Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.cer
File:                     3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.cer (raw, json)
Hash identifier:          kUQkCB6vBI/91YRUAQwEwTtEYLtir52NkatbTwfq1RQ=
Subject key identifier:   A4:40:0F:1D:D4:ED:14:FA:C4:D0:D1:82:0F:AC:7B:A5:46:E7:6F:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC49D2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 28 Jul 2023 18:10:48 +0000
Certificate not after:    Tue 27 May 2025 15:16:35 +0000
Subordinate resources:    AS: 273047
                          IP: 2801:165::/44
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16533970 (0xfc49d2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 28 18:10:48 2023 GMT
            Not After : May 27 15:16:35 2025 GMT
        Subject: CN=3c9fc8516d4ddabd8103dc15a8a6b6df482e6319
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:0c:7a:01:40:c3:09:ed:2b:f8:4e:cc:07:f9:
                    77:1f:46:4e:8e:aa:8f:9f:75:0f:8c:b3:33:21:62:
                    7a:f4:47:f3:5b:93:fc:7d:1f:77:d0:3b:25:d4:24:
                    01:c0:a9:cb:5a:e5:b3:20:62:71:54:cf:e7:0c:12:
                    84:b6:52:23:0d:75:58:c9:4f:94:60:f1:5c:c2:33:
                    4b:29:02:d0:c7:f2:58:89:d9:d6:cb:60:a7:57:dd:
                    5c:07:c7:b6:8d:5f:76:dd:e6:cd:9b:d1:a3:77:63:
                    16:da:87:40:d6:13:97:d5:45:01:29:07:c4:0b:86:
                    c4:a3:3f:03:a7:91:c8:c9:c7:66:c3:0f:07:a3:c8:
                    17:16:2d:69:6b:23:81:fe:32:b5:a9:f3:fe:4e:71:
                    0d:c9:55:1d:28:43:1c:2d:cb:f0:53:e1:f5:d8:fd:
                    6e:bf:dc:5b:2d:1b:be:e5:62:df:b4:88:49:e5:3e:
                    a8:b0:ce:c0:a0:f3:e9:a8:82:9d:02:00:5e:60:46:
                    6f:a2:13:da:36:d2:26:f6:cf:f7:ff:99:ff:a3:01:
                    c7:97:e6:f1:aa:1a:f4:fd:5c:3f:e0:63:d6:bf:54:
                    ad:05:1b:5f:c4:6e:3f:f3:a6:63:7d:c2:7a:90:73:
                    39:70:76:44:36:dc:c4:59:d5:1d:d7:dc:a3:e5:b5:
                    74:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:40:0F:1D:D4:ED:14:FA:C4:D0:D1:82:0F:AC:7B:A5:46:E7:6F:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0c78a68b-2682-4308-b76e-0a5c356d0025/3c9fc8516d4ddabd8103dc15a8a6b6df482e6319.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:165::/44

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273047

    Signature Algorithm: sha256WithRSAEncryption
         a7:7a:43:1e:8a:13:a3:2c:cf:7b:aa:23:74:6e:6d:e5:64:de:
         3a:02:f0:60:56:9d:1c:04:d7:d3:93:48:64:9a:a8:63:90:de:
         db:76:a1:6f:5f:82:25:75:9e:e9:c0:7f:3b:87:96:58:6c:3e:
         66:79:8e:50:3a:11:89:ed:55:2d:24:38:a4:7e:4c:53:6f:a6:
         b8:43:88:9e:2e:82:ec:f0:bb:8c:2a:5d:db:a9:df:8b:e6:11:
         c1:11:2e:ee:22:c9:b3:ba:86:e1:c7:a7:90:5b:b3:29:62:70:
         1b:86:d5:9a:5e:db:5e:c7:17:0c:9b:b2:75:df:51:d3:cb:9c:
         1a:6a:f3:b5:8a:b9:be:d5:b8:e5:9c:8f:03:20:8a:6d:5f:ee:
         db:06:91:02:77:a7:64:52:0e:7f:1b:0d:5f:30:e7:26:c3:ce:
         54:5e:8c:ee:e7:c7:2b:50:ed:d0:b2:5d:4b:7f:7f:7c:c7:94:
         24:0e:1d:49:17:be:83:3c:b5:1a:74:6b:31:61:14:ca:67:4f:
         50:2b:2c:5f:e6:ee:e4:fe:2e:c1:91:cb:08:ea:5d:a5:9a:67:
         24:34:6b:6f:c3:6e:30:5d:42:78:b1:67:23:78:28:51:0f:a2:
         89:8e:d9:ca:d9:60:f6:af:9e:c3:7d:d3:1a:ca:72:5b:1f:a5:
         2b:87:7d:f7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----