Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d68e2de08c8586d39e4798e1da3a6ad06645deb8.cer
File:                     d68e2de08c8586d39e4798e1da3a6ad06645deb8.cer (raw, json)
Hash identifier:          PyMMQtVlnjjaFnsjZCKnMfim6kVt2TDm/YNUevU47RY=
Subject key identifier:   52:11:98:E8:B1:E0:70:D0:8C:27:B4:DC:32:40:E5:E2:92:F1:1C:8E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E567C4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/caeebb05-a9c2-4e0e-bb42-63d9fa9aa3b0/d68e2de08c8586d39e4798e1da3a6ad06645deb8.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/caeebb05-a9c2-4e0e-bb42-63d9fa9aa3b0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 13 Apr 2023 15:51:09 +0000
Certificate not after:    Mon 23 Dec 2024 05:00:00 +0000
Subordinate resources:    AS: 272979

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15034308 (0xe567c4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 15:51:09 2023 GMT
            Not After : Dec 23 05:00:00 2024 GMT
        Subject: CN=d68e2de08c8586d39e4798e1da3a6ad06645deb8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:c4:9b:91:e2:83:51:5a:c7:89:ad:1b:db:1e:
                    5f:a3:43:01:e1:6e:d8:9b:39:d5:fb:ad:37:92:53:
                    23:69:94:8c:49:24:b4:83:db:d8:a8:6b:6f:21:50:
                    64:c3:27:00:44:59:5c:e4:84:4e:dd:fa:a7:89:f8:
                    0e:80:76:98:46:fe:38:89:68:2b:1e:c3:ba:a8:6c:
                    06:c4:c1:46:93:c7:e7:43:96:3d:53:00:f6:a0:81:
                    00:4b:56:ae:4a:dd:67:65:f9:a6:08:77:8a:0d:92:
                    73:03:d0:1e:08:c7:27:33:1b:fc:d7:ca:75:5d:86:
                    ab:fb:d6:ac:00:60:5b:35:cd:8f:a0:9a:8b:c9:7a:
                    77:b9:3a:05:6b:53:a5:e2:78:e7:f3:83:51:ce:03:
                    81:8e:65:a4:07:40:95:52:a9:17:b7:26:53:17:88:
                    97:cc:1c:3b:84:f6:c6:46:e8:a6:73:2c:0d:77:bf:
                    19:8f:21:c2:b0:51:8a:a8:cc:24:4a:17:74:30:b0:
                    3a:2e:59:7c:61:e3:0e:1f:bc:84:9d:d7:ea:3f:8e:
                    0e:c0:8a:81:3f:d3:22:02:60:40:1e:57:09:3a:df:
                    5d:0d:75:fe:7f:0d:13:af:96:b5:58:9b:ba:aa:e7:
                    db:a8:e3:40:1a:c2:68:6a:da:f4:f8:f7:5d:d0:70:
                    c9:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:11:98:E8:B1:E0:70:D0:8C:27:B4:DC:32:40:E5:E2:92:F1:1C:8E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/caeebb05-a9c2-4e0e-bb42-63d9fa9aa3b0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/caeebb05-a9c2-4e0e-bb42-63d9fa9aa3b0/d68e2de08c8586d39e4798e1da3a6ad06645deb8.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272979

    Signature Algorithm: sha256WithRSAEncryption
         6e:03:95:c3:16:17:be:6b:45:3f:d9:43:c5:4e:b6:8a:fc:63:
         5c:50:f4:3d:91:b0:12:31:61:9e:ff:71:d9:be:f6:9f:0c:03:
         aa:84:f7:8b:28:4d:80:15:e6:c3:7e:b6:fa:79:20:57:3a:18:
         7f:0b:7d:49:4e:58:18:5f:8c:c4:db:c8:70:87:b3:da:35:5a:
         aa:42:66:e1:aa:f7:d5:42:5d:07:f1:40:7d:6c:d5:30:48:18:
         7e:60:df:f8:c1:32:8a:ab:8e:06:21:ed:9d:5f:17:de:e4:78:
         9a:15:ee:db:73:1d:cd:52:2b:98:9f:06:f0:97:9b:9f:75:3f:
         17:a6:51:c5:8c:3e:c9:c9:98:21:e8:a5:e8:54:85:a1:e9:7f:
         da:b4:0b:fe:dc:93:2c:ad:6f:5a:57:79:68:43:9b:5b:63:bf:
         40:4e:ff:26:6d:e6:51:7c:26:65:c6:4d:25:36:79:cf:1d:6c:
         a6:93:ef:b2:5a:20:0b:e6:a9:3a:e9:d1:03:84:55:e2:08:43:
         59:44:34:06:b5:50:37:ff:f9:fa:25:65:0c:04:8f:12:b6:30:
         11:ca:94:60:8f:c5:6f:73:79:85:97:81:3d:e9:c5:03:9f:1e:
         16:b8:21:30:86:de:13:98:8e:fc:af:39:82:9b:80:40:6b:8b:
         51:c7:22:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----