Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dfbe300aabc348d765164558580cee51843f1a9d.cer
File:                     dfbe300aabc348d765164558580cee51843f1a9d.cer (raw, json)
Hash identifier:          F98SvGUeq1EJBaH2JTHJPOXILVYf31h2jVbAYaAIO7U=
Subject key identifier:   91:2C:51:08:41:02:17:C2:7D:D2:46:E7:93:2E:72:2E:20:B8:09:F9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C81F99
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/dfbe300aabc348d765164558580cee51843f1a9d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 24 May 2022 22:17:31 +0000
Certificate not after:    Fri 05 Jan 2024 14:26:43 +0000
Subordinate resources:    IP: 2801:10:e800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13115289 (0xc81f99)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 24 22:17:31 2022 GMT
            Not After : Jan  5 14:26:43 2024 GMT
        Subject: CN=dfbe300aabc348d765164558580cee51843f1a9d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:6b:95:b1:4f:7d:04:41:61:2f:f0:0c:ec:ff:
                    66:a5:ef:c9:c4:76:3b:d6:5f:14:89:29:8f:5c:71:
                    91:99:21:a2:6a:09:ed:57:16:b1:8a:a0:8d:7f:c6:
                    f7:df:92:65:07:44:55:ba:0f:8d:71:5a:44:c1:95:
                    f2:1f:e9:33:1c:9a:ca:9b:f0:b4:59:37:99:a8:4d:
                    b6:48:9e:b8:d9:8a:be:df:aa:e4:0e:b8:ef:3c:bb:
                    4a:e0:ef:5e:b4:86:e7:b5:85:68:c6:a0:c4:d8:92:
                    d3:ed:2b:f9:c0:ff:16:ed:2b:c6:70:57:b7:9d:9b:
                    e2:c1:7a:a1:2a:11:c7:ab:4d:cd:23:5d:b5:0f:82:
                    19:fa:65:39:38:96:06:b7:0e:8b:cf:bc:05:69:02:
                    49:96:59:08:d5:60:fe:aa:ce:19:10:e7:cf:c4:b2:
                    95:75:64:fe:52:be:a6:b5:f1:75:95:30:ab:ac:ee:
                    cd:fe:c3:4c:7f:8d:ac:02:92:df:f4:85:c7:40:73:
                    aa:5e:e2:21:f2:7d:e5:05:69:01:f2:63:b4:eb:7d:
                    05:79:c7:a2:87:97:b2:4d:80:e6:12:30:9b:dc:25:
                    fd:8c:a4:a7:0d:4c:8b:09:7c:45:09:af:45:32:c3:
                    2a:ff:21:55:f7:85:b7:dd:3c:2c:be:f9:0e:a8:bf:
                    32:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:2C:51:08:41:02:17:C2:7D:D2:46:E7:93:2E:72:2E:20:B8:09:F9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e889151e-be93-438d-8b11-24315bb95aad/dfbe300aabc348d765164558580cee51843f1a9d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:10:e800::/48

    Signature Algorithm: sha256WithRSAEncryption
         a1:c7:bf:fc:4f:70:57:a9:dd:58:f2:c7:df:57:3f:3e:0d:23:
         c8:63:05:4c:a0:0e:0f:3f:66:13:5a:38:2c:f9:b7:fb:a2:8a:
         a9:be:51:8e:27:c5:21:8f:8b:41:ba:3f:95:26:21:32:17:9a:
         00:ef:4c:e6:4b:e8:fd:0b:8f:90:7d:ca:df:b9:d8:c3:11:e0:
         51:32:7a:bc:9a:72:3e:b5:de:ba:6f:a8:43:29:15:01:80:37:
         d8:29:f2:eb:01:c4:e0:4e:f5:71:79:a8:bc:92:de:3b:a7:3e:
         fc:a7:68:f1:38:cf:ae:5e:c9:fc:dd:b2:68:46:73:c1:d1:a2:
         f8:a2:6b:4b:36:64:36:f1:27:0a:87:43:0c:d1:df:b0:9d:61:
         bd:8f:e0:05:ce:0d:9a:f9:56:7b:d6:25:89:34:fa:a7:db:6f:
         ee:2a:7d:7a:d4:27:7e:61:b2:d4:b1:2e:1f:3d:de:b7:d9:28:
         e4:35:91:a5:9e:f1:bb:16:a3:86:1f:8a:ec:a9:20:20:48:91:
         eb:ce:7f:62:fb:88:21:d4:12:79:92:f5:a6:f7:7e:9f:c6:f1:
         2b:3e:14:5e:21:cb:fd:7f:7d:e9:df:33:be:1c:d2:75:47:7e:
         6d:ce:bd:dc:88:61:07:56:09:71:9c:39:07:c9:06:7a:2f:3c:
         f1:29:02:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----