Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/eaf87bbe2c4cb58d24b70289570792b363eaa661.cer
File:                     eaf87bbe2c4cb58d24b70289570792b363eaa661.cer (raw, json)
Hash identifier:          clmHHqrTInCq6H2eg63EeSmSSzhx13zUyhYJdBnfu8g=
Subject key identifier:   9A:16:AD:26:12:C9:C4:7C:6C:12:07:43:F3:54:DE:38:99:18:A7:0E
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F47387
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e288265a-2a5b-4cbc-9f98-3ad38ee85888/eaf87bbe2c4cb58d24b70289570792b363eaa661.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e288265a-2a5b-4cbc-9f98-3ad38ee85888/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Sep 2022 02:19:38 +0000
Certificate not after:    Tue 04 Feb 2025 21:10:50 +0000
Subordinate resources:    AS: 272112
                          IP: 2803:f10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16020359 (0xf47387)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 28 02:19:38 2022 GMT
            Not After : Feb  4 21:10:50 2025 GMT
        Subject: CN=eaf87bbe2c4cb58d24b70289570792b363eaa661
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:5e:5d:98:c5:1a:1f:bd:a7:9b:4b:1a:43:6d:
                    e2:a3:19:5b:5a:04:54:0d:f2:18:c6:12:b4:97:15:
                    68:e6:a7:62:14:47:55:3e:8e:1e:81:21:ad:4d:d4:
                    47:d6:1a:c7:cc:50:7e:af:45:92:bb:20:25:51:a1:
                    b4:32:f5:12:2b:1b:fe:4d:59:3a:cc:00:64:64:14:
                    5a:04:a3:e1:a1:09:63:fa:86:a5:43:3a:bc:c4:64:
                    88:cc:6d:c3:36:f3:af:2b:15:fc:4c:9a:af:7a:42:
                    d5:22:94:ff:0f:80:05:7d:3f:6c:59:5e:d2:ba:0d:
                    15:01:03:66:0b:58:7a:7b:29:86:b4:83:0a:ba:89:
                    9f:98:cf:59:e9:8e:d2:59:8e:88:60:36:fe:bb:e6:
                    b4:64:86:1d:c1:83:4e:13:16:dc:e0:2d:48:3b:ba:
                    fc:f5:d5:3a:b1:70:c3:06:9a:28:db:48:cf:eb:2e:
                    37:1f:cf:84:c2:75:d3:4e:1c:fb:3a:b4:d3:b3:7b:
                    03:0c:ef:99:e1:44:58:ac:17:8a:69:9a:86:49:52:
                    83:e5:df:05:df:33:66:6e:84:28:f2:be:80:05:62:
                    4e:13:eb:71:60:53:f2:1a:dd:5b:5e:79:30:ae:b9:
                    80:c2:23:40:4e:ae:30:fe:dc:c2:c5:5d:45:fa:5f:
                    78:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:16:AD:26:12:C9:C4:7C:6C:12:07:43:F3:54:DE:38:99:18:A7:0E
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e288265a-2a5b-4cbc-9f98-3ad38ee85888/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e288265a-2a5b-4cbc-9f98-3ad38ee85888/eaf87bbe2c4cb58d24b70289570792b363eaa661.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:f10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272112

    Signature Algorithm: sha256WithRSAEncryption
         86:05:fc:bc:69:ac:d6:c3:73:5b:a9:83:34:b5:ff:33:15:de:
         dd:3a:e7:52:3f:4f:a3:2d:c2:87:3a:a4:ce:82:06:23:47:d3:
         bc:e7:8a:a5:86:13:af:d7:cd:03:78:7d:c3:94:e6:f4:05:5a:
         6c:79:fa:22:1e:07:7a:91:5e:4b:60:27:d5:26:1f:60:1d:37:
         1a:98:3b:f5:a2:08:b1:9d:2e:fa:d6:f7:da:ff:01:ae:7c:45:
         12:55:16:d4:60:81:51:df:43:50:b2:a8:53:fc:60:ed:8e:2d:
         fa:4e:62:68:f6:79:b7:52:be:09:1e:c4:3a:88:f1:da:74:65:
         75:ce:b0:c0:80:c9:1b:03:9f:4c:fc:e6:9c:6e:9e:60:5b:ef:
         53:10:6b:75:4d:1e:b6:18:92:92:93:0d:74:96:31:ba:41:e3:
         db:67:2e:fd:6d:b7:e2:69:7c:96:fb:a1:04:9a:8a:d2:c8:cf:
         91:2f:af:d5:ca:2c:b1:08:f1:a8:09:d7:19:26:1d:93:61:1b:
         3a:9e:96:ef:ce:fa:37:8a:3b:df:90:8c:e9:02:0f:7f:08:20:
         e5:63:a5:7c:32:75:e9:20:73:f4:88:22:f5:f6:5b:f5:48:56:
         2e:0a:11:02:67:ec:5b:50:0f:ab:2d:c3:ae:e5:21:70:52:d2:
         1d:e0:54:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----