Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2dd69269c084c6ee72379a93a8cd12da2df4586f.cer
File:                     2dd69269c084c6ee72379a93a8cd12da2df4586f.cer (raw, json)
Hash identifier:          mV/QyCitk6Va+aAHJR6ZFvqqLjKaPRsZfxLQzywe2Us=
Subject key identifier:   31:6D:E6:EE:19:A1:45:E2:C5:4E:C2:3B:23:70:32:D0:C5:F2:79:E1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF8E0C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/dd472b00-e5a9-4f25-8e38-8c2d524b8e15/2dd69269c084c6ee72379a93a8cd12da2df4586f.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/dd472b00-e5a9-4f25-8e38-8c2d524b8e15/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:32:40 +0000
Certificate not after:    Fri 18 Apr 2025 14:23:28 +0000
Subordinate resources:    AS: 269066
                          IP: 45.179.56.0/22
                          IP: 2804:5ef0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16748044 (0xff8e0c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:32:40 2023 GMT
            Not After : Apr 18 14:23:28 2025 GMT
        Subject: CN=2dd69269c084c6ee72379a93a8cd12da2df4586f
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:d6:e5:bc:27:55:38:65:71:40:90:c0:e7:55:
                    ac:71:f9:60:63:00:1b:71:ae:7c:3f:9b:f6:82:56:
                    67:1e:f9:b5:5e:95:bc:42:6a:9c:4b:9a:9a:73:f0:
                    49:b6:a7:fd:3d:29:9d:6a:23:fd:f8:d2:6b:01:70:
                    1a:e2:b2:95:a2:75:39:63:6f:20:11:ca:82:e5:78:
                    dc:a6:c1:d8:76:ca:3a:47:ae:a2:22:ff:56:f1:d9:
                    ee:26:34:84:e6:95:ff:b9:e1:d8:fb:0f:e0:51:9b:
                    a1:88:9c:5a:01:8b:de:5f:56:4b:83:d3:fd:26:96:
                    78:87:73:b1:01:81:e2:7e:ae:de:e7:ff:b0:d2:4c:
                    3d:30:70:b6:f7:cf:2e:f9:db:60:a5:7d:e4:50:18:
                    de:6c:f7:72:25:c3:d9:fd:af:3e:c0:7a:d1:ec:95:
                    76:26:40:ae:d4:6e:47:63:75:1a:63:57:62:b2:25:
                    84:cc:8c:06:7f:db:88:04:d8:e9:38:f0:d9:ab:93:
                    11:38:01:16:61:19:d5:94:ef:0d:63:d9:56:22:d3:
                    f2:ad:bd:4f:2f:69:34:7a:dc:f1:21:ca:4d:e2:13:
                    7d:80:63:14:e4:3c:47:87:f5:fe:20:1a:98:15:59:
                    d0:7c:10:63:ef:45:53:4a:5e:6c:b5:54:7d:c5:74:
                    53:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:6D:E6:EE:19:A1:45:E2:C5:4E:C2:3B:23:70:32:D0:C5:F2:79:E1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/dd472b00-e5a9-4f25-8e38-8c2d524b8e15/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/dd472b00-e5a9-4f25-8e38-8c2d524b8e15/2dd69269c084c6ee72379a93a8cd12da2df4586f.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.179.56.0/22
                IPv6:
                  2804:5ef0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269066

    Signature Algorithm: sha256WithRSAEncryption
         03:c8:33:c5:98:e6:44:2c:8f:e2:79:69:1e:da:b0:ff:49:d4:
         1a:79:9c:e7:1d:9e:74:c5:01:47:82:d1:95:8f:9b:d0:3a:42:
         f0:45:3d:93:ad:f7:16:0a:9e:11:6c:eb:99:5b:5f:53:92:62:
         03:28:28:59:3e:fd:2b:b0:f8:99:92:f7:34:4c:3e:76:68:e6:
         37:e7:c0:f1:81:e4:49:a4:52:2e:b8:8e:47:47:84:b9:55:74:
         04:89:5f:1c:c7:b7:2b:17:ee:7e:16:21:39:50:c5:86:59:db:
         57:37:eb:70:1e:d5:8d:d9:de:ab:d8:be:86:85:0f:92:5e:d9:
         60:a7:fc:30:9a:c1:f1:7c:67:d2:f5:8c:da:71:20:f1:77:51:
         37:d0:7f:a3:00:60:22:57:65:64:33:f4:70:d6:4e:f3:6f:5c:
         bd:81:fc:b2:2d:6d:b0:11:05:35:ad:ce:ea:79:6c:3f:08:7d:
         cb:0f:f7:b7:8a:e2:ba:f9:5b:1f:ea:4b:d4:52:0b:96:61:b4:
         b7:4e:02:2c:b0:a8:0c:da:fd:11:f9:bb:9d:73:38:93:90:49:
         6d:21:f6:bc:02:8d:45:fe:12:31:52:73:1c:64:0c:21:99:18:
         a8:ff:70:d9:74:6e:07:ca:5f:c9:84:41:1b:c6:3f:09:c2:41:
         11:b6:aa:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----