Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/14cccbd44c277091b395ba21d80e9bd47281ef92.cer
File:                     14cccbd44c277091b395ba21d80e9bd47281ef92.cer (raw, json)
Hash identifier:          E1mDnIbvjLR9C01NvAGUDpnWMcU4G3NMnqrZydUrYYY=
Subject key identifier:   51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C8CDFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/14cccbd44c277091b395ba21d80e9bd47281ef92.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 01 Jun 2022 09:13:17 +0000
Certificate not after:    Thu 15 Feb 2024 05:00:00 +0000
Subordinate resources:    AS: 264749
                          IP: 138.99.120.0/22
                          IP: 168.90.244.0/22
                          IP: 2803:b4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13159935 (0xc8cdff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  1 09:13:17 2022 GMT
            Not After : Feb 15 05:00:00 2024 GMT
        Subject: CN=14cccbd44c277091b395ba21d80e9bd47281ef92
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:d9:8f:4d:7a:91:e5:7f:78:53:56:2e:79:d9:
                    85:4f:37:1e:d9:12:5c:62:f1:3f:db:a0:3c:eb:a0:
                    98:44:0f:62:a4:03:7f:74:8e:a3:52:51:db:8a:f1:
                    19:b1:18:a4:87:79:ef:8e:d0:da:bc:60:6b:11:b5:
                    07:79:78:54:b1:22:eb:f2:f8:a0:25:10:e3:e2:d1:
                    a8:1e:64:bc:13:07:71:2b:28:fe:0c:51:43:b5:c6:
                    f6:fc:bf:c2:b6:b9:67:8a:be:2f:6d:1a:be:97:74:
                    7d:36:b6:2c:9b:da:8d:a3:00:7a:9b:2c:f1:97:af:
                    6f:12:31:46:7d:d7:1f:f8:36:23:e3:da:ba:4a:a8:
                    84:11:68:45:9d:95:b8:ec:3e:48:73:4f:2d:92:cd:
                    5e:ca:7e:9b:d9:17:0b:bf:81:da:66:77:f6:d3:10:
                    2c:a8:87:6a:bb:68:ea:f7:d0:9e:7f:43:72:26:74:
                    0e:8c:c6:66:d6:1a:a6:04:e2:6c:a0:eb:3b:c5:f6:
                    9d:3a:41:d4:95:ef:67:77:d5:32:68:72:a8:5e:00:
                    13:6c:9d:a5:37:b9:79:9a:9a:db:c2:1d:89:83:2c:
                    d7:b6:28:d6:9a:ef:c0:74:ac:d1:78:62:e7:cd:35:
                    ce:40:6e:51:33:4c:a3:5b:9a:d4:f5:fa:07:ae:a7:
                    24:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:B2:F5:93:38:6A:58:8F:34:71:D5:BC:2A:BF:AF:54:76:11:13:07
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/51b96a5e-fdb2-41ae-8b57-734346664fe1/14cccbd44c277091b395ba21d80e9bd47281ef92.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.99.120.0/22
                  168.90.244.0/22
                IPv6:
                  2803:b4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264749

    Signature Algorithm: sha256WithRSAEncryption
         4a:9d:5f:e4:78:0c:98:62:b4:b4:1d:82:23:81:69:5c:d1:20:
         e0:35:c8:a0:29:06:9f:fe:eb:2a:fc:5a:e7:6b:7b:c6:70:e9:
         6e:86:92:a4:3f:6c:02:aa:09:c5:19:ba:a0:83:7b:8e:99:05:
         c0:92:86:c4:8d:30:7b:43:68:ad:d4:21:73:6f:3b:96:0c:ba:
         e5:93:4e:ea:13:3b:84:6d:a3:be:10:a2:38:b9:90:c1:70:8b:
         98:69:0c:51:b6:c3:03:5b:19:6b:80:0d:ff:10:84:0a:65:71:
         51:dd:1f:da:c8:07:79:9c:6c:b7:94:82:03:ed:5a:71:24:00:
         59:01:7c:75:66:d3:80:68:d8:3b:a9:30:7c:4b:ff:02:44:74:
         58:7c:1a:dc:c7:82:d8:b6:da:50:b9:39:a0:a4:73:20:2c:43:
         7f:85:fd:22:cb:c9:01:d1:d2:7b:38:0f:52:28:e5:b2:b2:b6:
         80:d8:1d:09:90:e9:13:da:9c:c4:a0:e0:ef:d5:1e:83:bc:e8:
         53:dc:b2:62:63:07:8d:7c:17:c4:76:24:3b:79:1d:fd:65:32:
         05:8a:ba:7d:5d:53:3e:0d:8c:85:5f:94:33:56:7b:01:36:ff:
         45:de:0d:3c:b7:f0:5d:57:39:09:8e:30:5d:4b:6a:a1:d6:90:
         dd:29:7d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----