0B:2B:BB:D8:3A:21:DB:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EF7154
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/56d8aa27-17f1-45e6-b3c1-da45cffeea2a/9d5b3e84ffd9a3e670162c4091de4244a77f4c26.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/56d8aa27-17f1-45e6-b3c1-da45cffeea2a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 25 Jun 2023 19:54:50 +0000
Certificate not after:    Tue 19 Nov 2024 15:23:47 +0000
Subordinate resources:    AS: 272055
                          IP: 2803:3d10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15692116 (0xef7154)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 25 19:54:50 2023 GMT
            Not After : Nov 19 15:23:47 2024 GMT
        Subject: CN=9d5b3e84ffd9a3e670162c4091de4244a77f4c26
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:82:3a:43:8f:85:6e:8a:2f:8c:b6:74:33:e0:
                    b5:78:bd:6c:f2:a4:6f:20:fe:ab:3c:eb:42:56:ac:
                    f6:45:35:36:b6:29:e5:f4:7f:3f:83:e1:9b:93:8c:
                    ea:b1:de:b3:06:2c:06:ad:7c:b1:d3:a2:58:0b:9a:
                    47:4b:84:a4:08:25:7c:41:ed:4a:0d:bb:74:d3:1a:
                    55:e4:47:5f:a9:39:3a:10:0e:70:80:19:c2:3e:a3:
                    f2:95:45:96:e9:e5:8c:8d:af:d3:19:b9:b5:0a:c0:
                    d0:2d:3e:44:fb:98:88:f8:3a:27:21:6b:e2:4a:f6:
                    76:83:50:bb:04:54:f3:47:bf:ca:f5:96:f8:4c:9b:
                    37:b4:20:c2:20:f5:76:fa:31:ac:65:7d:1d:2d:2a:
                    cc:a4:de:7d:c9:b0:0c:ad:f2:6c:06:b7:9f:18:4d:
                    be:1b:55:84:38:e4:5f:13:35:5c:5e:a8:76:fb:52:
                    0c:ee:20:43:64:bd:c7:39:f6:81:e5:95:bb:41:0a:
                    6a:2d:fb:e3:dc:47:87:fb:6a:72:8b:27:90:ed:1d:
                    1a:7f:5c:45:46:e5:ae:48:c2:75:9e:8d:d8:0c:39:
                    ea:23:d5:70:ed:64:2a:11:2a:6b:13:c6:0f:c2:02:
                    52:36:86:d1:b3:fc:6d:cc:92:b6:1f:9f:35:90:ca:
                    ad:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:41:45:93:D5:A5:B1:7B:D0:61:45:AE:0B:2B:BB:D8:3A:21:DB:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/56d8aa27-17f1-45e6-b3c1-da45cffeea2a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/56d8aa27-17f1-45e6-b3c1-da45cffeea2a/9d5b3e84ffd9a3e670162c4091de4244a77f4c26.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272055

    Signature Algorithm: sha256WithRSAEncryption
         11:59:48:c5:2a:cc:2d:4a:2a:c8:d0:e0:0f:fd:4c:77:4d:da:
         6f:2d:7d:d8:1e:d6:f8:7e:25:dd:80:fd:fb:dd:8b:0a:ce:cf:
         da:e8:14:cd:d6:9e:92:49:e6:8c:94:ab:e9:cb:ab:fd:70:f6:
         00:9f:d2:e4:95:61:a3:5f:37:e5:b3:15:ca:31:b1:a8:2d:e3:
         be:4a:b5:86:ec:ef:f5:1c:df:01:1f:16:cd:ee:20:41:d9:34:
         3b:44:f5:c0:06:56:e7:ec:14:37:73:15:f2:eb:cd:b1:24:95:
         4a:44:84:ca:53:9f:c2:1a:90:d1:d0:a5:d9:75:0d:e1:26:12:
         a4:2a:6b:24:dd:33:2f:b5:02:07:90:a7:d3:38:89:90:7e:61:
         ae:6e:05:97:8d:d3:36:dd:83:36:15:3a:7e:f9:34:e0:6a:11:
         db:a8:85:ef:68:20:e6:f0:75:fe:31:8c:df:eb:f0:02:37:59:
         cb:35:fe:4f:03:17:89:2a:8a:98:b8:d8:6d:8f:7a:c2:08:16:
         e5:95:3d:cb:f1:a1:d5:27:8a:90:85:fc:c2:48:68:6d:77:94:
         41:8a:83:59:4e:03:51:9e:9c:74:eb:b6:07:60:c5:75:e5:d2:
         7f:12:6a:c8:ae:5f:57:73:f2:63:ae:11:38:ab:22:f0:b1:94:
         fb:8c:ba:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----