Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f4a2450a25177c432e040f14a75e6d0dc5fdf219.cer
File:                     f4a2450a25177c432e040f14a75e6d0dc5fdf219.cer (raw, json)
Hash identifier:          uU11JQzmdo3Fy+9daWAhh30Rf46xjH2C0viL1Q5aDaQ=
Subject key identifier:   EA:D4:B6:4D:B5:8B:88:AD:50:A1:F5:6B:EA:2C:DD:3B:C3:40:06:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FAC754
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6f3da18d-4a3b-47b1-9ca0-9193eaa2e669/f4a2450a25177c432e040f14a75e6d0dc5fdf219.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6f3da18d-4a3b-47b1-9ca0-9193eaa2e669/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 25 Sep 2023 20:33:56 +0000
Certificate not after:    Tue 10 Jun 2025 06:00:00 +0000
Subordinate resources:    AS: 273090
                          IP: 2803:8050::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16435028 (0xfac754)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 25 20:33:56 2023 GMT
            Not After : Jun 10 06:00:00 2025 GMT
        Subject: CN=f4a2450a25177c432e040f14a75e6d0dc5fdf219
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:b9:e0:60:c3:31:f1:be:f5:c6:e5:2a:6f:79:
                    28:e9:47:f3:be:73:4e:9e:d0:48:39:69:3b:9e:48:
                    eb:d0:75:c3:a7:10:5a:a9:dd:68:5a:a4:42:f2:22:
                    e1:ba:89:6a:99:d5:e6:33:bd:68:b3:a5:92:0d:0e:
                    98:d2:a8:c8:e8:91:d3:b6:9d:07:49:20:18:1d:5e:
                    5c:12:7c:1a:27:75:05:0b:bb:4f:61:31:04:01:ed:
                    5f:63:c9:f2:b2:37:a9:27:b2:25:a2:3b:d3:b5:ee:
                    68:cb:58:e8:7a:93:bf:ff:ec:f3:de:77:2e:af:81:
                    79:ee:43:c3:85:bc:ca:13:6d:45:7b:a0:f8:ac:19:
                    df:70:d8:15:ec:6e:e0:88:b0:06:af:02:62:c7:15:
                    20:31:60:71:f5:44:21:fd:0f:18:ee:33:4b:64:f3:
                    77:cb:85:cb:05:78:72:bb:c4:91:52:70:ff:88:e2:
                    dd:7b:fe:b1:b7:2c:ba:97:39:31:7f:f9:44:39:18:
                    86:d1:b8:06:63:8a:53:d1:f4:6e:13:ba:62:43:47:
                    7f:15:9d:1d:d7:b9:c9:54:8e:49:4a:2c:6e:ac:0d:
                    92:e1:cf:c0:8a:df:24:48:94:ac:40:35:ab:4f:0c:
                    08:89:15:cb:62:dd:9a:8a:ad:ec:32:d4:f3:31:84:
                    59:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:D4:B6:4D:B5:8B:88:AD:50:A1:F5:6B:EA:2C:DD:3B:C3:40:06:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3da18d-4a3b-47b1-9ca0-9193eaa2e669/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6f3da18d-4a3b-47b1-9ca0-9193eaa2e669/f4a2450a25177c432e040f14a75e6d0dc5fdf219.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:8050::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273090

    Signature Algorithm: sha256WithRSAEncryption
         c7:8d:43:6f:d5:b2:b4:11:34:c3:b8:ba:08:b3:4a:17:0c:7e:
         f6:4f:84:0a:19:e8:5b:1b:b2:fc:1a:fb:6a:eb:49:02:0f:00:
         4c:1f:1a:5a:51:82:e7:ec:fd:40:f0:af:af:7d:43:87:b7:e7:
         8b:45:76:9d:7a:a5:60:3f:68:c2:a3:c9:b8:ab:46:54:c4:d8:
         86:6f:c3:f8:26:c0:5e:5c:c5:35:30:91:95:44:89:a6:cc:c4:
         8c:79:f1:68:d1:20:09:0e:5a:71:0c:d6:8a:06:89:49:fd:4a:
         4a:d0:a8:7d:5b:61:26:44:9c:9b:28:80:af:c6:68:8f:8f:d1:
         26:da:93:cb:27:23:f0:36:14:0d:12:9f:f9:9d:4a:43:a3:4f:
         fc:3f:df:c6:c1:b0:12:83:e2:6d:84:84:a9:9d:aa:8a:da:f7:
         53:e3:2a:94:83:0d:35:9e:4b:7e:4b:63:7c:af:ac:c8:42:af:
         1b:55:1e:32:98:e6:f7:19:98:d8:63:ec:07:ca:ab:85:f7:4d:
         d4:67:9d:6b:d4:19:05:ee:de:d7:35:30:f7:b4:ee:2c:ff:b2:
         36:86:0c:1a:b7:8e:fa:a0:df:e6:77:42:94:cf:04:9b:d9:35:
         67:de:92:9a:92:7f:70:85:25:7f:ec:60:2a:ed:3d:3c:ec:7c:
         49:a2:7e:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----