Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3bd1c715ba5408d31942fc91e9d12b559a7b1d9.cer
File:                     f3bd1c715ba5408d31942fc91e9d12b559a7b1d9.cer (raw, json)
Hash identifier:          xzq5BIaj+3nNoy91kefbKZg1vAq3buRyF/aHHnSTBeE=
Subject key identifier:   60:60:CE:5F:9F:61:0A:9D:FC:B2:B1:05:75:01:B4:0C:76:90:C3:EE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F83636
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/241ed4e8-0e5a-4ff0-b63b-be944e9b425f/f3bd1c715ba5408d31942fc91e9d12b559a7b1d9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/241ed4e8-0e5a-4ff0-b63b-be944e9b425f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 12:02:41 +0000
Certificate not after:    Tue 22 Oct 2024 20:10:13 +0000
Subordinate resources:    IP: 168.0.84.0/22
                          IP: 2803:f940::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16266806 (0xf83636)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 12:02:41 2023 GMT
            Not After : Oct 22 20:10:13 2024 GMT
        Subject: CN=f3bd1c715ba5408d31942fc91e9d12b559a7b1d9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:42:26:7a:91:3b:8b:1f:1c:21:e4:8b:f9:dd:
                    b5:9e:b0:8a:e6:ba:7d:ed:b7:f7:32:5e:4a:9a:38:
                    27:d2:2e:87:29:35:ce:5a:76:ce:b8:3b:1c:bd:96:
                    56:b8:40:3d:5e:3d:c3:64:98:af:1e:3d:92:1c:10:
                    8e:67:b0:39:24:60:9d:66:45:0e:69:1b:f6:c9:d5:
                    df:79:93:e8:07:69:c8:bf:4b:2f:f1:83:f3:d3:8b:
                    f1:44:72:18:c2:05:49:6b:48:99:f1:82:71:f7:e9:
                    dc:f4:12:a2:bc:1e:79:d9:6c:d6:0b:10:fb:2a:b5:
                    b8:e7:54:3a:7a:1d:71:b7:61:92:e6:aa:39:4c:c3:
                    f0:eb:36:f0:95:1b:9f:f0:ed:bb:ec:4a:46:a9:ad:
                    1d:5a:18:46:37:a7:33:b3:e0:da:d3:39:fa:9b:d8:
                    41:2f:2e:ec:ca:31:3a:c4:31:a1:37:0e:8c:a4:f2:
                    6e:d9:e8:2b:6d:77:05:2d:f4:e4:ad:51:2f:a1:ba:
                    b1:91:91:41:fb:1a:22:d9:3e:f8:c3:c3:8f:d6:8a:
                    bd:34:6d:e6:64:79:db:7e:e0:c5:6f:e4:c4:e1:48:
                    d6:b0:51:62:34:16:25:96:9e:a1:ac:fa:7d:ea:41:
                    6c:a6:73:ab:47:9a:20:25:79:ec:13:f7:47:ab:44:
                    c5:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:60:CE:5F:9F:61:0A:9D:FC:B2:B1:05:75:01:B4:0C:76:90:C3:EE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/241ed4e8-0e5a-4ff0-b63b-be944e9b425f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/241ed4e8-0e5a-4ff0-b63b-be944e9b425f/f3bd1c715ba5408d31942fc91e9d12b559a7b1d9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.0.84.0/22
                IPv6:
                  2803:f940::/32

    Signature Algorithm: sha256WithRSAEncryption
         1f:58:ee:dc:02:98:95:7e:ed:10:f9:83:24:4a:0d:f3:e5:8d:
         35:2c:d1:6f:24:a4:f6:5c:ee:8f:8d:97:90:96:40:55:6a:87:
         4c:cf:be:5c:e2:8f:d5:b1:d6:c8:28:a5:d8:ca:3d:30:90:a9:
         a6:d4:e0:0e:16:e5:ff:39:d5:bc:40:aa:4f:4a:53:2d:d5:92:
         6e:d8:62:ef:e1:76:a4:95:8f:a7:c0:cb:fb:99:9c:65:c2:42:
         18:fa:49:09:66:e9:29:cb:24:20:9f:4d:6f:21:2d:7b:5c:7e:
         ae:06:70:bf:cb:3a:fb:ee:57:ad:8c:58:6a:b1:a0:ba:ce:5f:
         ca:85:ff:28:01:4d:ef:79:8c:da:9b:13:c4:39:b6:d4:48:e3:
         03:49:b5:a8:7a:64:71:98:46:30:f4:42:75:ee:f1:41:7c:89:
         51:40:6b:99:0c:47:73:bc:e7:3f:50:0c:f5:da:80:24:09:8e:
         e7:ea:88:92:52:5a:29:51:69:d2:96:d2:76:17:03:08:8e:ca:
         50:cc:11:73:32:6a:ea:25:85:c4:c2:f3:f5:7f:fd:0b:92:66:
         7e:de:f5:27:2e:ec:8d:a1:8b:09:e5:67:39:61:c6:fa:cd:d6:
         ce:88:c9:02:11:b8:ab:c1:05:71:6c:fa:d4:ce:49:cc:b3:55:
         08:ed:69:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----