Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer
File:                     33cc246e2aa61ac0c03176ebc5d03e7f4767c548.cer (raw, json)
Hash identifier:          KdkdgRetFOgmLXL2Qjo89DpnSXR0Fy3LocsAwVr6Ros=
Subject key identifier:   FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E35964
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 03 Apr 2023 17:59:50 +0000
Certificate not after:    Wed 29 Jan 2025 18:29:48 +0000
Subordinate resources:    AS: 272973
                          IP: 181.224.220.0/23
                          IP: 181.233.152.0/23
                          IP: 2803:1590::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14899556 (0xe35964)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  3 17:59:50 2023 GMT
            Not After : Jan 29 18:29:48 2025 GMT
        Subject: CN=33cc246e2aa61ac0c03176ebc5d03e7f4767c548
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bf:dd:1d:73:75:e5:41:e3:e0:37:6a:e3:be:
                    e5:e8:d2:a0:9a:1a:19:9e:10:c1:ab:c2:0d:c9:7f:
                    bd:6d:7c:28:75:db:3b:fa:9f:8e:f5:cb:f8:c7:a9:
                    bc:bb:82:73:ce:d8:54:f9:44:03:29:cc:b1:d6:cf:
                    13:e1:40:29:4c:eb:f2:9c:51:7c:7c:f2:88:c7:22:
                    28:98:4d:ee:71:d7:31:9c:b6:4a:a9:e5:97:6a:8a:
                    11:b6:8b:c8:5b:20:5d:10:e0:64:db:2e:d1:ff:af:
                    6a:75:ac:f7:aa:72:15:26:59:a2:61:36:10:2b:f0:
                    6f:33:8b:66:c6:a5:7e:37:9e:5d:0d:e6:34:6d:eb:
                    be:63:4e:70:0d:9e:05:39:22:84:dd:98:e4:d8:87:
                    14:4f:38:46:75:63:6b:49:af:e6:51:ba:22:be:69:
                    11:4e:c4:56:a4:1b:3d:a2:07:83:c9:53:8a:a3:08:
                    9b:ad:f3:6e:12:97:04:b7:38:02:f6:1b:af:d5:d6:
                    7b:42:c3:0f:17:d9:0d:da:d8:ec:01:58:30:4e:b0:
                    44:a3:08:32:9a:fc:5c:b2:37:08:e7:62:dc:2b:22:
                    6d:03:82:68:a7:b2:56:68:19:70:48:88:d1:44:0a:
                    02:31:41:49:84:1e:9d:69:89:08:6b:30:c0:8e:15:
                    82:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:DC:BD:21:24:0F:79:DC:18:36:E0:12:8F:C4:C1:D1:7B:3C:57:1B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/309cbf87-1c58-4858-b19f-e0b8858c4acc/33cc246e2aa61ac0c03176ebc5d03e7f4767c548.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.220.0/23
                  181.233.152.0/23
                IPv6:
                  2803:1590::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272973

    Signature Algorithm: sha256WithRSAEncryption
         4b:b4:19:90:d3:7e:1b:18:be:6d:2f:a3:da:a1:8a:66:53:e3:
         a5:f8:20:43:1b:e0:71:59:1c:91:7c:f1:75:ae:90:1d:55:21:
         35:ca:66:db:95:49:a4:ef:b0:9e:9c:4b:98:ba:34:27:c5:ae:
         35:c8:e1:00:ae:13:11:6c:49:b7:a6:22:98:16:2c:15:1f:82:
         f1:2e:03:38:73:19:d6:e3:96:85:23:3b:a4:24:8f:a4:86:30:
         14:c5:05:cb:69:cb:54:bc:0b:d2:fa:36:7d:16:43:d3:1b:73:
         73:05:db:94:c3:e4:62:7b:2a:41:cb:d0:b8:9c:46:b9:2b:d2:
         12:52:d6:cf:cf:c1:1c:a0:86:3f:50:74:3e:05:ea:5d:8d:57:
         4e:87:71:26:d6:49:85:7d:a3:13:22:ec:42:96:ce:96:a9:ac:
         60:67:5b:1f:db:62:83:11:1d:ae:8e:8f:a1:04:4d:e0:d5:47:
         fb:16:ca:38:d1:00:81:53:d6:24:70:e9:7b:34:d4:44:ae:49:
         d8:6d:d1:85:28:01:4c:ce:3f:9d:58:33:a1:7a:02:ef:6c:40:
         30:d7:47:6d:58:25:31:cb:ed:6c:66:e7:d9:27:96:19:00:d5:
         81:48:de:01:e5:75:82:5f:ec:fb:b8:2b:b0:7f:51:d4:e3:99:
         f4:f8:02:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----