Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/349196e5906873d34fd0c8ce899971e00093557a.cer
File:                     349196e5906873d34fd0c8ce899971e00093557a.cer (raw, json)
Hash identifier:          lyDiFA0yEp31/Ap11ddH+6lpprK/CnNRPeb6CFWXfsU=
Subject key identifier:   91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DBBCBC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 28 Sep 2021 23:09:23 +0000
Certificate not after:    Sat 10 Feb 2024 19:18:36 +0000
Subordinate resources:    AS: 265702
                          IP: 45.5.148.0/22
                          IP: 2803:99c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14400700 (0xdbbcbc)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 28 23:09:23 2021 GMT
            Not After : Feb 10 19:18:36 2024 GMT
        Subject: CN=349196e5906873d34fd0c8ce899971e00093557a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:e7:1c:e6:0f:d9:40:45:91:55:20:9f:9a:fe:
                    8b:a6:d7:72:5c:fb:53:55:86:1e:6b:c3:1f:5e:7e:
                    52:3b:14:0e:c0:9c:f5:d6:f1:83:bb:d2:56:fa:bf:
                    e1:f5:0e:2c:b6:6f:38:d4:0d:f7:73:3e:da:a5:6b:
                    1a:cd:86:05:74:da:5b:1f:07:9f:e1:a0:ce:5d:98:
                    f4:5b:1a:5a:a1:8e:39:4f:70:1e:7b:7a:b0:9c:6b:
                    7a:9f:15:ce:54:ab:6f:a7:b9:53:c9:cd:59:ce:c4:
                    81:8f:fa:75:c6:4b:f1:35:05:64:2d:49:be:61:46:
                    40:23:5f:f3:33:6b:7d:5c:7a:50:fa:6d:8a:cb:bf:
                    87:a8:d6:08:76:9c:d6:cf:74:6b:70:9c:be:d6:eb:
                    04:2e:2f:69:48:6a:af:58:23:a5:e1:01:6a:62:70:
                    4d:06:2c:1f:c2:78:c0:60:8f:3a:50:2e:c8:e5:7f:
                    ef:be:8f:17:9f:f0:38:04:bd:a0:6b:7e:0e:0c:ba:
                    b2:cd:9a:69:92:c2:2c:63:45:8d:f5:1d:d0:80:54:
                    d3:38:02:80:2d:d1:d7:aa:4d:e3:dc:a4:fe:d3:e7:
                    42:fb:1b:e3:02:f7:4a:82:b1:d7:22:eb:c3:3f:8a:
                    46:1b:cd:9c:36:80:0c:7d:9d:07:f5:bc:ed:f3:f2:
                    48:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:D7:0E:F8:7D:9A:07:52:D9:46:60:B0:C1:27:3C:50:48:57:6F:0C
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b59dd58f-489d-42cf-8153-4583fa0ab617/349196e5906873d34fd0c8ce899971e00093557a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.5.148.0/22
                IPv6:
                  2803:99c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265702

    Signature Algorithm: sha256WithRSAEncryption
         9d:99:b6:87:9c:3d:00:18:56:80:52:0f:23:0e:4d:9d:3b:8a:
         c8:c0:72:2b:65:6e:a4:03:b9:14:06:8e:63:ab:f9:83:fb:66:
         2a:74:ee:20:f2:30:cf:31:5d:e2:c5:fc:66:f5:f1:8d:b8:d1:
         a0:5c:c9:50:66:1e:7e:7e:18:cd:9e:c1:79:9d:1f:95:7a:cf:
         7c:8f:0a:38:bd:94:5b:06:e9:8e:9a:1e:fc:dd:64:f1:31:89:
         c7:7b:53:60:b0:09:c3:d5:3c:82:9b:23:ca:cd:69:86:3d:01:
         8b:76:8b:ca:7d:df:67:e7:31:da:55:6d:d5:4a:65:97:79:65:
         ce:81:73:64:96:f4:81:85:71:e1:ac:9a:0d:d7:d5:06:b1:d4:
         cd:d7:6d:2a:88:d7:b8:d2:b0:46:3f:b5:70:af:4e:9c:8b:a3:
         58:89:36:fb:64:ca:4e:ea:56:0c:23:f9:1b:29:21:16:a4:48:
         67:f4:08:72:51:5a:53:d5:bd:64:9c:93:ee:5c:cc:7a:6e:50:
         6d:b4:2d:04:83:1f:20:f3:49:b8:18:f9:67:db:d2:29:a7:fa:
         24:dc:1f:0e:70:71:04:c7:7c:d0:66:a1:65:90:28:6d:53:0a:
         c8:7a:6c:33:8d:d0:cf:8d:f2:0a:ae:87:48:c3:ec:b6:08:c5:
         cd:55:8d:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----