Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer
File:                     39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.cer (raw, json)
Hash identifier:          jPFx/KFysmUrW+xR5Xuov+XMTbXomBFzHZ6FaOBcNIw=
Subject key identifier:   F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F44915
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 07 Aug 2023 20:58:05 +0000
Certificate not after:    Sat 23 Nov 2024 04:00:00 +0000
Subordinate resources:    AS: 52412
                          IP: 181.224.204.0/22
                          IP: 2803:d990::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16009493 (0xf44915)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  7 20:58:05 2023 GMT
            Not After : Nov 23 04:00:00 2024 GMT
        Subject: CN=39475f17ce0d3dd321d8facdd1f4b6959db4fc7e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8f:c6:db:9b:5c:15:53:1b:4e:a6:a7:68:81:dc:
                    b4:0b:4b:f1:bf:32:b3:a0:18:f3:25:38:bb:48:56:
                    11:54:70:60:e9:1e:f8:0d:f4:be:67:ab:67:36:54:
                    e6:99:c9:80:51:d0:39:83:f0:90:7c:49:de:4d:c8:
                    4c:9d:0d:47:06:2a:18:4a:76:81:71:15:8f:55:2b:
                    47:d7:0d:40:bb:04:98:c4:a7:b6:19:96:f0:ac:64:
                    74:c0:6f:67:b2:2a:c9:84:e1:de:d6:10:9b:1a:9a:
                    e1:ae:d4:36:8c:84:49:82:a9:00:87:6a:a2:9e:6c:
                    49:16:9e:b7:e3:2f:c0:5a:86:2a:19:5d:45:db:a3:
                    d3:a6:c9:7c:83:9e:42:44:ef:a5:96:f1:9d:16:d7:
                    92:cb:4a:c4:66:f8:6a:a5:24:8d:91:01:a1:ac:c5:
                    02:a8:92:b2:63:81:e5:3a:60:ef:6a:ec:81:91:37:
                    5f:63:c4:fe:c3:7e:09:56:57:96:5c:c7:97:aa:34:
                    87:1c:32:83:c5:67:2f:81:e5:60:b3:b8:fd:c6:67:
                    53:bb:c8:93:e4:9e:06:9d:0e:c0:e9:eb:40:47:0c:
                    14:c6:45:83:59:1a:f4:d0:7e:6c:7f:3f:77:c3:0e:
                    72:7b:e6:6d:37:f4:1b:45:53:8a:d0:24:88:bb:d7:
                    9b:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:6F:23:C5:AA:FA:05:29:FC:96:D9:A3:0F:B5:F7:E8:EE:04:20:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/4fab9395-89df-48f0-bf60-537caddac185/39475f17ce0d3dd321d8facdd1f4b6959db4fc7e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.204.0/22
                IPv6:
                  2803:d990::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52412

    Signature Algorithm: sha256WithRSAEncryption
         59:29:17:d3:ca:4d:5b:c3:46:36:4e:3a:84:2f:31:dd:e8:d5:
         5b:4e:73:69:98:f4:1b:6d:11:2a:08:b4:84:1b:03:46:7c:51:
         b5:e1:00:34:52:cd:d0:87:86:70:b7:98:a9:35:e4:b9:e0:59:
         42:99:ca:99:ab:3e:5b:ea:5e:cb:22:0e:3a:bd:ba:a9:17:cd:
         9e:78:75:38:59:61:b0:f2:54:7a:44:62:d5:13:59:0c:d7:32:
         24:da:42:f0:60:71:77:f0:54:b6:51:2f:66:50:8c:fa:03:44:
         9b:74:59:44:16:d4:f5:3a:f4:4c:a6:28:c4:ee:3d:1a:72:39:
         e3:3b:02:7b:41:9c:96:91:3f:bc:b0:74:78:80:9b:a0:a5:d9:
         fc:55:12:40:40:a6:f2:3d:57:7d:16:10:ca:89:0b:ec:90:0d:
         ca:f3:7f:77:30:34:dc:75:29:7e:13:74:c1:96:29:a9:dc:c4:
         17:0c:91:fb:ec:8b:8b:f0:31:08:c4:87:be:f6:ea:0b:da:78:
         f1:f6:41:75:ea:6d:86:09:e1:2c:02:cf:a8:22:05:08:d5:66:
         26:5e:88:94:38:9f:58:b5:f5:f5:c2:7f:1c:fe:94:8b:d2:22:
         f3:37:d2:0c:50:99:32:b4:da:fe:b5:27:7f:70:9b:38:47:c9:
         2a:a0:4e:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----