Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14933717f42701b3ea5b9d487ca9e054aec66518.cer
File:                     14933717f42701b3ea5b9d487ca9e054aec66518.cer (raw, json)
Hash identifier:          F7Cxz720MbiTii6hAw+sJd+QQZanIyTxzeVV172Rrrk=
Subject key identifier:   D2:E6:B9:EC:83:16:FF:AA:69:9D:5B:04:04:A9:16:E1:EA:2E:86:00
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D1949
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3e87508b-826c-4fe1-a496-1a81cbd1fcb2/14933717f42701b3ea5b9d487ca9e054aec66518.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3e87508b-826c-4fe1-a496-1a81cbd1fcb2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 07 Mar 2024 14:27:00 +0000
Certificate not after:    Mon 24 Mar 2025 23:00:34 +0000
Subordinate resources:    AS: 267867
                          IP: 45.174.52.0/22
                          IP: 2801:1f:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17635657 (0x10d1949)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  7 14:27:00 2024 GMT
            Not After : Mar 24 23:00:34 2025 GMT
        Subject: CN=14933717f42701b3ea5b9d487ca9e054aec66518
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:04:5d:92:0f:c3:08:74:80:84:b9:c1:0d:80:
                    75:8b:cb:ba:58:f9:23:12:22:98:fc:f2:65:ae:09:
                    2f:7c:3b:fd:d5:99:00:8b:36:77:03:a4:84:b8:c7:
                    23:cd:f5:99:a6:de:8b:5b:20:f8:4f:c3:6b:9b:7d:
                    84:01:17:71:8f:45:c0:e4:27:a8:db:a4:7d:3d:1e:
                    58:eb:9c:f1:9f:e0:c7:36:3a:5b:4f:36:4e:a4:9a:
                    bf:d3:a4:e1:ce:86:84:a6:b5:91:d5:6f:a6:76:c5:
                    29:d7:7d:c4:c9:47:03:d4:c1:d3:f6:26:38:6b:69:
                    fb:3c:55:b6:f1:93:bb:2b:24:54:a3:4f:05:d4:5f:
                    8e:10:91:9d:85:d2:3d:bd:94:b1:46:56:03:95:ca:
                    9e:a8:44:46:7a:64:d2:5b:13:c2:1b:1c:d5:01:11:
                    e2:5c:9d:ee:3e:fc:e4:3e:6b:45:87:a0:7e:e9:02:
                    44:8d:0d:bb:2e:71:39:63:50:0f:0b:a5:b4:60:e1:
                    f9:37:42:e6:ea:99:85:ec:04:a5:32:7e:af:fb:ea:
                    b9:74:e8:ec:44:8f:67:4b:60:ca:44:47:81:fb:d4:
                    e5:cd:75:fe:3d:12:0f:aa:f9:38:70:c3:81:f9:c6:
                    23:c3:d9:2e:44:d9:0b:d3:dc:f3:54:86:f6:46:a5:
                    83:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E6:B9:EC:83:16:FF:AA:69:9D:5B:04:04:A9:16:E1:EA:2E:86:00
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3e87508b-826c-4fe1-a496-1a81cbd1fcb2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3e87508b-826c-4fe1-a496-1a81cbd1fcb2/14933717f42701b3ea5b9d487ca9e054aec66518.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.174.52.0/22
                IPv6:
                  2801:1f:800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267867

    Signature Algorithm: sha256WithRSAEncryption
         7b:e7:30:c7:d8:7a:d7:d6:1d:5a:ad:24:d9:1d:b6:97:da:2d:
         08:83:be:61:44:ae:b5:c7:db:0c:e6:12:7c:3e:22:0e:78:69:
         29:04:06:01:56:b3:6e:5b:0c:17:0f:c5:60:22:01:2b:8d:6e:
         b5:df:0d:d1:c2:89:55:9f:9c:d6:b1:b0:76:a1:f4:66:4c:c7:
         e2:22:0e:0e:c9:7a:d9:26:18:1c:f2:90:5a:f3:99:39:98:75:
         5d:7b:28:0d:b5:37:ab:69:e2:22:91:49:18:86:76:a2:3b:37:
         9b:e6:8f:74:e3:36:f0:b1:4e:64:e6:5e:25:b2:4c:19:93:62:
         b9:fb:31:ee:dc:f5:1c:e7:fa:3d:2d:6a:8a:7a:1f:7f:66:4f:
         96:4e:33:5c:93:06:39:13:fa:c4:28:8b:54:73:d3:20:08:3e:
         2c:70:50:5b:89:26:a0:28:b7:95:e9:3e:24:20:79:17:b1:b8:
         bd:55:6e:10:0d:7a:6b:ae:a3:de:34:22:28:1c:1d:92:77:34:
         04:23:d1:b8:c1:f0:8e:9c:6a:e0:92:aa:b6:f4:21:e8:11:9f:
         76:e4:1f:af:98:60:a6:bd:82:16:a9:c2:6d:26:e7:a5:13:fe:
         74:c5:7d:e8:89:4b:42:da:f4:07:8a:fa:17:53:1c:0a:fd:b4:
         a2:b8:31:44
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----