Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bf4abc7895d05d57d4012cd43818424efdd92c40.cer
File:                     bf4abc7895d05d57d4012cd43818424efdd92c40.cer (raw, json)
Hash identifier:          aKFCZwFQpgd9MCywVGgvTZHDZwT8Jy0EBW6fsgNTdz8=
Subject key identifier:   EA:6F:2B:9E:9F:2C:3D:38:CF:9E:24:AE:EA:BB:94:94:6C:B5:69:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F7B741
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/bf4abc7895d05d57d4012cd43818424efdd92c40.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16234305 (0xf7b741)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=bf4abc7895d05d57d4012cd43818424efdd92c40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:3a:57:db:b7:6a:ea:1f:2d:7d:2c:48:20:95:
                    cb:b6:89:d8:69:47:cd:d9:45:4b:c6:63:96:c8:c2:
                    3a:e6:43:f4:d3:c8:4c:1f:58:cf:78:bd:6c:fe:6a:
                    eb:0f:2d:de:f9:45:67:5c:6f:70:9b:36:00:d9:c6:
                    e5:c5:72:e8:82:04:b5:9b:2d:74:e1:b4:d8:46:8f:
                    6b:a0:50:d2:2c:68:20:5d:5c:aa:50:38:2f:09:c0:
                    8a:f5:d6:2d:99:7d:25:e7:17:1a:44:66:ae:c7:99:
                    10:c8:bf:35:43:43:9f:47:bc:b8:24:c2:f5:2f:6e:
                    3a:73:70:88:73:30:c1:11:bf:71:ae:88:ce:f1:6a:
                    88:d7:e1:c9:e4:23:f0:40:4c:97:b3:ee:3f:1c:0e:
                    4f:97:be:d9:55:c3:69:30:e5:d4:23:1e:de:60:0d:
                    57:7c:a3:03:39:80:bf:9d:78:8a:db:e0:b8:b0:ca:
                    65:d3:e0:86:b9:1d:3e:36:a8:3b:92:33:52:a7:d7:
                    33:90:07:3e:03:11:52:26:73:60:8e:ff:30:02:49:
                    4a:9e:21:52:06:45:ca:1f:f8:19:03:d6:06:06:05:
                    4c:2d:0b:6a:b7:75:ae:11:e2:fe:ad:3b:8c:2f:ac:
                    62:7d:79:1b:63:6b:6f:01:e5:61:3f:7c:e5:f5:f5:
                    23:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:6F:2B:9E:9F:2C:3D:38:CF:9E:24:AE:EA:BB:94:94:6C:B5:69:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/bf4abc7895d05d57d4012cd43818424efdd92c40.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         0e:1d:45:a5:db:5b:9a:15:fa:46:42:3c:8c:50:8e:23:f1:8e:
         9b:03:b6:51:23:6e:5c:01:d0:b7:cd:e0:b3:e1:62:ac:25:64:
         3e:ce:39:dd:11:d5:af:48:d6:dc:e1:50:db:a9:50:9f:88:95:
         e4:f3:9a:44:6f:02:ea:5d:f2:9e:62:ca:11:b7:fc:4e:99:b2:
         9b:31:e9:b9:a0:74:b1:ef:a8:a9:50:79:7a:3a:f9:4c:57:ee:
         63:f6:1a:44:d8:f5:20:43:e1:d3:9b:cb:2d:12:44:b6:73:4e:
         ac:5a:93:52:93:fe:0a:ec:e8:0e:70:d4:ae:38:01:30:6c:39:
         35:d4:68:80:3a:a5:5d:ec:06:73:0b:f9:9a:d5:57:f8:93:b5:
         73:7a:3f:ce:be:df:1d:9b:09:0c:e9:d4:51:b8:64:df:ed:89:
         cb:91:a4:1a:01:74:28:d8:da:ab:6c:c5:32:64:39:39:49:10:
         2f:3d:10:0e:35:27:dc:23:77:34:72:a6:50:1b:86:88:26:a0:
         41:e0:e2:7e:30:85:06:b5:47:8e:d6:3b:dc:39:4f:87:a0:bf:
         2b:96:30:07:c9:59:d7:81:2f:43:b7:24:54:16:2e:e0:21:05:
         91:59:e3:99:cd:b2:5f:2e:ba:15:24:c0:12:89:6a:35:5a:58:
         f0:8b:65:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----