Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/1014e5877d246ffafd75e2c65cfad6772358bb88.cer
File:                     1014e5877d246ffafd75e2c65cfad6772358bb88.cer (raw, json)
Hash identifier:          9eZ1a3w2JtRfbEKqumFHRVZA2TBBXn6f4/qU1RMi8GQ=
Subject key identifier:   36:35:6F:F2:A2:93:2C:8B:9F:2A:0A:96:8F:4B:C0:75:0C:A4:B5:91
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF784B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6a5d7e08-8170-4ed5-aa01-847b0bb0eae3/1014e5877d246ffafd75e2c65cfad6772358bb88.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6a5d7e08-8170-4ed5-aa01-847b0bb0eae3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:22:41 +0000
Certificate not after:    Tue 24 Dec 2024 13:22:51 +0000
Subordinate resources:    AS: 266054
                          IP: 45.4.40.0/22
                          IP: 2804:39d8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16742475 (0xff784b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:22:41 2023 GMT
            Not After : Dec 24 13:22:51 2024 GMT
        Subject: CN=1014e5877d246ffafd75e2c65cfad6772358bb88
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:01:cc:a1:c5:aa:0c:8e:3d:9c:e3:fe:d7:63:
                    a3:d5:34:8d:21:51:f4:9f:b0:4e:40:4f:6c:42:c2:
                    5a:71:25:d7:85:61:9b:d4:e7:f3:85:95:ee:d2:ad:
                    31:82:61:54:d2:7b:07:ad:d7:77:af:98:42:12:fa:
                    52:66:c7:a5:85:e8:71:bc:4e:d1:43:d2:1e:96:3f:
                    48:53:52:c1:e7:90:44:9a:c6:f8:54:e5:09:24:48:
                    43:05:c1:a2:25:e9:c3:71:78:07:31:71:06:db:70:
                    b8:a2:e2:08:1b:51:f4:b2:c1:08:7e:52:98:9d:d6:
                    1c:4f:14:d2:e6:d3:88:3d:a3:d4:08:47:f2:78:50:
                    00:76:d1:ee:b4:1c:dd:95:c6:07:2c:61:bc:33:cf:
                    a4:5f:27:05:d5:22:e5:2e:f6:2c:02:c4:a8:3a:e9:
                    fc:f4:fa:1e:ab:2c:5b:66:73:d7:1a:88:8d:4c:81:
                    53:71:2d:64:84:e9:f8:97:d3:d6:6c:f9:79:0d:84:
                    45:9e:71:e9:bc:66:d1:43:bd:95:24:1e:3b:0f:97:
                    ff:ab:d7:64:25:43:21:55:82:12:8f:2f:50:1d:9d:
                    db:e9:15:82:4e:94:b1:c3:23:a7:e4:5f:f7:9a:cd:
                    b9:4e:f7:fd:c7:8a:bf:bc:c2:5d:74:25:50:1b:a5:
                    15:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:35:6F:F2:A2:93:2C:8B:9F:2A:0A:96:8F:4B:C0:75:0C:A4:B5:91
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6a5d7e08-8170-4ed5-aa01-847b0bb0eae3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6a5d7e08-8170-4ed5-aa01-847b0bb0eae3/1014e5877d246ffafd75e2c65cfad6772358bb88.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.4.40.0/22
                IPv6:
                  2804:39d8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266054

    Signature Algorithm: sha256WithRSAEncryption
         30:2a:32:fd:a5:79:f2:1a:b9:e6:cc:40:c4:71:1d:a3:65:b8:
         10:cf:b5:93:49:02:7e:62:dc:10:be:12:22:65:69:59:44:49:
         98:db:d6:08:f5:f0:b3:43:2c:dd:0e:1e:90:07:19:30:a5:4c:
         15:d9:44:1c:38:a9:af:c2:a3:3b:03:8b:1a:69:d0:e5:c5:0c:
         74:69:7b:b5:bf:bc:c4:ea:ad:c1:cc:43:da:12:4a:2f:83:b0:
         1d:c2:d2:81:e5:c5:36:71:20:65:f8:72:9b:b0:e3:9f:c8:ed:
         8a:f2:ed:05:f9:49:5e:6d:8b:b1:1a:b4:e3:68:28:3d:71:f6:
         f2:c4:7f:6b:28:bb:bc:ff:95:6e:12:54:2f:c0:96:b8:75:c7:
         71:e4:10:ed:52:43:9d:7c:0a:0a:a4:aa:27:30:b2:bf:d9:35:
         f1:f5:2a:6b:93:21:69:1b:dc:40:04:5e:ea:02:f0:c8:f3:1d:
         0d:a7:1e:6d:f2:22:87:92:41:92:1d:95:1b:27:7d:80:12:5d:
         2e:f6:65:00:78:0e:83:48:5c:11:22:cf:75:e2:a0:4c:dd:b7:
         f5:84:f4:08:c5:52:a2:46:b7:cb:50:79:45:47:60:17:09:09:
         b2:27:fe:f5:f6:27:c1:dc:47:62:43:60:13:aa:ab:4f:9b:b9:
         c8:16:39:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----