Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa1bdba2763d6d69d27db93e4e12e7510647ee54.cer
File:                     fa1bdba2763d6d69d27db93e4e12e7510647ee54.cer (raw, json)
Hash identifier:          Y63z/PkuKC225JJOhTAScV/oMwPvgjlM4q2LDRsLwzc=
Subject key identifier:   AF:9A:93:54:D7:EE:56:56:07:54:86:13:37:7B:90:C1:C5:16:37:5B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FFDBA5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f592e40d-26cb-4d68-96dc-2d79d38041f7/fa1bdba2763d6d69d27db93e4e12e7510647ee54.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f592e40d-26cb-4d68-96dc-2d79d38041f7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 31 Oct 2023 19:58:57 +0000
Certificate not after:    Sat 16 Aug 2025 17:43:25 +0000
Subordinate resources:    AS: 273105
                          IP: 2803:850::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16767909 (0xffdba5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 31 19:58:57 2023 GMT
            Not After : Aug 16 17:43:25 2025 GMT
        Subject: CN=fa1bdba2763d6d69d27db93e4e12e7510647ee54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:88:63:3a:8c:f4:f7:7d:be:5c:55:2b:b0:2b:a3:
                    18:db:5d:ac:df:8f:a5:07:fa:62:a7:ec:ac:3a:65:
                    4e:74:43:6e:00:8b:81:a5:05:78:8c:0f:a5:bf:09:
                    da:18:3e:2a:ec:4c:cb:ec:73:74:1d:52:2f:b1:48:
                    5b:3b:9e:05:e6:1e:14:c7:39:0e:8c:d9:c3:e3:93:
                    c5:07:75:30:98:10:e1:63:4d:79:89:03:08:16:62:
                    6d:4b:70:b7:b4:1b:88:53:17:d1:b7:dc:32:72:d3:
                    f0:58:0c:13:ae:a8:e5:f5:f5:6e:a5:8e:86:f9:f3:
                    8e:8b:47:21:71:e8:af:ed:7f:ed:ff:b9:d8:e0:fe:
                    1d:88:e4:8b:53:cc:35:98:16:a4:fd:88:f6:2e:14:
                    51:3c:52:52:08:f9:73:37:26:ec:02:6c:97:4f:47:
                    b5:1e:a7:29:fb:d1:40:00:df:c5:68:b7:c6:cf:ed:
                    16:5e:26:86:a6:40:cb:2d:cc:8c:55:26:4e:e3:39:
                    49:a4:87:15:23:3f:7f:f5:73:be:99:f4:b6:6f:12:
                    87:ee:5c:bf:bd:03:e0:b3:08:c5:22:56:6a:45:86:
                    19:70:b8:5f:f2:02:5b:cb:11:d7:81:ac:96:8e:00:
                    8c:df:4f:2c:50:97:3e:ee:fc:6e:d4:ad:ee:60:83:
                    fe:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9A:93:54:D7:EE:56:56:07:54:86:13:37:7B:90:C1:C5:16:37:5B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f592e40d-26cb-4d68-96dc-2d79d38041f7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f592e40d-26cb-4d68-96dc-2d79d38041f7/fa1bdba2763d6d69d27db93e4e12e7510647ee54.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:850::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273105

    Signature Algorithm: sha256WithRSAEncryption
         77:9d:59:8c:48:99:f9:61:14:e1:76:08:64:a2:c3:04:47:a7:
         52:bb:e8:34:c3:66:43:df:46:74:ee:ef:7b:f3:4e:69:12:dd:
         22:90:ca:03:2f:58:02:11:30:7a:f0:09:01:8a:5c:4b:a6:96:
         f8:70:88:75:70:35:e3:fe:61:cf:19:a0:b8:ff:10:a7:3e:30:
         5c:78:86:fa:5a:48:7d:bd:8c:8b:36:a0:1d:66:3a:5c:24:8a:
         30:91:0f:32:ce:c3:62:5b:34:4a:ab:f9:6a:c6:25:fb:df:f3:
         41:58:c4:cf:ac:1f:c0:54:95:02:d1:1c:20:7d:96:3b:48:59:
         e5:9e:ae:52:3c:a0:c3:61:c0:9c:a9:0e:90:c9:ea:fd:dd:ab:
         fb:22:9d:07:63:88:1c:39:e9:af:67:18:ba:0c:81:5b:7f:55:
         f5:48:d0:d9:96:34:b9:af:c2:98:84:71:d3:c1:2d:3c:d6:fa:
         fc:53:1e:f1:bf:d6:3f:fb:f9:2b:9e:37:93:23:e2:cb:e9:9d:
         a3:00:01:99:d6:c9:53:f0:b3:73:05:de:0d:1c:8f:0a:79:e5:
         43:b0:a2:0c:7d:83:9c:3e:fb:1d:1e:8f:e6:c7:f2:c0:24:d7:
         1a:db:9b:9d:a2:68:52:00:76:8b:64:a8:8a:4b:d2:53:45:89:
         1f:57:73:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----