Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2140dc21f090f67e262500e16150c1488a57ea18.cer
File:                     2140dc21f090f67e262500e16150c1488a57ea18.cer (raw, json)
Hash identifier:          QaG0U8N+KM9mJzf2Gj3UQg6/PvvqNHUxmVGpWEV2tK4=
Subject key identifier:   7A:25:37:17:15:A8:99:5F:0E:61:B8:3D:8A:91:28:64:41:D9:7B:0A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0102E36B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/2140dc21f090f67e262500e16150c1488a57ea18.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Mar 2023 09:00:47 +0000
Certificate not after:    Fri 28 Feb 2025 18:48:17 +0000
Subordinate resources:    AS: 271908
                          IP: 131.255.17.0 -- 131.255.19.255
                          IP: 2803:1210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16966507 (0x102e36b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 29 09:00:47 2023 GMT
            Not After : Feb 28 18:48:17 2025 GMT
        Subject: CN=2140dc21f090f67e262500e16150c1488a57ea18
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:0a:16:eb:c3:45:5e:3f:98:06:34:34:fe:a4:
                    e5:5f:17:c3:2c:f5:dc:c4:59:54:50:a2:68:84:9e:
                    cc:7b:7b:39:96:b0:31:ee:0c:60:1b:0e:75:84:39:
                    7b:85:81:4e:58:05:f7:13:ec:19:5c:42:b3:64:42:
                    6c:d6:95:c8:db:ce:d5:1c:f7:c3:57:7f:a7:e5:2b:
                    5d:25:d1:c8:6e:4a:eb:9f:a6:8e:05:bc:25:4e:d6:
                    bd:ad:e7:a1:aa:e0:a4:bc:23:37:e8:15:96:98:73:
                    ca:9c:43:1b:0a:fa:2a:de:20:c3:e3:fb:d4:1c:6e:
                    8a:f8:5a:70:84:54:62:42:cd:b2:34:29:9a:3e:b3:
                    49:4a:30:4d:2f:db:6b:fe:72:56:d2:0d:9c:03:66:
                    4f:4e:18:65:c9:94:25:54:4d:68:2c:63:c6:6e:d0:
                    a9:33:f2:5e:48:06:04:3b:27:0e:2e:9d:f6:20:9f:
                    63:66:78:f4:af:2d:29:aa:97:2b:59:4f:37:c3:aa:
                    f7:13:90:f1:82:bf:e8:24:9b:de:68:f2:94:f3:c3:
                    6e:aa:29:ce:6d:9b:3c:98:cf:12:ff:6d:5f:6d:db:
                    b1:e1:42:3f:ef:d8:75:b7:aa:97:ac:11:96:b9:39:
                    b9:a1:08:a9:af:d8:2f:cf:24:10:3a:e3:75:02:88:
                    35:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:25:37:17:15:A8:99:5F:0E:61:B8:3D:8A:91:28:64:41:D9:7B:0A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e0319d2b-eac4-4b2c-988b-a767de94c1af/2140dc21f090f67e262500e16150c1488a57ea18.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.255.17.0-131.255.19.255
                IPv6:
                  2803:1210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271908

    Signature Algorithm: sha256WithRSAEncryption
         0e:88:3c:83:a8:f4:f1:03:5d:6e:76:54:90:de:4a:22:7e:2f:
         e6:c8:64:09:bd:5e:d8:35:ed:f3:e4:b5:2a:72:16:11:39:22:
         f4:eb:3e:20:0f:1b:8a:51:7f:cb:51:51:b1:d4:00:7b:89:da:
         67:f5:9a:1c:eb:de:ab:2c:d6:16:05:19:88:d0:f6:79:c1:f4:
         4b:2f:af:97:af:e1:7d:b6:6e:21:14:df:61:ce:96:5c:af:de:
         ca:e7:48:55:e6:65:36:81:c2:15:01:0b:9f:52:34:40:cf:ab:
         78:70:53:e7:de:aa:21:b4:1b:1e:e5:ea:e3:bd:4a:08:12:47:
         f0:ab:cc:25:12:31:9d:5d:d7:ce:70:bb:53:a9:e1:9c:41:27:
         2e:17:6a:6e:83:56:22:f6:b8:f5:c1:16:50:5e:2e:76:a0:0c:
         39:5b:c8:f7:75:51:6b:21:a5:17:fd:46:e2:5f:5c:3b:63:1d:
         e3:66:9e:bb:70:f8:69:ba:85:29:6a:f9:f0:c1:b4:45:0a:69:
         49:2a:d2:7b:b4:c5:5b:ec:23:77:6a:43:39:a2:90:95:bf:70:
         11:da:bc:12:60:ab:e8:8c:02:fb:8a:be:0c:1c:4a:93:6f:9d:
         1d:8b:93:14:6a:a3:fd:c1:6f:69:a9:ee:dc:ec:d1:85:d6:b8:
         e3:79:ce:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----