Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/19c8df5efca53363a02776e7870dfaa1733085a3.cer
File:                     19c8df5efca53363a02776e7870dfaa1733085a3.cer (raw, json)
Hash identifier:          e538AKYBcqhKOMX1U+lQIOK5I+hnJuE94ZywNxOMW6Q=
Subject key identifier:   2A:03:29:91:24:FC:D1:F2:94:40:62:E1:21:28:71:2F:3F:D5:0C:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF6CB5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e08abea-e33e-4836-a39f-e9b19fc5414e/19c8df5efca53363a02776e7870dfaa1733085a3.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e08abea-e33e-4836-a39f-e9b19fc5414e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:22:04 +0000
Certificate not after:    Mon 21 Oct 2024 12:03:24 +0000
Subordinate resources:    AS: 262324
                          IP: 143.202.128.0/22
                          IP: 177.67.28.0/22
                          IP: 177.124.136.0/22
                          IP: 2804:7d0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16739509 (0xff6cb5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:22:04 2023 GMT
            Not After : Oct 21 12:03:24 2024 GMT
        Subject: CN=19c8df5efca53363a02776e7870dfaa1733085a3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:b5:54:80:68:3c:c1:3b:28:bd:f8:fc:f8:16:
                    8f:d4:bf:c0:6b:a7:ea:ff:82:28:5a:0d:01:34:45:
                    48:1a:6a:bf:ff:c2:ec:3a:86:1d:c9:78:b3:f4:56:
                    06:9e:52:a2:f3:a5:15:ea:02:e8:55:1a:46:f1:88:
                    bc:c9:cd:37:c1:21:9e:79:9f:52:5d:dd:66:88:2b:
                    ea:12:42:9c:2c:67:86:a7:b2:2d:7e:38:85:8a:bc:
                    e4:31:4a:51:58:97:73:63:cd:48:7f:02:84:9a:bd:
                    50:c7:e0:bd:d3:67:f7:09:39:ed:73:01:89:62:e7:
                    03:42:b1:a3:e5:f5:50:df:c7:9f:c4:b7:45:72:6a:
                    a7:6c:1f:42:b1:43:45:bb:7e:6a:6a:f7:00:d7:86:
                    23:8d:02:c0:4f:85:ce:9e:d2:b2:a7:6d:62:88:1c:
                    05:c5:af:db:50:5f:07:19:4e:3a:86:0a:fb:bf:b9:
                    fb:b7:cb:18:d5:46:8a:8a:6b:6f:b5:e8:2c:24:2a:
                    08:6a:77:fa:18:b7:53:e8:35:c2:4d:1d:15:e8:b4:
                    64:61:14:55:75:8b:4a:78:f9:80:0d:1a:f6:c2:de:
                    64:a1:3e:d8:29:d0:63:24:68:49:f7:46:91:46:8d:
                    cb:e0:2e:9b:f0:d9:ba:ce:92:57:49:50:d4:da:24:
                    ea:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:03:29:91:24:FC:D1:F2:94:40:62:E1:21:28:71:2F:3F:D5:0C:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e08abea-e33e-4836-a39f-e9b19fc5414e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e08abea-e33e-4836-a39f-e9b19fc5414e/19c8df5efca53363a02776e7870dfaa1733085a3.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  143.202.128.0/22
                  177.67.28.0/22
                  177.124.136.0/22
                IPv6:
                  2804:7d0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262324

    Signature Algorithm: sha256WithRSAEncryption
         2a:50:ec:e8:ae:b4:0c:ef:2a:3e:93:b6:d7:81:f5:de:a5:d3:
         1c:ef:71:f0:f9:2d:14:d4:dc:3c:34:c0:5e:c2:1b:82:9b:cc:
         7f:0d:09:84:8f:01:e3:ae:03:4d:f2:8c:00:17:1b:49:34:7f:
         76:4e:f6:bc:10:c8:4d:fd:8b:20:99:3d:98:ab:59:a7:18:5f:
         3d:5f:5b:48:86:b3:ad:26:b1:f4:9c:ae:a5:9d:7b:10:9e:7b:
         7c:0f:f0:68:ff:fd:9f:bc:2c:99:51:1d:30:12:88:68:30:9c:
         4f:37:fd:2e:ed:54:c9:03:c9:dd:04:24:46:5f:91:ab:fb:46:
         2d:b7:89:1d:0d:46:87:69:b3:03:98:22:cf:c4:a2:9f:f2:2f:
         ba:39:2e:83:4f:8b:b0:82:90:4e:47:7c:81:ec:b1:dc:af:e3:
         cf:d4:b5:ad:68:5b:98:3a:2d:d2:db:ee:ba:ca:30:76:b9:1b:
         fe:d4:6c:67:d8:e6:bf:8e:75:9b:c9:43:f5:8e:6e:2a:e6:5a:
         41:cd:e4:0b:68:3a:d1:6f:54:99:e4:95:33:45:89:9c:76:6e:
         78:47:61:64:25:ea:0a:d0:c1:bd:c2:93:c6:03:81:64:79:99:
         3a:6c:55:4d:42:86:99:5c:7b:15:07:30:aa:02:61:29:18:99:
         f5:ed:18:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----