Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2d40cd37baa53cda110aedaa2bfb5c49c91ff154.cer
File:                     2d40cd37baa53cda110aedaa2bfb5c49c91ff154.cer (raw, json)
Hash identifier:          hHVatIqroKWEZXXFu0b1WeZ8nu3YKgYxO8RFIiet5kk=
Subject key identifier:   AC:30:F1:63:D1:2C:0B:FE:2A:3B:E3:FF:A7:90:9F:B9:0E:23:34:DB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F851E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9561c736-bd8f-40c1-8924-ad2b32fdba2f/2d40cd37baa53cda110aedaa2bfb5c49c91ff154.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9561c736-bd8f-40c1-8924-ad2b32fdba2f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Sep 2023 16:43:32 +0000
Certificate not after:    Sun 15 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 266758
                          IP: 45.231.156.0 -- 45.231.158.255
                          IP: 2803:7320::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16273892 (0xf851e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep  5 16:43:32 2023 GMT
            Not After : Dec 15 04:00:00 2024 GMT
        Subject: CN=2d40cd37baa53cda110aedaa2bfb5c49c91ff154
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:fb:ff:27:ea:38:e8:a8:9c:39:c5:72:a3:bf:
                    cc:8a:3d:e0:05:2c:19:2d:bb:ab:72:6f:dd:47:b0:
                    07:1d:46:4c:6e:05:26:d8:c0:ab:78:77:47:a7:a0:
                    bc:2e:bb:4f:3d:96:a2:48:d1:e1:33:35:af:29:7c:
                    b2:0e:6a:32:8b:ce:7b:61:18:1e:68:fc:fe:50:e6:
                    66:38:61:10:32:34:cc:d3:ad:9b:e4:e9:38:09:8c:
                    9d:84:9f:7f:23:8a:ee:93:fa:e1:9b:ec:86:84:be:
                    1b:6b:a5:85:74:4d:3d:9e:88:ab:e4:2d:3d:26:4a:
                    4a:d5:90:db:62:51:be:5b:5a:5b:a2:0b:2c:7e:c9:
                    d8:7c:1c:9c:b1:57:e9:ce:82:93:f5:55:36:0d:e4:
                    db:1f:3b:df:b4:8a:5a:00:c7:0b:2c:9d:98:44:cf:
                    81:9c:81:a6:1f:ba:62:7d:c4:67:8b:86:dc:23:dd:
                    13:04:1e:4c:40:ac:70:13:30:13:f9:ae:e9:5e:d2:
                    af:38:74:53:15:05:60:1e:5b:aa:16:f7:b0:d9:d3:
                    9b:2f:f2:59:9a:e4:c4:f6:b8:46:b2:ec:66:8e:69:
                    88:5f:83:da:0b:02:fe:d5:5d:18:de:b5:ac:e5:43:
                    df:13:80:3f:27:43:3d:66:89:59:1d:5e:5c:d9:13:
                    63:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:30:F1:63:D1:2C:0B:FE:2A:3B:E3:FF:A7:90:9F:B9:0E:23:34:DB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9561c736-bd8f-40c1-8924-ad2b32fdba2f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9561c736-bd8f-40c1-8924-ad2b32fdba2f/2d40cd37baa53cda110aedaa2bfb5c49c91ff154.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.231.156.0-45.231.158.255
                IPv6:
                  2803:7320::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266758

    Signature Algorithm: sha256WithRSAEncryption
         35:c1:66:86:3a:0d:e5:64:a7:3c:8e:03:01:b6:3f:52:1c:67:
         46:05:92:67:f4:5f:dc:86:a4:32:76:09:54:5f:df:c0:08:c1:
         5c:c0:c9:58:a8:3b:3c:be:99:3b:0b:c3:64:ae:67:8f:67:dc:
         c6:ac:f3:78:12:43:e9:d6:88:f3:96:77:82:e9:37:ab:70:7d:
         3c:28:94:78:84:11:e6:58:7c:e7:24:a2:8d:0e:87:3b:8d:1d:
         fc:02:51:ed:f7:3a:ed:00:99:bb:56:4d:d7:b2:6c:08:19:12:
         c8:7a:c3:db:ad:6c:e9:9e:2b:43:46:ea:6b:ce:f9:9b:cb:22:
         79:a5:85:6c:26:8a:eb:13:95:bb:cb:ec:91:b3:3e:2d:31:60:
         81:10:85:e4:b9:35:9e:98:b7:49:9d:57:94:2e:45:c1:9a:90:
         d0:7a:56:10:7a:44:7c:7c:d3:af:83:c4:b4:fb:53:fd:68:47:
         63:63:58:67:bf:fb:0c:0e:d4:41:b0:7f:4a:7a:66:aa:34:17:
         5a:39:e8:56:f8:fa:d7:9a:fe:ca:5e:0d:fd:c3:4d:ba:e8:59:
         e6:00:91:0e:a6:06:b0:e1:d9:ca:03:7a:cb:d1:c3:08:08:d2:
         b2:56:55:1b:5b:bf:a8:b0:81:f6:a9:a0:07:36:37:08:a5:2c:
         9d:7a:f1:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----