Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.cer
File:                     b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.cer (raw, json)
Hash identifier:          dz7dTUSmt3hrg0C9YVvTB8Fum2MbmEO0JXwFnh/jWEs=
Subject key identifier:   3F:24:10:9E:04:0A:20:EF:CC:5D:03:40:47:A8:A2:48:FA:93:73:27
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F453D5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 08 Aug 2023 14:21:10 +0000
Certificate not after:    Sat 07 Jun 2025 16:19:28 +0000
Subordinate resources:    AS: 273049
                          IP: 2803:3b90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16012245 (0xf453d5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  8 14:21:10 2023 GMT
            Not After : Jun  7 16:19:28 2025 GMT
        Subject: CN=b9d806633e0f009f79ba1dffc9b54ab06ab0eb17
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:88:a1:7d:ff:99:9d:dc:7b:ba:dc:87:0d:c5:
                    9e:f7:6b:2d:43:68:ac:d7:7a:2c:1c:24:ca:39:9c:
                    05:9a:00:b2:b6:c9:98:fd:bc:4d:f7:b9:56:42:88:
                    cd:aa:96:81:da:9c:3a:5a:c7:be:67:29:2e:f4:b3:
                    9c:3a:6f:9d:a4:20:f0:ad:60:40:c6:34:f8:08:f2:
                    8f:62:f6:48:4b:e5:88:7a:63:25:33:2a:04:6b:e9:
                    bb:c5:67:c6:7f:05:9a:8f:06:1a:1a:3f:cb:1e:40:
                    68:0a:90:8a:09:34:cb:ea:bd:19:30:7b:85:63:f3:
                    93:ad:3d:b5:77:b7:5f:47:4b:5b:21:10:11:04:03:
                    08:a9:88:99:91:20:b7:be:ff:9a:0d:1f:69:cb:34:
                    c3:53:2b:be:92:ee:27:e0:c1:71:35:15:ab:f8:59:
                    5c:d5:87:fc:9e:c0:01:4e:b2:36:83:54:fe:e4:87:
                    a2:a8:06:bd:bf:3a:fd:c7:f3:91:ce:d3:b9:eb:69:
                    96:36:e9:63:60:62:ad:7b:1d:b3:8b:4b:07:f8:59:
                    ed:51:d9:e7:74:68:e9:6b:10:0d:31:7e:4f:e6:94:
                    af:d6:ae:c9:f3:9a:3b:fe:b9:27:a0:4f:4c:cd:9b:
                    47:8f:b8:82:1c:79:7b:4d:e9:3b:47:ef:9e:bc:2e:
                    db:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:24:10:9E:04:0A:20:EF:CC:5D:03:40:47:A8:A2:48:FA:93:73:27
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8dfb75cb-8f57-48e8-b0eb-419dde100e2d/b9d806633e0f009f79ba1dffc9b54ab06ab0eb17.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3b90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273049

    Signature Algorithm: sha256WithRSAEncryption
         8b:05:9c:a1:4f:7f:a5:91:a6:35:bf:68:67:31:ea:6d:cd:3f:
         95:7d:0a:11:af:41:fb:d5:18:93:9b:60:0d:62:38:5c:f4:56:
         0d:db:64:b0:c5:c4:33:15:20:af:8b:9e:a6:91:ce:9e:96:96:
         53:c0:22:25:16:ac:63:b9:46:41:bb:27:60:65:6d:eb:2d:44:
         af:1c:62:de:23:e0:05:bb:66:e0:f8:81:7e:0d:14:51:42:80:
         bf:ce:52:7b:77:7e:1a:7b:1b:27:82:1c:8f:30:42:1f:18:b1:
         3e:b5:f2:37:4e:d6:0e:49:54:12:2e:c3:b2:2c:8c:96:36:68:
         08:f9:dc:7c:ef:71:eb:31:1e:2d:68:9a:96:15:b6:7b:57:a6:
         b7:eb:b2:08:a1:47:20:bb:8c:43:fe:d5:f8:1f:c8:ae:d4:e0:
         36:86:5a:92:5c:52:09:ee:81:a1:77:59:0b:de:9d:b3:31:0c:
         9e:07:cc:b9:68:04:ed:2b:1b:ba:7c:dc:fb:f9:25:ac:f2:26:
         da:cc:73:2e:76:e4:9a:85:66:d4:4b:26:21:61:dc:be:22:50:
         2f:dd:f3:4f:19:c0:cc:91:2a:78:37:0d:8b:1b:8a:bb:25:0e:
         6b:a5:86:01:65:33:c8:c7:7c:65:a1:1c:09:0f:73:b9:54:9a:
         34:d3:0c:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----