Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e86650d1b13c8895115717571ff7a5f80f488c44.cer
File:                     e86650d1b13c8895115717571ff7a5f80f488c44.cer (raw, json)
Hash identifier:          v03adw2JmQF19ISqN0EM+JuQS9sq4WayqcKSF2JWLkY=
Subject key identifier:   46:02:55:34:B3:69:46:E8:A2:96:8B:B2:A1:C0:77:69:13:AC:C6:55
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01102710
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f81a8115-e127-48cd-9ec4-9c9326a7c4e0/e86650d1b13c8895115717571ff7a5f80f488c44.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f81a8115-e127-48cd-9ec4-9c9326a7c4e0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 Apr 2024 23:33:47 +0000
Certificate not after:    Sun 14 Dec 2025 05:00:00 +0000
Subordinate resources:    AS: 273207
                          IP: 2803:d650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17835792 (0x1102710)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 23:33:47 2024 GMT
            Not After : Dec 14 05:00:00 2025 GMT
        Subject: CN=e86650d1b13c8895115717571ff7a5f80f488c44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:04:07:80:f8:82:d4:cd:d9:d6:25:90:39:67:
                    aa:bb:6b:1f:fd:33:79:fb:fb:17:54:a7:96:28:77:
                    34:fb:e5:fb:5c:b8:1d:44:ae:5b:70:4e:89:a3:ec:
                    07:c3:34:9c:07:35:0f:7f:7a:82:ae:d2:7f:61:d5:
                    3e:21:3d:56:0e:04:e8:4e:c6:dc:5f:43:75:86:31:
                    a5:9a:1d:4b:92:d9:8f:55:7a:7e:9c:b9:87:5e:27:
                    48:f0:cf:6c:00:35:3a:8a:c4:42:35:2d:e3:eb:b0:
                    a4:5a:fc:31:4c:4e:22:7c:57:dd:7d:f5:47:db:9a:
                    16:94:78:74:1b:bd:86:42:40:69:9a:f5:02:14:98:
                    5f:7e:53:bf:49:43:9a:68:fa:bd:39:f0:50:56:00:
                    d2:cf:59:7f:42:e5:19:7d:c7:b4:30:92:13:3d:3d:
                    c5:33:47:6b:4f:d2:79:bd:d3:10:49:aa:b5:d5:af:
                    45:8d:3b:31:65:f8:2d:4c:d8:6d:e6:31:c6:d8:aa:
                    ea:86:e8:ac:fc:a5:e2:fe:ec:9f:2d:e7:b1:4e:23:
                    8d:c1:9e:02:a9:5c:b2:2f:1f:bf:56:24:cc:32:3a:
                    3f:6a:74:47:06:f2:3b:42:e0:cc:69:50:88:13:30:
                    7d:3f:db:1b:2a:85:cb:c8:df:e8:bc:1a:56:e7:63:
                    c5:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:02:55:34:B3:69:46:E8:A2:96:8B:B2:A1:C0:77:69:13:AC:C6:55
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f81a8115-e127-48cd-9ec4-9c9326a7c4e0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f81a8115-e127-48cd-9ec4-9c9326a7c4e0/e86650d1b13c8895115717571ff7a5f80f488c44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:d650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273207

    Signature Algorithm: sha256WithRSAEncryption
         6b:3d:cf:db:be:5a:4f:e6:3d:49:a1:ae:e6:fa:60:6d:b2:e4:
         4a:03:1a:97:e8:e2:04:e5:f8:b0:87:a4:1d:55:29:c5:4b:92:
         e1:9f:1c:47:b4:e8:40:92:1e:6e:80:3f:5a:2e:32:d7:41:71:
         1b:5b:5e:cb:b4:3b:4c:9a:35:5b:77:92:f6:fe:b5:1e:9c:b2:
         d9:06:01:7f:6f:05:c2:14:f7:27:45:c1:06:19:d6:10:09:85:
         f5:ed:0c:fc:9c:12:8b:5d:2f:d2:4e:1a:3f:a1:12:5d:91:ff:
         62:0f:60:c2:ee:3e:a7:f7:3a:83:4e:c1:d2:40:43:78:db:0b:
         92:d4:20:6c:1a:10:28:c7:40:71:2a:ab:a5:47:ca:89:5b:28:
         32:20:fb:56:5c:0f:4e:c5:48:51:63:8e:0c:12:f7:18:38:33:
         5b:92:03:72:37:6f:02:d9:da:14:50:23:6d:d9:c5:4b:c8:8e:
         de:8c:d0:47:37:6d:e2:ac:cb:8a:f1:2e:86:5d:56:4a:8e:85:
         5f:a9:00:ae:7b:9a:15:af:75:be:30:31:18:d8:04:1b:47:ad:
         48:0b:20:db:71:46:3c:5e:f7:f9:cb:8e:1b:10:e0:fd:d8:e5:
         50:4f:b2:fb:1b:57:f6:be:53:d1:84:26:78:5f:c5:3a:0f:9c:
         8d:28:08:50
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----