Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d3b8b1beef956ecc82df7709b68f460ea4be45a2.cer
File:                     d3b8b1beef956ecc82df7709b68f460ea4be45a2.cer (raw, json)
Hash identifier:          FRinHsD7h2Wy88HyUiFJ+548JogOf/7sCh/sBAtghJI=
Subject key identifier:   B3:79:3E:42:F9:6D:D6:4D:AF:47:39:CF:11:E9:D6:38:CC:A2:F9:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA740E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/921252b4-23b4-4ca5-a887-ff0a9980b011/d3b8b1beef956ecc82df7709b68f460ea4be45a2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/921252b4-23b4-4ca5-a887-ff0a9980b011/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Sep 2023 21:58:46 +0000
Certificate not after:    Sat 19 Jul 2025 15:28:31 +0000
Subordinate resources:    AS: 273086
                          IP: 2803:3f90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16413710 (0xfa740e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 21 21:58:46 2023 GMT
            Not After : Jul 19 15:28:31 2025 GMT
        Subject: CN=d3b8b1beef956ecc82df7709b68f460ea4be45a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:87:01:fb:95:4c:4c:0c:0a:c1:d2:a3:da:b1:
                    b4:6d:ef:a7:04:d7:fd:7b:f3:be:ee:8a:ca:b3:56:
                    23:18:1c:de:18:4c:18:f0:88:c1:52:1e:11:29:9d:
                    0f:86:0a:ba:b8:0c:69:b1:5f:88:74:8c:b6:96:c9:
                    b6:ad:8e:ef:28:80:9f:f5:fd:a4:31:f8:13:11:da:
                    8a:90:12:13:1e:21:5e:bf:25:bb:bf:a5:c1:4b:3f:
                    e3:cd:8c:ad:a2:6f:61:e0:43:fa:f7:b1:ea:ca:28:
                    0b:a6:e7:18:69:b1:e5:a1:21:9a:c0:cf:5a:4e:79:
                    d6:6a:fb:dd:ff:7e:b2:57:80:07:03:69:df:39:1b:
                    3d:3f:10:9f:3f:cd:b2:e0:97:f3:39:54:37:f3:fa:
                    6a:c8:2e:f8:20:13:ff:02:30:06:bd:d9:75:36:b4:
                    60:19:2b:29:b7:db:bc:b4:00:90:9e:8c:84:f0:96:
                    8e:77:b3:77:7a:b3:79:f8:60:4e:97:1f:fa:e4:87:
                    72:5b:d7:9a:35:70:3e:00:cd:97:46:5d:93:46:b4:
                    4d:a1:57:52:c7:90:3e:ac:8b:54:0a:ce:1d:a6:39:
                    cf:8c:41:e5:b4:05:fc:7a:06:70:f6:48:96:01:5a:
                    2d:16:2a:c3:63:89:83:c2:39:0c:c6:f1:01:53:9e:
                    b6:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:79:3E:42:F9:6D:D6:4D:AF:47:39:CF:11:E9:D6:38:CC:A2:F9:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/921252b4-23b4-4ca5-a887-ff0a9980b011/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/921252b4-23b4-4ca5-a887-ff0a9980b011/d3b8b1beef956ecc82df7709b68f460ea4be45a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:3f90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273086

    Signature Algorithm: sha256WithRSAEncryption
         8f:0e:28:9f:ab:59:48:cb:39:10:28:ee:62:d1:c0:ff:03:e6:
         2e:94:87:26:38:0e:31:e4:4f:ec:88:9f:6d:e4:18:8c:13:a1:
         2a:95:7d:7d:74:6d:03:6b:18:b8:67:2e:31:6e:23:b2:67:14:
         38:17:6e:66:55:b2:fe:4e:41:9e:17:4b:e5:10:5e:84:dc:e0:
         a0:2a:61:9e:62:68:33:63:7d:6a:9e:f9:79:20:74:b2:62:30:
         d8:75:b4:91:18:b6:3d:68:df:f8:9e:f1:14:a7:2e:4b:a7:fa:
         eb:ea:fc:68:a8:49:f2:8e:55:1b:69:09:47:10:2b:f4:fb:71:
         b1:a2:28:32:85:bc:14:85:e8:12:7a:f4:75:3f:4a:4d:bd:bd:
         d5:3b:bf:27:f3:da:08:d1:ae:cb:c5:41:6e:56:cd:10:6d:e1:
         b0:fa:36:a5:55:81:90:28:73:56:be:7c:28:30:4f:87:5a:65:
         66:4f:6b:ea:cf:e6:cb:06:6e:aa:cb:5b:cb:d7:d6:1d:60:84:
         c4:b9:66:b2:13:32:61:3e:2c:fb:5d:2f:41:2d:68:b0:03:c7:
         3c:7b:ef:3b:b4:92:1a:7d:6d:fc:44:46:cc:a5:42:f0:d9:5c:
         f2:c4:a2:01:92:6b:d7:88:44:24:fe:e0:2a:80:9f:c5:22:26:
         aa:fb:6c:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----