Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3fa0f318f37e0f4a6b7e2e79fa4f8304980cd6b.cer
File:                     f3fa0f318f37e0f4a6b7e2e79fa4f8304980cd6b.cer (raw, json)
Hash identifier:          T1+EtvoaWvpztU/JnFam4hubsgxdI90ZC1YpGR24b4A=
Subject key identifier:   CC:65:04:A9:4D:62:05:7F:9B:91:4A:03:B3:89:CE:8B:C3:A7:57:85
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5E3FA
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8ae8384d-0333-43bf-81e5-7e4b8d2ffcc9/f3fa0f318f37e0f4a6b7e2e79fa4f8304980cd6b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8ae8384d-0333-43bf-81e5-7e4b8d2ffcc9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 14:36:57 +0000
Certificate not after:    Mon 16 Dec 2024 16:07:39 +0000
Subordinate resources:    AS: 272953
                          IP: 2803:1990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15066106 (0xe5e3fa)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 14:36:57 2023 GMT
            Not After : Dec 16 16:07:39 2024 GMT
        Subject: CN=f3fa0f318f37e0f4a6b7e2e79fa4f8304980cd6b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:38:da:38:0b:fe:35:57:9e:70:c0:89:34:a7:
                    27:7e:49:bd:40:d4:6f:4f:03:7e:7c:82:6b:2f:dc:
                    3c:6d:57:66:3e:5f:7b:83:e2:83:bf:b6:9f:1a:b7:
                    0b:78:32:2c:9c:7e:24:b5:8f:39:e4:aa:11:56:f3:
                    d8:bc:48:ae:fe:a9:e7:05:35:0e:d4:c0:3c:a7:bd:
                    b6:f9:64:02:1d:ec:dc:69:3c:2b:1a:10:a0:c8:90:
                    fc:a0:34:f0:f1:05:9a:0d:0c:f4:36:b9:35:7e:11:
                    99:f4:ad:15:f4:62:76:f9:16:6b:a3:87:ac:df:b3:
                    e3:93:67:5a:44:cd:4c:f3:4b:7e:ae:5d:16:e7:83:
                    b0:02:2e:56:9f:2c:86:d8:1e:e2:7a:ac:cb:ba:d9:
                    5c:4c:d7:7c:5b:8b:a9:a7:46:31:bd:99:c3:db:fa:
                    df:57:ec:92:62:fc:d8:54:5d:5c:55:13:4c:3f:3a:
                    25:c2:74:47:c8:07:60:a0:c8:38:16:28:8b:7d:7b:
                    fb:fa:97:16:cd:71:09:cf:48:86:89:5e:ef:d3:d3:
                    3b:87:ec:63:ff:73:d5:e8:71:bf:b6:50:d6:a4:3f:
                    91:61:ba:74:9d:a6:a2:7c:72:98:e9:05:1a:85:fb:
                    94:87:fb:99:b4:b7:0b:80:e8:d6:28:fb:55:b0:f6:
                    88:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:65:04:A9:4D:62:05:7F:9B:91:4A:03:B3:89:CE:8B:C3:A7:57:85
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8ae8384d-0333-43bf-81e5-7e4b8d2ffcc9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8ae8384d-0333-43bf-81e5-7e4b8d2ffcc9/f3fa0f318f37e0f4a6b7e2e79fa4f8304980cd6b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:1990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272953

    Signature Algorithm: sha256WithRSAEncryption
         9c:44:75:7f:ed:2f:1b:02:83:31:12:27:5d:46:9d:b0:b9:65:
         21:d3:64:72:b8:54:86:d6:6a:8a:76:87:1f:92:79:82:d9:08:
         4e:84:ae:01:71:5f:88:39:26:15:27:06:f8:89:2d:a0:cb:0d:
         03:ad:d8:aa:99:81:ce:73:b8:ca:57:39:be:43:5c:a7:88:47:
         af:26:7d:e6:22:e0:78:b5:90:c9:c5:c7:ab:bf:ee:e5:e7:d5:
         fb:39:9b:33:c6:96:84:5c:eb:1e:52:7e:7e:e8:2b:59:61:4f:
         8c:92:05:58:07:05:4a:c5:f4:76:73:68:a9:da:65:13:ca:a3:
         ef:39:02:e0:f2:04:31:57:a3:06:ab:d4:3b:4c:b1:6b:45:6a:
         2a:43:d5:b2:65:e9:60:4d:ba:5e:53:74:9b:3f:0a:5e:e9:42:
         36:87:ca:19:46:13:b8:fb:0b:c7:ed:bc:2a:6c:df:87:ae:6f:
         f2:4c:54:ff:20:24:ed:e2:23:46:07:cc:0d:10:12:47:c7:0e:
         da:9c:1e:4d:dc:01:f3:bc:29:ac:5f:fe:c3:ff:45:1a:41:04:
         55:30:1e:0d:ae:18:f4:25:d3:eb:ff:7b:4f:0e:f1:bf:83:c3:
         d8:69:ae:09:cb:27:02:ad:1b:43:d0:6c:e9:61:f0:df:06:4d:
         a6:dc:48:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----