Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ffa9675a9ef8288b896ca6082e3a8de6b0e2604d.cer
File:                     ffa9675a9ef8288b896ca6082e3a8de6b0e2604d.cer (raw, json)
Hash identifier:          9yzWrJEtkpb/hAjZDetLI/RpU6XA5SjawwFlVsZz0H4=
Subject key identifier:   B8:FF:1E:82:BE:DC:B4:B9:74:ED:AF:FB:41:0E:B0:9F:F2:6A:58:42
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E71FC6
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e8f0445f-bbfb-404f-881d-7547b667b68f/ffa9675a9ef8288b896ca6082e3a8de6b0e2604d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e8f0445f-bbfb-404f-881d-7547b667b68f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 23:41:51 +0000
Certificate not after:    Thu 13 Feb 2025 21:59:28 +0000
Subordinate resources:    AS: 272125
                          IP: 2803:9f10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15146950 (0xe71fc6)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 23:41:51 2023 GMT
            Not After : Feb 13 21:59:28 2025 GMT
        Subject: CN=ffa9675a9ef8288b896ca6082e3a8de6b0e2604d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:06:85:a9:a5:f5:73:8a:79:46:49:71:16:2b:
                    7f:38:44:a0:be:17:ef:9f:69:08:17:b5:62:64:db:
                    ff:87:5d:1d:00:2f:d4:c6:a6:c6:6a:f7:c4:10:a1:
                    31:71:e9:94:de:92:c5:23:e9:e2:31:1b:cf:f4:34:
                    c7:76:25:65:ca:1e:88:e7:77:ed:3c:02:9e:62:7a:
                    a8:4c:e9:78:04:c8:39:db:4f:e3:2f:77:db:27:58:
                    cf:07:8a:aa:a3:6a:bb:69:55:c8:e2:ea:5d:10:80:
                    79:4d:f2:63:6d:a5:69:bb:25:8f:70:9a:b7:bb:06:
                    f8:96:32:67:44:1d:23:a9:ad:3a:af:46:22:91:94:
                    1d:70:1b:0a:0d:ec:48:67:c7:f7:f9:b5:2d:f9:84:
                    59:ea:16:a6:18:12:df:21:9f:fa:f4:da:ec:59:7b:
                    fb:8b:c4:a8:1b:1f:60:b8:a0:61:9e:48:35:c1:82:
                    2a:2a:c8:bf:57:a1:9b:b6:23:1a:68:68:38:51:d4:
                    6f:cf:01:84:bd:5e:52:72:24:25:38:5e:ed:33:7b:
                    c5:7f:f8:aa:f8:3b:c9:d6:7a:f8:82:b7:1f:e8:48:
                    ae:7c:3a:d1:78:66:02:fb:24:2c:3e:a0:af:51:c1:
                    25:62:6b:21:21:24:7e:c8:80:9a:65:e9:df:b9:1d:
                    30:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B8:FF:1E:82:BE:DC:B4:B9:74:ED:AF:FB:41:0E:B0:9F:F2:6A:58:42
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f0445f-bbfb-404f-881d-7547b667b68f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e8f0445f-bbfb-404f-881d-7547b667b68f/ffa9675a9ef8288b896ca6082e3a8de6b0e2604d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2803:9f10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272125

    Signature Algorithm: sha256WithRSAEncryption
         a7:61:91:e3:84:65:ab:d7:84:9e:c6:43:c1:76:9c:0c:28:cb:
         41:e7:1b:14:2d:72:04:db:73:c8:1c:d9:eb:c1:a7:e3:b5:95:
         6d:05:ad:34:63:6c:78:97:4c:c3:4d:8b:bc:8c:84:11:35:70:
         c7:71:5b:7f:4c:9a:c6:a7:e3:2a:ce:c6:4e:49:82:74:f8:62:
         15:d5:a4:6b:40:c0:5c:3c:c2:76:08:d3:cd:8d:9e:cd:13:41:
         6e:64:9a:7b:5b:0f:38:ef:95:de:40:02:d5:63:65:61:5d:ab:
         f1:a5:19:54:54:3f:21:6e:cf:c4:ab:ca:cd:31:aa:c8:25:6a:
         93:83:a7:af:b6:24:55:e8:f5:01:a8:12:4b:51:59:79:6f:5b:
         ca:7c:3b:9e:9d:16:2d:bd:de:fe:6b:b6:f3:e1:7a:cd:69:c9:
         03:91:d2:4b:93:fe:ec:7e:47:27:4f:d5:84:f0:d8:67:d0:4d:
         5c:57:de:62:a3:82:85:84:1c:25:a9:d1:cb:84:41:72:90:eb:
         a2:ac:e5:e3:e1:8d:52:de:88:d9:c0:2f:6f:7b:4d:2c:fc:01:
         14:e5:7f:3f:33:9b:0b:8c:58:06:94:72:56:ab:91:3c:5b:55:
         55:19:7c:a3:d5:ad:38:73:83:68:a3:89:85:3d:74:91:b6:70:
         13:ba:fc:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----