Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/17d5356c9df6ca1b64363ebd2aacce911bbe0776.cer
File:                     17d5356c9df6ca1b64363ebd2aacce911bbe0776.cer (raw, json)
Hash identifier:          5pCMsXCxnDW3t1NW/55zlsOBj7+lgOPWdnsVi2NtMic=
Subject key identifier:   C4:78:87:20:B1:A4:BC:6C:66:D3:13:82:00:42:33:9D:02:2C:9C:9D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E34956
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b59892fb-d324-457c-b2d3-1b914bf06dfa/17d5356c9df6ca1b64363ebd2aacce911bbe0776.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b59892fb-d324-457c-b2d3-1b914bf06dfa/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 15:13:48 +0000
Certificate not after:    Sun 20 Oct 2024 16:59:43 +0000
Subordinate resources:    AS: 269881
                          IP: 45.190.164.0/22
                          IP: 2803:b8e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14895446 (0xe34956)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 15:13:48 2023 GMT
            Not After : Oct 20 16:59:43 2024 GMT
        Subject: CN=17d5356c9df6ca1b64363ebd2aacce911bbe0776
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:19:f0:3f:cd:db:64:14:8b:da:eb:e7:86:ab:
                    bf:04:13:c6:6b:5e:00:3a:70:23:e0:c5:f3:f0:5a:
                    66:69:d8:15:47:d8:d0:f2:b0:db:b8:cd:2e:ef:3e:
                    81:e2:d6:b1:49:be:1b:75:c7:30:06:8c:c2:54:a1:
                    6c:7d:c7:73:a0:c0:72:38:21:b6:72:c4:0b:92:9e:
                    b0:d7:82:b3:bb:3e:2f:ce:f4:b5:2a:37:56:d5:a6:
                    1a:bb:ca:ec:d4:b3:8c:94:b0:71:1e:91:44:f9:86:
                    d1:35:1a:0e:26:e4:26:83:2c:7c:c0:0e:4e:26:5e:
                    52:30:a4:f8:d4:82:f8:26:5c:9b:35:8b:19:2c:ec:
                    5e:c0:c7:0f:66:f2:52:c1:3b:56:7a:d2:8b:d0:9a:
                    f9:5f:ab:48:00:eb:38:af:75:f0:bb:06:36:4f:e2:
                    1b:56:a7:b4:c1:e3:7b:54:00:8b:ba:17:b3:c4:91:
                    ba:1b:bb:bb:c7:0a:1c:10:44:53:e3:1f:cf:8c:69:
                    12:94:4e:74:23:6d:90:3c:90:14:92:48:55:96:7d:
                    a8:aa:72:6d:4d:e8:dd:b8:84:57:15:cc:61:cf:6f:
                    4a:20:b8:3a:e9:1b:77:d9:ee:3c:5e:3a:6b:aa:87:
                    cd:8b:51:77:fb:b7:67:21:85:25:8f:02:e6:84:00:
                    14:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:78:87:20:B1:A4:BC:6C:66:D3:13:82:00:42:33:9D:02:2C:9C:9D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b59892fb-d324-457c-b2d3-1b914bf06dfa/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b59892fb-d324-457c-b2d3-1b914bf06dfa/17d5356c9df6ca1b64363ebd2aacce911bbe0776.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.190.164.0/22
                IPv6:
                  2803:b8e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269881

    Signature Algorithm: sha256WithRSAEncryption
         88:79:8f:27:de:44:01:96:1b:05:63:94:27:ef:af:e7:97:45:
         fe:af:3a:39:c6:d6:e4:ff:5f:c2:9f:9b:32:d7:c7:9c:de:3f:
         2b:3c:0a:be:fd:88:bd:22:f3:26:ce:01:19:76:96:1e:ad:b1:
         ce:1a:c0:a3:f1:65:1a:17:43:3b:88:a6:9b:00:92:23:62:93:
         30:b0:bf:dd:5b:16:4e:2b:33:6b:e8:c0:61:c5:41:a4:6a:02:
         cd:19:8c:e9:86:54:c3:f0:a3:48:3c:c6:6a:8b:0d:42:be:9e:
         3f:55:f5:f3:a6:ac:83:dd:f8:2e:e2:e3:4e:c4:68:48:09:ff:
         6a:dc:bc:33:77:e8:96:cf:43:c0:88:dc:9f:d6:8d:ed:eb:25:
         81:16:b8:b4:98:f4:12:5a:34:2f:a7:54:4b:0a:76:0c:48:2a:
         d5:52:68:9e:f5:a5:db:98:c4:81:f0:2c:e8:aa:f1:09:0c:7f:
         b4:35:10:85:39:14:cd:b4:7c:5a:d9:09:dc:6f:ff:8f:f0:55:
         e8:c6:76:4c:79:a0:2f:71:8d:e5:20:cf:71:80:eb:c1:9b:cd:
         d2:21:8c:8b:56:0a:6b:5d:b7:a0:b8:6c:26:42:43:41:51:f5:
         da:b4:26:d1:1b:66:fb:34:d9:58:33:3b:58:cc:3c:44:f7:0e:
         4a:2c:c8:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----