Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b902d3a4f3ef9611f1a02d7817e7a9bf59a5b3b2.cer
File:                     b902d3a4f3ef9611f1a02d7817e7a9bf59a5b3b2.cer (raw, json)
Hash identifier:          DNaWwT3zbXWIA331gtEDV1IGYTrDNmISktCdpJUgq5Q=
Subject key identifier:   17:4B:25:17:8E:A2:F4:75:14:81:BA:27:51:E6:CE:F4:43:A5:22:19
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1A6EB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b299b598-1b79-4beb-aeb8-1408ea730db3/b902d3a4f3ef9611f1a02d7817e7a9bf59a5b3b2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b299b598-1b79-4beb-aeb8-1408ea730db3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Jul 2023 11:44:51 +0000
Certificate not after:    Wed 17 Jul 2024 01:42:27 +0000
Subordinate resources:    AS: 272873
                          IP: 2803:a90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15836907 (0xf1a6eb)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 13 11:44:51 2023 GMT
            Not After : Jul 17 01:42:27 2024 GMT
        Subject: CN=b902d3a4f3ef9611f1a02d7817e7a9bf59a5b3b2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:1f:1b:cd:94:6f:7b:b5:91:62:5c:72:b0:fe:
                    a8:57:65:e3:3d:12:97:68:e4:ca:38:0b:9b:32:b5:
                    15:71:9e:02:4b:82:22:0b:cc:79:1c:c7:7c:d6:21:
                    5c:97:58:01:5e:22:a8:e5:4c:82:ed:e8:15:6d:13:
                    f0:24:15:3f:ff:fc:fd:f5:3c:ce:ec:41:f5:fb:d0:
                    fb:ee:b1:ba:36:ce:08:c0:b2:b9:16:ad:0e:bd:d7:
                    f9:86:a1:8c:6b:56:0d:72:34:58:e5:0b:5c:ee:44:
                    4e:81:7c:36:9c:64:d0:0c:d3:64:48:b0:12:17:a5:
                    23:4f:a7:d9:d9:0d:5a:33:d5:98:5c:72:91:d9:9c:
                    68:77:42:ae:0b:79:b3:d1:ac:8f:2a:51:e1:20:09:
                    ff:0f:0b:ef:76:9c:f2:ac:2a:08:e1:98:27:91:a8:
                    38:8f:af:f5:36:b7:82:cc:b6:8c:b3:dc:aa:88:6f:
                    89:21:e6:10:18:b0:1f:22:03:bc:f0:a9:2c:e2:3a:
                    5c:64:c0:88:b9:72:15:ce:45:03:e5:06:50:19:08:
                    29:fc:6f:d5:53:20:58:f1:0e:0f:76:2e:39:ba:0a:
                    5a:96:1c:a1:6d:b5:cc:92:57:3f:12:30:3c:b8:15:
                    f3:9d:4c:a6:b4:99:91:27:14:39:0e:6c:46:04:fc:
                    7f:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:4B:25:17:8E:A2:F4:75:14:81:BA:27:51:E6:CE:F4:43:A5:22:19
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b299b598-1b79-4beb-aeb8-1408ea730db3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b299b598-1b79-4beb-aeb8-1408ea730db3/b902d3a4f3ef9611f1a02d7817e7a9bf59a5b3b2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:a90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272873

    Signature Algorithm: sha256WithRSAEncryption
         5d:2e:01:69:2f:4f:a3:73:a4:e7:18:40:95:44:88:57:24:32:
         fa:a7:31:64:43:2a:88:1b:10:76:32:5f:c9:28:df:b8:70:ce:
         cf:d4:53:3e:98:ad:8f:4e:24:e2:7f:23:dc:68:0e:81:7c:e6:
         3f:69:78:5f:6a:6a:9d:38:32:34:af:b7:3a:96:ea:7f:58:b1:
         7b:81:85:34:f7:35:e9:a3:79:3b:72:02:41:7d:d2:69:5e:6f:
         48:55:30:90:60:8d:62:bf:f9:f4:07:55:87:d7:0e:52:26:32:
         9e:41:ad:9e:96:5d:07:c3:fd:de:91:75:32:6b:0d:79:17:0e:
         d6:5a:a5:e6:68:b8:75:fd:ce:1e:9d:ae:1b:fa:53:6e:00:6e:
         bc:8a:a0:b5:be:0d:e9:38:51:09:58:b6:4d:36:08:b1:f2:79:
         8a:ab:08:ed:06:3c:6e:0c:eb:ba:0f:bb:21:db:57:3b:2b:48:
         52:22:bc:bd:01:82:7b:6b:cf:d6:dc:cf:42:ee:a1:fb:b4:9b:
         b7:99:0f:b9:bc:2e:48:77:8f:79:55:f2:b0:82:ca:18:89:28:
         b7:89:59:5c:2e:3e:25:f2:4c:bb:df:c3:58:c1:12:54:78:7a:
         ef:76:6d:e2:97:93:3c:e8:64:2a:52:50:1a:a3:8d:d4:79:65:
         5c:c6:ff:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:14 2024 by rpki-client on console-fra.rpki-client.org