Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffa3aa521aaba1e2caad64772c41f20bb5974768.cer
File:                     ffa3aa521aaba1e2caad64772c41f20bb5974768.cer (raw, json)
Hash identifier:          HfpicpJSJ3sHz+wHRDaK+hMz+dDY5q/PyEHzyd1dKOs=
Subject key identifier:   8F:98:03:54:F8:44:2F:F8:7F:E0:BB:4E:84:E6:96:75:FA:4E:42:23
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010C8BE2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b5f6138a-3ce0-4e7e-bbe4-4bdf778066fb/ffa3aa521aaba1e2caad64772c41f20bb5974768.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b5f6138a-3ce0-4e7e-bbe4-4bdf778066fb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 03 Mar 2024 01:34:12 +0000
Certificate not after:    Thu 01 Jan 2026 17:25:04 +0000
Subordinate resources:    AS: 273192
                          IP: 2803:650::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17599458 (0x10c8be2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  3 01:34:12 2024 GMT
            Not After : Jan  1 17:25:04 2026 GMT
        Subject: CN=ffa3aa521aaba1e2caad64772c41f20bb5974768
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:c9:ad:44:60:9a:f4:9e:63:f5:08:29:2b:6e:
                    43:5b:bc:55:8e:5c:31:0c:d7:a5:28:6b:22:0e:e7:
                    93:4a:4c:03:71:79:14:dc:6a:b9:d7:0d:a3:77:45:
                    2b:60:79:55:65:cc:ad:55:e9:38:67:a9:d0:ea:66:
                    58:c5:b9:09:0a:d4:6a:89:b1:eb:a8:d3:f5:0a:65:
                    d4:06:0f:e6:80:03:d6:cd:5c:f1:e6:45:70:87:2a:
                    1a:f5:84:e0:49:46:bf:51:e8:8c:ef:df:73:3f:f4:
                    a1:d6:93:f3:6a:0f:a3:48:75:83:6c:1f:56:88:49:
                    5b:18:69:4f:0b:69:dd:50:54:a1:39:87:d5:68:05:
                    5e:c3:13:f5:39:02:e2:4c:fb:08:25:10:6e:8f:9c:
                    45:01:ba:be:0c:05:0a:60:af:78:ab:28:8a:4b:d2:
                    63:19:d3:15:a5:f2:2b:0a:15:de:ef:87:7d:89:13:
                    da:9f:14:2a:96:82:93:8c:ec:8c:2c:f9:05:fd:ab:
                    ec:d5:b9:a5:a2:53:e2:3c:5b:ca:b4:20:92:61:b4:
                    87:a4:d1:26:8f:05:38:46:26:27:a8:0f:e2:6b:68:
                    15:a1:04:57:f0:f4:3f:19:cc:33:c5:f7:94:4f:bb:
                    a7:78:7b:f3:be:a0:a7:ee:29:41:80:43:0d:df:6b:
                    8e:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:98:03:54:F8:44:2F:F8:7F:E0:BB:4E:84:E6:96:75:FA:4E:42:23
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b5f6138a-3ce0-4e7e-bbe4-4bdf778066fb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b5f6138a-3ce0-4e7e-bbe4-4bdf778066fb/ffa3aa521aaba1e2caad64772c41f20bb5974768.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:650::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273192

    Signature Algorithm: sha256WithRSAEncryption
         a0:4b:ff:5d:e4:0f:df:5d:d3:0d:2a:3d:69:f3:cc:ce:e7:8e:
         17:a1:f8:fe:6d:fd:d0:36:3d:4a:6e:36:0a:fd:56:8e:d9:36:
         78:4e:a3:01:30:30:62:a7:ad:ad:19:31:29:b3:8d:ca:16:60:
         1e:28:24:7e:3c:ad:03:54:da:94:9a:cb:3f:9d:ce:30:53:e0:
         78:dd:34:09:9d:b6:43:22:25:60:ed:5d:49:07:cd:b8:3d:53:
         29:c7:b7:aa:4b:54:02:a8:6d:14:6a:69:60:9e:fb:0d:87:77:
         bf:e8:c9:f9:bc:f3:82:f0:85:28:6c:69:b1:9e:4d:03:1e:7f:
         57:8c:b7:fb:0e:f8:da:38:32:fb:b0:33:72:56:ec:b2:69:85:
         d7:05:1a:09:2b:72:de:7b:72:81:ea:af:f8:34:4d:4c:00:92:
         1f:11:82:51:49:7a:f5:7e:e9:97:39:b5:9d:0b:21:81:43:23:
         48:2b:d3:02:66:ef:f3:09:bb:5f:6d:48:54:ac:d2:d4:db:6a:
         a8:f0:c2:f1:6b:9c:4b:4e:4d:8b:91:d5:02:f2:15:20:1d:bb:
         42:ed:a2:1c:75:ea:89:3c:8f:2c:e2:86:56:6c:33:77:a4:a7:
         79:d1:2e:02:00:60:2b:05:bf:90:e0:c8:93:fc:76:fd:88:b8:
         b1:50:c9:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----