Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d0481442d298c8ab33b5940e003d3ce3a972def.cer
File:                     2d0481442d298c8ab33b5940e003d3ce3a972def.cer (raw, json)
Hash identifier:          Vpyc+8mRoGVbx+DmyG2OMnQoF9WUYdN4OrPJbXe9XOM=
Subject key identifier:   A9:15:37:87:9F:5C:60:59:40:64:DF:0D:4D:4C:E0:38:8C:54:1D:02
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9F742
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/89ea5ef5-4b72-43db-8928-4b9a84ce7ec1/2d0481442d298c8ab33b5940e003d3ce3a972def.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/89ea5ef5-4b72-43db-8928-4b9a84ce7ec1/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 13:08:46 +0000
Certificate not after:    Tue 11 Mar 2025 15:44:02 +0000
Subordinate resources:    AS: 266799
                          IP: 45.233.234.0/23
                          IP: 45.234.87.0/24
                          IP: 2803:88a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15333186 (0xe9f742)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 16 13:08:46 2023 GMT
            Not After : Mar 11 15:44:02 2025 GMT
        Subject: CN=2d0481442d298c8ab33b5940e003d3ce3a972def
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:61:19:c7:df:33:d4:e5:3c:27:04:94:2e:4f:
                    c9:ec:d9:75:6e:fe:b0:7c:02:69:54:22:22:f6:e6:
                    5c:67:09:36:bc:d2:18:26:1c:8b:9d:46:ae:c7:ed:
                    e4:4a:16:42:a5:94:e3:81:f1:72:fe:ed:66:96:de:
                    b9:cc:5f:a9:ae:80:ac:5c:93:4c:19:b1:5c:e4:36:
                    54:ad:cd:9a:91:b6:98:0f:8f:a6:20:3a:5b:0e:74:
                    e0:32:b4:e5:7f:52:c3:e7:13:7e:06:6c:ee:09:8c:
                    77:47:68:5a:d6:4f:73:1b:68:56:b7:96:d7:3e:65:
                    29:88:ff:7e:80:98:c8:b4:75:c9:c6:93:5d:b4:d4:
                    1c:72:ff:a4:0b:6e:15:ec:44:a8:99:97:1c:fa:7b:
                    98:2d:81:c9:41:a6:da:58:72:41:37:72:6f:51:56:
                    25:ee:d2:39:cc:c0:c2:8e:d3:4f:3d:54:f4:92:93:
                    5b:91:d7:f5:bf:55:83:f1:a4:f8:8a:6c:34:5a:a3:
                    29:1b:a0:30:86:f4:88:9f:ab:c4:12:e9:01:ef:ca:
                    0e:e4:c9:d4:24:23:39:70:64:4a:a3:c4:c5:cd:34:
                    8e:63:1d:85:65:36:6b:a8:c2:0c:d8:87:c9:15:3b:
                    61:34:fe:82:13:58:91:7c:fd:99:b4:99:9c:55:f7:
                    2b:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:15:37:87:9F:5C:60:59:40:64:DF:0D:4D:4C:E0:38:8C:54:1D:02
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/89ea5ef5-4b72-43db-8928-4b9a84ce7ec1/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/89ea5ef5-4b72-43db-8928-4b9a84ce7ec1/2d0481442d298c8ab33b5940e003d3ce3a972def.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.233.234.0/23
                  45.234.87.0/24
                IPv6:
                  2803:88a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266799

    Signature Algorithm: sha256WithRSAEncryption
         82:e9:b3:d0:05:eb:a1:00:ec:6a:33:b9:e6:2f:bf:a0:16:5d:
         3f:21:0a:f7:b0:9d:0c:36:e1:4b:77:c4:cd:2f:d7:5d:36:b3:
         5f:a7:aa:c0:28:a5:e7:67:b5:ff:09:f5:fe:a7:46:c5:03:b3:
         73:1d:87:c0:67:d9:95:25:a4:c5:17:01:c3:39:5c:93:aa:f9:
         6a:55:a6:b7:b0:e6:28:81:9a:b7:a3:54:39:dc:2f:e0:c9:dd:
         77:ef:af:25:62:84:42:6d:22:c7:b8:4f:42:87:b2:2c:3c:64:
         2d:6b:13:8b:e9:c8:68:02:40:4f:81:09:6f:4e:3c:e7:cc:ce:
         d0:9c:2c:57:7b:45:7d:0d:d6:4b:76:ef:22:44:78:00:0d:16:
         05:ec:cd:8e:66:66:4c:30:4c:01:46:c8:19:8e:b3:dc:9d:66:
         66:d1:3e:f4:51:06:c5:a5:8b:9c:4e:83:f1:37:d7:f2:fc:26:
         fd:3d:cb:3d:49:34:8e:1a:ad:fe:57:a7:0d:4a:89:69:d5:3c:
         32:39:fb:07:6a:64:af:d2:2c:a5:72:9e:83:99:4b:04:bd:4f:
         65:29:70:2b:9b:fb:ba:22:cc:ef:2f:b2:c3:11:06:af:30:ba:
         60:ac:73:e6:50:89:5c:f1:23:e9:1e:4f:47:07:2a:5d:f5:9e:
         81:62:31:20
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----