Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fb556622985526f071e39da340bb282a107986e.cer
File:                     2fb556622985526f071e39da340bb282a107986e.cer (raw, json)
Hash identifier:          9t8gLiQyson1m9iow7CYbwUT7I6ilDduWyWVVw/DwAU=
Subject key identifier:   A3:38:C6:1B:95:60:5A:C9:08:B7:81:80:63:5D:64:25:62:BD:3D:95
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010E0090
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/2fb556622985526f071e39da340bb282a107986e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Mar 2022 19:41:33 +0000
Certificate not after:    Wed 30 Jul 2025 19:24:29 +0000
Subordinate resources:    AS: 64117
                          IP: 45.185.220.0/22
                          IP: 2803:d360::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17694864 (0x10e0090)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 15 19:41:33 2022 GMT
            Not After : Jul 30 19:24:29 2025 GMT
        Subject: CN=2fb556622985526f071e39da340bb282a107986e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:9e:43:ba:09:a2:61:e0:64:54:17:7e:5a:64:
                    68:99:81:0a:26:8b:5e:4e:cc:ec:d7:ef:0b:ff:4a:
                    f0:a4:66:1f:d3:6e:dd:e8:c2:72:98:1e:91:b4:66:
                    d2:20:ec:93:37:76:87:57:e8:d2:fc:ff:13:57:8e:
                    c4:38:7a:0f:1b:c1:da:d5:83:0e:e3:40:b2:5e:28:
                    d2:4f:0f:b7:46:33:35:d0:6c:21:87:d8:ec:60:05:
                    6d:15:26:9d:60:1c:78:06:5d:5e:a3:7f:ea:bc:23:
                    b7:52:cd:77:7c:67:db:6b:f8:f3:ee:fc:3a:34:4b:
                    8d:ed:34:3d:2f:52:aa:51:8f:2f:9e:63:ed:83:78:
                    ae:8f:d6:bf:d2:cb:d4:f7:c8:b7:f4:1c:63:d8:34:
                    d0:b4:d6:9a:b3:7e:14:03:02:3f:a2:1b:5f:fb:05:
                    62:37:89:a3:e6:5d:85:e0:f7:0e:51:a0:9f:3f:3d:
                    b9:09:04:5b:5e:ed:02:f0:fa:8c:14:05:bb:09:3c:
                    91:3c:6e:d0:6a:88:2d:87:f9:67:2f:23:35:44:f7:
                    e3:2e:5d:42:d0:5f:74:32:6a:6c:35:3f:c9:88:84:
                    62:12:48:ff:42:b6:0d:fb:dd:dd:dc:52:e8:65:05:
                    85:e9:6e:3f:c5:be:d5:16:72:9f:ef:ef:aa:cf:24:
                    5d:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:38:C6:1B:95:60:5A:C9:08:B7:81:80:63:5D:64:25:62:BD:3D:95
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/72680a52-e461-4903-b3c3-53d4f4bb3a92/2fb556622985526f071e39da340bb282a107986e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.185.220.0/22
                IPv6:
                  2803:d360::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64117

    Signature Algorithm: sha256WithRSAEncryption
         5a:bb:f0:61:07:ba:d9:57:30:6a:e8:12:7a:d2:82:eb:7d:07:
         ec:c0:95:bb:dc:35:7b:75:27:92:47:36:15:e3:7b:7c:d7:bc:
         cf:ec:e4:0d:4c:7c:40:ec:70:33:41:6e:4d:96:6c:82:71:ab:
         30:2a:4b:a9:0b:d1:4b:45:b6:f7:d2:a2:98:f6:ac:40:0a:de:
         cb:97:24:2a:65:40:94:9f:b9:b1:b5:39:60:15:d3:48:54:15:
         05:3c:01:50:af:d2:a4:e9:86:c3:50:a5:f7:7b:05:bd:a3:a2:
         05:94:65:1b:a0:79:26:01:aa:8d:aa:ad:b7:e3:f9:f9:b3:30:
         99:1b:88:57:8e:7c:db:aa:ba:11:6c:6f:cc:b5:2c:b7:44:9b:
         55:77:63:b3:fc:61:bf:35:41:16:a7:28:39:56:79:20:cc:97:
         15:66:93:55:c6:e2:81:6b:08:11:64:f9:62:39:d3:8e:33:3a:
         f9:f8:77:4e:46:b8:92:d0:17:37:47:44:89:47:40:1f:98:24:
         16:a7:79:8b:c4:95:dc:e8:1d:93:ec:ef:14:95:b2:2d:20:10:
         67:46:b3:98:b4:e7:b7:04:db:08:d4:0f:fc:7b:ce:c9:8c:cd:
         f3:67:9b:48:98:09:1f:2c:b7:7c:66:7a:18:5e:f5:6a:fa:24:
         8f:98:09:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----