Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dc37554a8675388bc7f6946f7ce2c2de7afa9466.cer
File:                     dc37554a8675388bc7f6946f7ce2c2de7afa9466.cer (raw, json)
Hash identifier:          htjduRTAXg1vCHzy+KHSBqi3pGuRiGISEFpRgNysapg=
Subject key identifier:   ED:CD:F0:EE:07:6E:52:AB:E8:6C:68:79:30:3E:BF:DE:49:C5:E4:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3B68A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6c2bad5d-87f2-4b63-bca8-ff7089b0bd9a/dc37554a8675388bc7f6946f7ce2c2de7afa9466.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6c2bad5d-87f2-4b63-bca8-ff7089b0bd9a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 02 Aug 2023 07:21:51 +0000
Certificate not after:    Mon 19 May 2025 22:49:01 +0000
Subordinate resources:    AS: 273040
                          IP: 2803:6b90::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15971978 (0xf3b68a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  2 07:21:51 2023 GMT
            Not After : May 19 22:49:01 2025 GMT
        Subject: CN=dc37554a8675388bc7f6946f7ce2c2de7afa9466
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:b3:0a:b0:60:1d:f6:36:ea:3b:5d:65:63:53:
                    5d:87:27:bf:c0:a3:57:26:a7:c8:c5:75:70:2c:2e:
                    1b:26:ac:03:1f:79:cb:b1:69:c5:f7:8e:5b:47:7a:
                    7f:ab:8f:87:56:0d:35:7d:b6:0f:48:ac:a8:d5:36:
                    35:b3:a4:ee:00:a3:0c:8a:36:6f:8e:15:4d:63:c8:
                    c8:e6:54:f7:c1:9b:3a:ff:de:5b:51:53:ff:a4:40:
                    00:1e:1d:e3:1c:35:33:6e:35:da:ac:6a:c7:cf:7a:
                    86:8e:11:a8:40:a2:bf:38:eb:e6:ed:6d:ad:0f:9a:
                    24:33:42:8c:e2:10:27:9b:69:2d:b0:e0:ac:fd:ea:
                    73:02:a6:00:08:aa:c1:4c:1f:09:a5:bf:8f:36:25:
                    fd:e6:77:0d:d2:46:f0:18:85:ae:aa:23:e7:33:43:
                    23:d2:49:4a:7d:a2:e6:93:c1:87:70:d6:7c:0d:69:
                    09:19:f5:9f:94:d5:09:da:56:79:f4:c2:c4:c9:ea:
                    33:ee:d4:d8:a0:60:df:4a:99:32:cb:3a:3a:9c:01:
                    4d:ac:2d:b2:90:49:5a:7d:02:2a:ea:b2:7f:a4:2f:
                    5b:81:ad:3f:fe:42:6c:c0:e1:42:6d:26:49:5e:70:
                    38:e5:40:ff:1e:c1:aa:fe:53:b9:e2:54:26:89:d8:
                    56:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:CD:F0:EE:07:6E:52:AB:E8:6C:68:79:30:3E:BF:DE:49:C5:E4:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6c2bad5d-87f2-4b63-bca8-ff7089b0bd9a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6c2bad5d-87f2-4b63-bca8-ff7089b0bd9a/dc37554a8675388bc7f6946f7ce2c2de7afa9466.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:6b90::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273040

    Signature Algorithm: sha256WithRSAEncryption
         0d:b6:be:d5:3b:2f:f6:95:30:2a:8d:8b:22:34:93:09:97:ca:
         21:a1:15:79:f8:41:f3:ac:b5:9d:5f:88:83:f0:77:b4:e1:f3:
         26:15:8c:67:19:a2:9b:1c:c1:8f:85:fe:fd:62:f9:c5:1b:b0:
         2f:00:b5:27:7c:f8:32:3b:65:d0:63:be:2f:a0:c7:f7:9f:fc:
         4b:f1:bb:49:c8:ed:c7:64:fa:a9:a9:90:93:c0:e0:ef:79:f5:
         d4:d9:8b:3f:a0:53:69:5e:13:20:57:76:b8:5e:0b:80:46:56:
         87:e6:e6:86:a1:a9:d1:9f:2c:f0:50:34:ce:8b:8c:cd:38:8d:
         b0:e1:43:3f:c0:51:44:93:19:38:32:1c:b0:3f:c0:6e:f2:30:
         c6:78:cc:53:b8:01:8d:49:69:ef:c7:42:a7:3f:90:c5:df:15:
         b7:43:55:44:7d:0a:7f:be:73:5a:2b:2b:d3:6a:09:85:9f:db:
         b1:bf:53:36:c0:b2:09:6a:36:61:58:8e:0b:88:08:ff:d9:c7:
         a3:b1:20:82:85:53:14:95:6f:47:a7:81:84:2f:fa:ad:94:b3:
         a9:f3:6f:ab:ee:5f:9e:67:98:c5:29:28:96:6d:88:3e:c2:aa:
         36:42:ef:d8:0c:44:df:35:6d:b4:67:cf:d1:dc:cb:5f:e1:ef:
         4f:bd:c8:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----