Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13902b1c344d3a44dcb9633ef05462b2b59afdf4.cer
File:                     13902b1c344d3a44dcb9633ef05462b2b59afdf4.cer (raw, json)
Hash identifier:          3N0zFqJA3cMbphELCBZn/elXJG2x9GWPOfVMhwxHyNE=
Subject key identifier:   A5:3F:3D:07:E5:87:16:22:59:0D:12:07:34:10:11:0C:10:8B:84:D2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF8D2D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/30f45667-9ef8-4ba4-9f13-f261ad6af88f/13902b1c344d3a44dcb9633ef05462b2b59afdf4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/30f45667-9ef8-4ba4-9f13-f261ad6af88f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:32:33 +0000
Certificate not after:    Sat 09 Aug 2025 12:47:58 +0000
Subordinate resources:    AS: 267661
                          IP: 45.224.160.0/22
                          IP: 2804:44ec::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16747821 (0xff8d2d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:32:33 2023 GMT
            Not After : Aug  9 12:47:58 2025 GMT
        Subject: CN=13902b1c344d3a44dcb9633ef05462b2b59afdf4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c3:f4:7e:88:83:1a:7d:5d:87:41:7e:cd:4f:
                    78:ff:a8:e7:0c:ab:73:dc:69:f9:30:b0:a3:50:ed:
                    70:6c:43:56:90:ea:5b:2e:87:e5:f5:5f:06:5b:57:
                    ab:c0:46:3a:da:d3:21:94:80:41:5f:a6:c2:ae:6e:
                    68:b4:83:76:7a:78:f0:c6:f9:e2:53:a0:72:36:a3:
                    22:65:7a:b7:9f:bb:28:21:2a:f3:b1:50:7a:f4:f1:
                    f9:0e:75:95:43:0a:82:d7:96:e8:b9:3c:7d:c1:91:
                    cf:a9:42:19:86:34:ad:ab:05:d7:83:75:66:6c:c8:
                    fc:4a:8e:cc:88:29:48:c3:96:3f:6b:82:3d:94:b0:
                    a5:00:a9:ed:b2:fb:c1:21:f2:46:f8:22:66:8f:93:
                    52:84:8b:0d:de:2a:32:21:a9:cb:cb:72:37:91:79:
                    33:76:7a:bb:c5:e5:67:93:20:9f:18:7c:00:87:b4:
                    21:5c:80:16:22:e3:39:5a:44:6d:27:a9:3c:ad:5c:
                    1d:c9:de:d8:18:df:26:95:1e:b5:ca:0f:bb:ce:d3:
                    79:0c:6d:60:db:4b:29:a5:f8:26:f2:6d:1f:f1:de:
                    a2:56:f6:ea:4a:46:8a:1c:0f:7a:5d:87:6a:9c:a1:
                    b0:06:78:36:2e:fd:f4:56:54:a4:3e:bd:de:01:8a:
                    d1:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:3F:3D:07:E5:87:16:22:59:0D:12:07:34:10:11:0C:10:8B:84:D2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/30f45667-9ef8-4ba4-9f13-f261ad6af88f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/30f45667-9ef8-4ba4-9f13-f261ad6af88f/13902b1c344d3a44dcb9633ef05462b2b59afdf4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.224.160.0/22
                IPv6:
                  2804:44ec::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267661

    Signature Algorithm: sha256WithRSAEncryption
         63:10:f3:40:ea:f4:20:69:05:d1:d1:25:19:07:7d:7a:8f:8c:
         66:7f:6c:dc:f5:8e:03:97:f4:5e:31:09:c5:00:dd:6e:76:45:
         59:b7:df:99:ee:5e:3c:77:43:49:84:80:ad:ee:23:53:d9:98:
         06:56:a9:77:d5:2f:49:ad:19:5b:b3:2b:ed:fd:99:0a:83:a9:
         55:a5:be:97:03:aa:50:92:85:26:e4:6f:39:53:7f:4f:3e:a8:
         b2:4f:35:54:26:85:66:1a:42:dd:82:07:d4:a2:f0:94:3a:d6:
         a3:b5:6c:d8:0f:fb:a2:61:27:c0:f8:f4:bf:0e:67:02:40:00:
         5f:2f:55:13:28:aa:09:1e:55:04:8a:df:67:c8:7c:df:5d:1a:
         ea:8b:64:c9:33:a2:8e:51:ec:00:7a:7d:9d:8a:fe:39:79:6a:
         60:24:92:0f:0a:8f:0f:e5:ee:65:72:61:6f:1b:e0:8e:b1:51:
         e3:13:18:8e:18:9f:ce:35:99:49:de:fd:75:d7:69:18:32:6e:
         17:d1:3b:d8:52:32:a9:35:56:ac:f6:a1:0c:38:48:a3:7d:e9:
         0c:4c:5f:a3:cf:1d:ac:71:bd:3d:9b:88:11:16:b8:ed:90:2f:
         b6:f1:09:76:81:e7:1f:d5:61:09:f2:09:7d:25:08:a7:a6:4a:
         46:3a:86:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----