Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer
File:                     bd8889eb5168a4d99330c533c75e35a55c7dbde8.cer (raw, json)
Hash identifier:          D0bdQq/TDH4NwnA448T+0IEXm2XhTfDZLsZVS/uxRf4=
Subject key identifier:   D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FB0F9B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Jul 2022 17:56:57 +0000
Certificate not after:    Tue 29 Oct 2024 14:40:19 +0000
Subordinate resources:    AS: 272030
                          IP: 2803:5510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16453531 (0xfb0f9b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 25 17:56:57 2022 GMT
            Not After : Oct 29 14:40:19 2024 GMT
        Subject: CN=bd8889eb5168a4d99330c533c75e35a55c7dbde8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:91:07:32:db:14:d0:46:07:c3:2f:e9:a0:2e:
                    d3:f9:ec:5a:6a:5f:79:6e:e0:34:6b:da:5b:38:4a:
                    8b:16:bf:f0:66:63:72:c8:26:a5:99:31:f1:a8:d2:
                    58:9a:99:dd:79:24:36:08:1b:79:67:f7:e0:d8:3f:
                    05:da:0d:ab:a5:b5:40:47:fd:49:dc:ad:d8:0e:9a:
                    dd:e7:8e:e2:85:25:f9:f9:b2:e3:7b:26:51:55:c7:
                    03:92:20:78:d8:37:d5:56:9a:f8:3b:a9:af:c6:f4:
                    5a:4c:5f:30:c1:ea:4a:56:38:a1:be:ae:c0:36:73:
                    48:43:d8:9a:5b:91:c9:65:f0:ad:52:0c:b2:5e:45:
                    48:15:d9:18:03:6f:54:d2:34:20:2e:2d:32:d3:cd:
                    34:66:d4:97:98:a9:48:f5:e7:4d:6a:d0:83:91:b8:
                    40:f4:9c:ca:61:f7:46:7c:06:aa:32:e5:c3:41:7d:
                    bd:cb:eb:54:04:2f:c6:27:b3:48:7b:2c:97:7b:53:
                    97:a5:b1:f6:4e:ff:9c:b4:2c:ae:4e:f7:5d:33:cc:
                    1c:aa:54:ea:1c:a3:b6:fe:b2:bb:82:47:5d:75:df:
                    2b:98:70:9c:65:be:ce:55:e9:d4:28:40:ce:17:cb:
                    71:74:4b:cb:50:9d:bb:5d:08:b0:08:f2:66:6f:97:
                    3f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:1A:34:51:50:78:5F:1D:FB:A3:DE:8D:BC:60:8D:3B:DF:78:1C:90
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/40d7b666-0cfd-4a87-91d7-928fd8af877c/bd8889eb5168a4d99330c533c75e35a55c7dbde8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:5510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272030

    Signature Algorithm: sha256WithRSAEncryption
         26:e9:d5:33:32:da:99:88:9d:18:92:56:7e:8c:67:68:e6:4f:
         e8:e8:31:c8:df:d2:6c:ce:22:25:b8:fc:2f:9f:20:6a:7b:b0:
         f7:8c:bd:76:68:18:3e:a1:a4:b0:c3:ff:2e:f9:ec:52:8b:74:
         60:07:d0:f7:fb:f9:10:a9:7d:cc:cb:dc:ea:87:3d:e0:20:ef:
         c8:62:34:0f:dd:f0:bc:b6:11:34:24:33:80:30:66:35:e4:a4:
         54:80:c7:f3:07:44:b5:34:29:08:80:a8:5f:61:2b:c0:43:31:
         ab:ff:3b:89:6a:e8:20:98:38:1f:06:88:76:a7:54:d0:a5:13:
         da:29:0b:34:ec:bd:47:4f:96:71:a1:d7:e2:ff:46:fb:42:ed:
         c5:c9:b9:bd:59:47:4d:75:da:d4:4a:57:5d:d5:44:e1:c7:1a:
         52:d2:53:05:35:79:8e:5c:9a:0f:6a:f7:0a:1f:63:ee:a8:10:
         7f:2b:b3:9e:e0:d0:c8:e7:ed:2d:3c:47:54:6d:9b:93:6e:17:
         1b:50:95:82:74:dc:4e:dd:28:01:ac:76:ea:7b:4a:7d:53:25:
         63:6e:2d:d0:cb:db:46:73:cc:d3:82:33:46:ae:1b:a0:7a:23:
         e9:cc:e3:ab:d7:4d:37:e1:18:53:fe:9c:3f:8b:c8:b0:dc:58:
         8b:88:bd:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----