Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/11c44ab9f628211307ca3246263d14d1a6dfa725.cer
File:                     11c44ab9f628211307ca3246263d14d1a6dfa725.cer (raw, json)
Hash identifier:          TNxLM6LGlMk+0LZPbeM4hWWVjfb1aoqfXRTS0aYaEH0=
Subject key identifier:   D5:07:41:23:57:CC:E8:51:19:B5:0F:FD:D8:30:F6:51:D4:FE:28:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF0360
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bd9d0446-1e41-4d1a-b9a4-cc61a2a73cae/11c44ab9f628211307ca3246263d14d1a6dfa725.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bd9d0446-1e41-4d1a-b9a4-cc61a2a73cae/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:50:17 +0000
Certificate not after:    Sun 12 Jan 2025 14:57:22 +0000
Subordinate resources:    AS: 263049
                          IP: 170.84.112.0/22
                          IP: 177.129.224.0/22
                          IP: 177.136.104.0/21
                          IP: 2804:fe0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16712544 (0xff0360)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:50:17 2023 GMT
            Not After : Jan 12 14:57:22 2025 GMT
        Subject: CN=11c44ab9f628211307ca3246263d14d1a6dfa725
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:37:c2:b8:a2:4c:b9:c8:52:ef:84:06:56:20:
                    d7:82:7e:cc:69:6a:d7:08:08:df:78:19:52:da:be:
                    d9:f1:ca:55:2b:ba:f4:6c:9f:6c:7b:58:ac:1d:06:
                    6e:e9:8a:c3:55:b4:6a:fb:74:1f:f5:be:fc:c5:36:
                    41:eb:46:f4:d5:0c:1d:cf:6b:79:90:35:63:ef:41:
                    8e:f7:52:0c:29:26:ff:de:16:82:d4:e2:3b:e1:79:
                    9e:fb:66:ce:99:cd:fb:9b:d6:c3:25:9c:e9:30:64:
                    8b:58:0b:f9:37:08:c4:03:97:ed:74:86:fc:df:42:
                    35:3f:58:bd:12:77:86:05:3c:1a:68:e9:02:14:67:
                    ac:62:fe:de:45:84:2b:06:b1:26:2a:f0:42:d5:5b:
                    91:03:de:e6:3d:26:50:08:25:23:4a:24:a1:ad:a5:
                    f4:ec:ff:0b:2c:1a:38:5f:ae:c8:cb:76:23:b8:5e:
                    52:c3:57:21:6b:62:51:ee:38:67:c4:51:45:3c:55:
                    f0:59:71:cc:f6:e3:c2:ee:53:8e:ad:af:4a:1b:eb:
                    62:bf:b7:7b:88:d3:c8:28:80:bc:43:3a:0b:8b:4a:
                    93:57:f4:31:45:9f:79:49:fb:d6:ce:0a:73:32:86:
                    99:f5:c4:0c:c9:d9:45:98:9b:95:ec:f0:0e:45:a6:
                    32:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:07:41:23:57:CC:E8:51:19:B5:0F:FD:D8:30:F6:51:D4:FE:28:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bd9d0446-1e41-4d1a-b9a4-cc61a2a73cae/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bd9d0446-1e41-4d1a-b9a4-cc61a2a73cae/11c44ab9f628211307ca3246263d14d1a6dfa725.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.84.112.0/22
                  177.129.224.0/22
                  177.136.104.0/21
                IPv6:
                  2804:fe0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263049

    Signature Algorithm: sha256WithRSAEncryption
         1e:25:af:4d:66:78:c8:26:49:b4:9b:3a:ca:de:23:b0:03:60:
         d1:5a:5a:c2:6a:d9:ab:56:ba:0b:0f:1b:8a:ff:f5:68:6a:9c:
         ad:25:90:95:47:08:98:b1:93:74:5f:bb:df:46:a2:42:bf:94:
         93:dd:4f:3e:66:a1:fc:92:72:09:ea:ac:8f:b6:bc:7e:6d:19:
         01:60:71:0b:4a:7e:1a:d7:00:9a:06:f0:e1:7f:8f:a1:c8:c5:
         25:b5:2c:5b:a6:5e:4c:ca:f1:1b:a8:a7:df:e2:26:4a:34:cf:
         02:cf:85:35:8c:e1:c0:10:7b:91:f1:1a:fe:98:8a:dc:9e:43:
         1a:ca:9d:5a:1f:c5:0b:6f:ec:57:98:b3:15:98:4e:c0:96:cb:
         71:e0:b2:73:57:b9:48:6d:87:80:ff:8c:fd:45:c0:77:b9:83:
         34:79:47:58:3a:34:97:22:0f:21:ac:dd:32:63:4b:e9:6a:09:
         0f:4f:e5:01:ee:28:94:24:35:eb:41:2a:4b:df:44:82:01:76:
         bd:9c:5f:83:81:7e:e2:62:7a:59:06:4e:72:6e:b1:1d:e0:a4:
         1c:18:87:2b:61:bc:84:ab:3c:f9:d1:a6:b4:6e:17:dc:bc:85:
         40:5b:df:55:48:0f:c0:f0:b3:30:b3:78:b4:2f:f4:3b:7f:98:
         1d:c9:a2:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----