Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/401380c90d8fea0a750a73c0fb6afea72dbcc30c.cer
File:                     401380c90d8fea0a750a73c0fb6afea72dbcc30c.cer (raw, json)
Hash identifier:          T1eFMznKE/ubySKg7MxatbCr3+wG1YJ8SGouLH/VZvE=
Subject key identifier:   DC:BD:BE:5E:A1:9D:9C:6E:CC:17:7D:43:F0:40:5D:40:83:CA:4E:B9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010B7FCE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/401380c90d8fea0a750a73c0fb6afea72dbcc30c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 22 Feb 2024 23:47:09 +0000
Certificate not after:    Sun 21 Dec 2025 05:00:00 +0000
Subordinate resources:    AS: 273186
                          IP: 45.230.86.0/24
                          IP: 2803:da50::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17530830 (0x10b7fce)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 22 23:47:09 2024 GMT
            Not After : Dec 21 05:00:00 2025 GMT
        Subject: CN=401380c90d8fea0a750a73c0fb6afea72dbcc30c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:a4:ad:91:ca:6f:f1:a4:dc:5c:f8:d0:3b:e2:
                    42:f7:58:36:4d:50:2c:9b:53:93:45:cd:57:63:1e:
                    a2:cf:e3:36:6e:22:15:c4:1c:79:dc:ad:0c:60:9e:
                    6c:cb:2e:82:9d:0f:8a:da:db:48:63:9d:0b:8e:15:
                    66:25:51:7b:64:34:52:8f:55:3f:d7:c2:40:44:53:
                    a1:79:c0:36:0b:f6:9b:64:ac:02:26:3f:f2:39:ac:
                    18:ce:2b:ab:86:78:52:cc:e4:2e:b7:e7:fd:88:1b:
                    62:8b:c7:a5:37:b6:bb:93:7f:8c:c6:2a:1c:55:dc:
                    1c:6f:0b:f1:3b:bf:e1:20:83:dd:cf:f8:71:a9:56:
                    dd:28:2a:b9:c8:28:05:1f:5d:79:f0:97:0a:b3:f9:
                    38:ae:25:ba:4b:77:67:36:c0:32:f0:2e:72:d1:76:
                    11:14:a2:13:d5:12:01:2a:d7:02:b2:0a:96:93:8a:
                    bc:11:3b:36:c9:78:3e:a4:87:f3:89:6f:13:2a:48:
                    8c:e0:e1:11:2d:45:89:14:ec:e2:c3:ac:a4:22:94:
                    62:c4:26:83:0b:3f:a4:44:3a:08:77:ea:0d:76:2e:
                    01:da:d1:45:c2:d8:53:22:7c:17:d9:1c:99:51:46:
                    f9:2e:2a:69:4b:de:22:65:07:22:f8:30:68:37:0a:
                    40:c7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:BD:BE:5E:A1:9D:9C:6E:CC:17:7D:43:F0:40:5D:40:83:CA:4E:B9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0bc3ed00-2501-4fcc-808b-64979e7cfa14/401380c90d8fea0a750a73c0fb6afea72dbcc30c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.86.0/24
                IPv6:
                  2803:da50::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  273186

    Signature Algorithm: sha256WithRSAEncryption
         84:b9:dc:f6:8f:5b:3a:6b:ab:ee:88:50:c2:3e:53:a2:1c:51:
         9c:d2:29:79:b9:d8:df:2a:f6:66:8f:d9:09:31:36:b0:ba:71:
         77:82:4a:3e:b4:c8:f4:20:a0:14:d3:61:af:e3:75:66:81:29:
         eb:ac:eb:6b:9f:55:c9:28:70:3a:9c:19:52:a0:58:48:f6:29:
         41:48:60:5f:f3:77:98:b1:b1:4a:ad:57:e9:43:38:78:1d:b3:
         66:32:b5:da:ee:60:d8:07:bd:90:47:18:b4:df:cb:a5:d1:d6:
         a7:50:82:7d:a7:f7:40:5c:46:cf:c8:44:3f:98:5e:69:72:4b:
         dc:df:91:42:89:df:8b:4f:2b:8e:ab:05:9f:bd:dd:ea:69:99:
         04:33:bb:29:f5:c7:1c:28:00:f3:13:ac:c4:f3:c3:c4:e4:d1:
         66:1a:ec:8f:db:3c:f8:cc:3e:b3:fc:81:b5:4d:54:54:e0:02:
         93:63:db:f1:03:a2:6a:a1:23:2d:9b:86:74:a7:4c:57:80:16:
         a8:e3:e6:b2:81:56:3a:53:65:24:55:31:f1:1c:ad:04:93:8a:
         68:48:9f:80:58:b5:d7:10:68:d5:fb:a6:fa:85:38:7b:e2:db:
         9f:fb:bb:6d:ba:9c:26:96:ef:b8:79:98:22:67:c4:5f:83:20:
         e3:2d:e4:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----