Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2733e5fc045a22897f64385008a5c519f68c3738.cer
File:                     2733e5fc045a22897f64385008a5c519f68c3738.cer (raw, json)
Hash identifier:          Ctl7Ex9vhDP94ScI7Q6c4XEfkO1IN0MhF8U8Dj1dSCc=
Subject key identifier:   34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       C9B55A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2733e5fc045a22897f64385008a5c519f68c3738.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 10 Jun 2022 17:39:37 +0000
Certificate not after:    Tue 21 Nov 2023 14:55:18 +0000
Subordinate resources:    AS: 272057
                          IP: 187.63.156.0/22
                          IP: 2803:7d10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13219162 (0xc9b55a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 10 17:39:37 2022 GMT
            Not After : Nov 21 14:55:18 2023 GMT
        Subject: CN=2733e5fc045a22897f64385008a5c519f68c3738
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:89:ca:31:a1:7f:70:ad:a6:92:20:2b:2e:a4:af:
                    ad:dd:09:a8:39:95:14:58:62:c0:fe:28:44:3e:a6:
                    98:dd:65:32:3c:28:e0:09:5c:88:c3:da:41:ca:42:
                    ca:1a:ff:3f:98:8f:de:1c:7b:db:9b:60:15:2a:78:
                    8b:b8:05:43:68:0e:aa:24:89:d7:fd:32:90:ba:e2:
                    93:5e:40:3d:62:31:78:2d:8c:cb:7f:56:12:22:30:
                    fb:f2:b9:d8:fb:53:9d:7a:cd:79:cc:b7:b5:fc:94:
                    5e:77:57:4b:2c:ab:99:72:a0:67:ee:9a:6e:8d:8f:
                    5d:5b:9f:09:70:62:01:22:2f:d9:99:2a:a6:96:dd:
                    65:9b:45:3a:fc:3e:4b:dc:15:37:88:97:dd:45:04:
                    6f:42:f5:04:a7:f2:ba:74:e4:5a:00:3e:d3:9a:22:
                    4b:33:ef:a9:37:88:dd:d9:5a:f9:e7:37:53:41:a9:
                    bb:3f:03:ea:cf:31:88:d1:2d:28:ff:f4:1d:15:44:
                    9a:dc:29:c1:8e:40:e9:ad:48:d9:14:30:ea:86:2f:
                    2f:94:e3:82:ac:ae:cc:50:06:a0:1d:59:03:e2:de:
                    09:4a:79:a9:72:34:37:28:50:51:88:90:36:02:2a:
                    d3:94:14:aa:43:b8:1f:07:c2:27:fa:62:fc:82:2e:
                    e4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:F4:01:2A:E3:5E:A3:ED:47:89:FB:B2:04:40:FF:56:A7:F4:DE:48
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/aaad9a48-b03f-47f2-ae94-86797b3c9a07/2733e5fc045a22897f64385008a5c519f68c3738.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  187.63.156.0/22
                IPv6:
                  2803:7d10::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272057

    Signature Algorithm: sha256WithRSAEncryption
         b0:42:c8:3b:cd:0e:02:d2:93:5a:f3:09:bf:1a:2c:69:97:ea:
         4b:91:49:c3:2d:ec:47:89:ca:b1:b7:9e:40:71:9e:c2:56:eb:
         61:8a:13:9b:16:f9:bb:f5:a5:48:c0:38:b5:0f:dd:d1:55:e1:
         6b:5c:dd:6f:0b:75:65:56:ac:64:65:e7:6d:4b:6f:e3:9c:4b:
         52:56:fc:94:f7:f8:e8:c0:22:79:19:02:0f:9b:c4:5d:ec:5f:
         7e:f4:52:9f:35:f8:9a:fc:1e:65:b1:f4:57:9c:af:c4:d3:8d:
         a6:45:2a:d1:bc:28:83:b8:69:16:c5:6b:3a:d3:65:57:dd:7e:
         77:16:90:06:ee:d2:94:cb:11:c6:cd:8a:4c:24:4b:1e:c2:82:
         90:ef:46:92:0f:fe:13:8b:d3:f3:dc:2d:34:32:2e:7b:23:c5:
         75:3f:5b:55:24:1c:09:d2:29:47:3b:48:fa:4f:5f:5f:4f:e2:
         2a:82:64:54:7a:11:57:52:20:0f:e1:c8:6b:8c:82:e9:18:5b:
         0a:42:62:02:78:72:af:aa:29:bb:df:31:5d:38:53:59:e9:0a:
         6f:e9:b3:c1:99:5b:38:99:cd:7f:30:8c:c5:64:5e:d5:fc:07:
         ed:8b:4c:bc:9d:ec:a1:90:c3:23:8d:93:63:b4:1c:d7:09:99:
         f9:7a:0d:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----