Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ca3e60b9e70de193811d28eb980481081c28545b.cer
File:                     ca3e60b9e70de193811d28eb980481081c28545b.cer (raw, json)
Hash identifier:          fcxZrQDisc2k7Izz1GqeStzK6WflH3TWItosAhDeOsM=
Subject key identifier:   55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C25044
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 12 Mar 2022 11:17:03 +0000
Certificate not after:    Mon 27 Nov 2023 20:38:20 +0000
Subordinate resources:    AS: 272062
                          IP: 181.232.156.0/22
                          IP: 2803:a310::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 12734532 (0xc25044)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 12 11:17:03 2022 GMT
            Not After : Nov 27 20:38:20 2023 GMT
        Subject: CN=ca3e60b9e70de193811d28eb980481081c28545b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ff:72:e0:33:fe:56:d9:87:2c:d9:dc:99:c6:
                    e7:ce:cd:d5:af:0d:37:ea:61:70:cc:6c:4d:5b:30:
                    b2:46:f9:e6:d1:42:dd:a3:db:7f:35:09:4b:1c:b0:
                    80:80:a1:62:f3:57:80:96:2b:18:ac:80:0b:95:ef:
                    86:bc:db:52:10:ae:c7:ed:81:7f:a2:60:c4:39:24:
                    f1:80:75:8e:13:9b:bd:3e:42:79:3a:be:66:aa:a4:
                    ae:0d:9c:17:03:90:d9:da:aa:31:b5:05:4d:d5:21:
                    cd:71:a6:42:0c:1c:a8:64:d9:a8:a2:bd:06:57:bf:
                    c3:42:25:b5:8e:52:85:a6:60:04:9e:29:cf:ca:3c:
                    e2:08:33:90:b2:bf:19:58:7d:69:33:60:a4:a4:1e:
                    75:bb:7f:87:3f:17:ab:a9:e3:28:da:a5:79:22:92:
                    4e:73:b4:74:5d:d8:f3:45:35:b2:4c:9e:19:45:ea:
                    16:56:8b:a8:e2:b2:6a:cd:f2:b5:09:5b:82:b4:00:
                    5f:cf:18:c7:ea:f2:1b:58:99:fe:bc:a6:2f:94:f0:
                    59:02:e2:a8:e5:ab:8e:2b:ff:52:69:be:c3:26:85:
                    05:c8:51:06:ef:59:80:b2:f0:ba:8e:1d:55:70:ec:
                    4f:d5:48:4f:b2:ce:58:21:5e:5e:ec:de:3b:9d:0e:
                    0a:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:09:B7:31:90:C0:E4:9F:B0:D3:EF:04:90:F2:12:01:31:42:D4:79
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6b060c7a-249a-4de1-b3bc-d3971993f7f9/ca3e60b9e70de193811d28eb980481081c28545b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.232.156.0/22
                IPv6:
                  2803:a310::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272062

    Signature Algorithm: sha256WithRSAEncryption
         a6:d1:4d:33:cf:dd:d9:e7:42:68:d3:44:6e:22:bd:4c:34:0b:
         23:b8:c7:44:f2:28:54:7e:65:12:7c:fa:90:23:52:35:0f:42:
         8c:0e:68:c7:d0:aa:a0:e4:6f:f6:d6:ad:78:c2:84:84:ee:35:
         1a:90:85:ea:9b:88:25:fb:ec:d1:7e:af:4c:a8:94:7e:22:5b:
         23:27:d3:20:2b:36:64:32:34:a1:48:33:4c:b4:ed:ac:3e:2f:
         e2:e8:51:fc:d7:6a:5d:26:a8:8b:de:39:8d:a8:df:93:98:dc:
         d1:be:de:13:3d:ec:d5:69:88:9f:be:fc:ae:bc:c2:27:74:79:
         5b:00:ff:81:64:86:fa:dc:78:5a:97:3d:8e:ae:15:50:96:0d:
         17:d3:79:de:26:00:11:af:b1:ee:e5:89:0b:7a:0e:0b:62:26:
         79:76:45:c2:c3:9c:24:58:bd:97:cf:9f:bd:ff:f6:b8:ad:47:
         6e:3a:61:d3:bc:f1:90:c2:0e:d7:58:02:ea:90:c9:1c:48:ec:
         7d:5a:1a:c7:05:8b:a0:8b:32:6e:03:e0:23:6c:7d:39:2e:f1:
         21:f2:57:a9:f2:a1:93:a2:99:b2:28:2d:3d:c7:65:21:57:57:
         2d:c3:38:35:ce:17:48:ca:5b:6a:9b:ad:eb:62:7b:27:d9:9b:
         7e:73:46:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----