Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bbd5773c9592361f7d41f83e0b45f99e97eab894.cer
File:                     bbd5773c9592361f7d41f83e0b45f99e97eab894.cer (raw, json)
Hash identifier:          v0wVuF7VYgmhmPkgzDmD2D8vxNWFNm9jhiZ6czfLrG8=
Subject key identifier:   46:BA:D6:1B:C3:0C:1E:20:70:89:6C:39:24:59:75:69:F0:7C:A5:1E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DFEE68
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/bbd5773c9592361f7d41f83e0b45f99e97eab894.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 26 Feb 2023 09:09:14 +0000
Certificate not after:    Tue 10 Dec 2024 14:00:17 +0000
Subordinate resources:    AS: 272069
                          IP: 2803:3310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14675560 (0xdfee68)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 26 09:09:14 2023 GMT
            Not After : Dec 10 14:00:17 2024 GMT
        Subject: CN=bbd5773c9592361f7d41f83e0b45f99e97eab894
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:3f:07:6d:f7:c1:0c:ff:bc:e3:fb:c3:34:05:
                    f7:b7:a1:8e:ef:88:cc:98:e8:ac:f2:e9:db:8a:44:
                    27:7d:57:e9:cb:a9:50:e1:1f:7b:2a:6c:db:49:45:
                    44:1e:04:f0:be:53:f5:f3:fe:74:1c:33:bc:c2:20:
                    80:47:74:87:20:24:6a:c0:20:5a:bc:d0:61:a3:88:
                    c9:de:1b:15:18:5f:26:92:16:06:e0:bb:a9:70:06:
                    bd:82:e1:43:a0:8d:9f:66:b2:fa:30:0e:f3:e7:c5:
                    01:62:d1:d7:c4:93:1a:d6:ad:6e:0f:b7:fa:4b:96:
                    75:ce:63:b0:a6:d8:18:d9:3f:fb:1f:4f:40:e4:43:
                    2c:55:4e:7b:b4:aa:f9:c1:62:48:04:77:55:16:5f:
                    49:53:21:ba:b9:c2:fe:2e:f3:5f:1a:0c:b2:5e:51:
                    27:7d:06:19:2a:f8:5c:62:43:02:de:1d:b5:c9:a5:
                    cb:69:ef:09:13:c2:c0:c5:95:d7:45:e5:c1:47:5e:
                    12:26:af:57:da:c4:9e:15:1b:53:78:b5:fb:ad:30:
                    e7:ea:05:51:64:da:93:65:0d:e8:bd:0e:88:ca:e8:
                    bf:6a:c0:5d:df:60:0b:e8:a2:e9:f7:47:6d:f9:4b:
                    64:e4:a6:e7:f9:96:93:98:05:8e:cd:58:5f:05:15:
                    d1:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:BA:D6:1B:C3:0C:1E:20:70:89:6C:39:24:59:75:69:F0:7C:A5:1E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4b78bf18-b1a8-44de-8304-dd04f1f72337/bbd5773c9592361f7d41f83e0b45f99e97eab894.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272069

    Signature Algorithm: sha256WithRSAEncryption
         3c:6f:3c:6c:6b:16:ca:fd:10:46:bd:c7:8b:c0:8e:29:98:ea:
         47:84:5d:11:d4:a0:74:32:d6:80:5f:e4:e9:29:c3:2c:a2:f5:
         48:3e:66:e5:0e:6d:e0:d2:ea:a3:2d:1f:a9:ff:3a:9a:35:6a:
         a6:09:1f:c8:d5:81:14:7a:75:b3:d1:b9:6b:b1:06:19:25:04:
         66:bf:f0:ad:e0:32:75:fc:75:60:d4:c7:fe:42:ea:53:43:fc:
         26:00:16:cc:76:f4:ed:3b:c3:df:97:98:32:85:d3:17:3e:a4:
         e9:69:7f:39:bf:e2:39:fb:c1:2a:e1:79:13:57:fa:fc:4b:68:
         ef:b0:d5:4b:da:2e:53:e0:2a:86:1c:e0:9f:a5:09:4a:72:9a:
         6a:ef:c1:67:3a:bd:7c:2d:d3:79:78:d3:dd:b8:dc:20:32:ae:
         c6:af:ea:ba:1f:32:70:f8:f5:32:c2:26:a8:b2:7e:bb:94:97:
         98:2e:72:e0:27:d0:57:14:13:38:1e:8d:66:59:5d:f4:49:c6:
         aa:e7:a0:68:55:21:a4:d0:15:e7:c8:85:ea:9f:d2:af:d2:6c:
         42:c2:2c:41:71:2c:14:ed:2a:a9:e4:17:04:15:15:be:93:54:
         19:f0:a0:cc:6c:4f:df:e7:24:4c:e2:5b:59:eb:47:e5:11:06:
         41:9a:23:ce
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----