Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/48e03989b6292885b6b4886bb9363a3ab1709f44.cer
File:                     48e03989b6292885b6b4886bb9363a3ab1709f44.cer (raw, json)
Hash identifier:          bvZt5xu07pbNN3nJAIbJ6ZUCYoN/3M0UX/YjiLB+TkA=
Subject key identifier:   F9:04:9E:B2:03:F5:F9:0E:D5:D7:37:0B:CE:8B:3F:14:AE:7B:A4:56
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EEB4E1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ff4d7838-5191-4cb4-b874-e4484f6f9cd8/48e03989b6292885b6b4886bb9363a3ab1709f44.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ff4d7838-5191-4cb4-b874-e4484f6f9cd8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 21 Jun 2023 00:23:24 +0000
Certificate not after:    Sun 04 Aug 2024 21:11:14 +0000
Subordinate resources:    AS: 269801
                          IP: 45.186.124.0/23
                          IP: 2803:cb60::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15643873 (0xeeb4e1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 21 00:23:24 2023 GMT
            Not After : Aug  4 21:11:14 2024 GMT
        Subject: CN=48e03989b6292885b6b4886bb9363a3ab1709f44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:5c:fc:f0:f2:27:a0:39:0e:69:7b:05:f7:0d:
                    15:f6:36:36:4c:92:a8:cf:94:13:88:31:13:39:bf:
                    4c:d8:9d:42:d9:54:20:1e:4e:16:ae:cd:46:e2:c0:
                    99:1f:da:91:80:44:1f:d6:df:55:cc:d3:44:c6:51:
                    23:fd:0f:6c:3f:6b:a5:0f:97:d5:b0:a5:f7:6e:c9:
                    3a:29:dd:ec:d8:84:28:4e:4b:ee:41:c1:bf:a0:e2:
                    20:59:2e:8a:16:90:35:f3:80:cb:1a:01:0f:41:81:
                    d9:d8:ac:89:cd:fa:69:dd:b1:41:55:9a:43:93:51:
                    48:93:7d:47:77:7b:48:3b:6c:73:d3:6a:dc:eb:6e:
                    37:a3:5b:e9:e6:1f:e7:a3:59:39:c5:29:1a:8a:77:
                    a1:d7:73:63:02:ce:dd:09:08:9d:2a:f5:3c:9d:3c:
                    b3:10:8e:a6:55:03:b0:e5:95:2f:dd:30:2a:51:e6:
                    06:a2:11:f7:d0:7a:fc:77:22:01:38:f9:dd:83:76:
                    1d:7c:be:96:74:08:6a:29:58:70:99:c8:a4:3c:fb:
                    26:03:c1:12:e6:51:7c:90:02:2f:1b:9b:cf:02:95:
                    e7:8d:f1:4b:e1:0a:bc:4b:ec:2b:ea:8f:84:3a:52:
                    c8:5c:4a:55:c3:03:a1:38:c1:0c:1b:81:36:fd:fb:
                    8f:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:04:9E:B2:03:F5:F9:0E:D5:D7:37:0B:CE:8B:3F:14:AE:7B:A4:56
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ff4d7838-5191-4cb4-b874-e4484f6f9cd8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ff4d7838-5191-4cb4-b874-e4484f6f9cd8/48e03989b6292885b6b4886bb9363a3ab1709f44.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.186.124.0/23
                IPv6:
                  2803:cb60::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269801

    Signature Algorithm: sha256WithRSAEncryption
         56:40:b7:e0:ea:90:16:ca:d8:c7:e1:84:64:ff:28:bb:f0:ab:
         a9:34:e9:4c:6d:e7:8b:0d:68:b2:3d:13:0f:22:ae:e8:8b:c1:
         5a:a3:f3:54:e6:ae:d2:d0:72:a2:fa:ce:30:bb:be:6b:1e:f6:
         43:44:74:67:01:3d:a8:4a:d5:04:53:2c:e7:c4:78:4c:73:07:
         f2:1a:a9:9c:6d:d8:c0:8e:a6:99:35:09:55:ce:09:37:40:02:
         a9:ca:1c:fc:c0:1d:f1:8b:d1:91:ad:02:21:06:b3:56:eb:19:
         ea:2c:c3:12:6b:d6:35:9f:d9:6c:d5:fb:14:4e:3b:65:45:6a:
         ec:85:e1:6f:9e:64:20:46:4a:75:49:e3:dd:49:66:ab:c3:30:
         4e:c8:12:0a:61:a8:bf:70:c8:bc:70:ba:dd:0c:a3:47:90:fd:
         c5:de:ae:e5:aa:24:df:ce:3d:9e:fc:b1:2d:3d:bf:9c:a8:12:
         e0:48:24:d3:d4:55:2f:d0:0c:b7:4f:7f:1f:29:00:cd:41:b7:
         44:b7:37:04:0c:74:da:2a:bc:e5:70:24:f6:14:c8:30:92:ca:
         37:d7:dc:56:a6:9e:20:e0:ed:23:a1:c6:e8:c2:05:08:26:ab:
         9d:15:0b:32:e0:0c:0c:3c:65:c2:a9:57:e9:96:03:56:88:bb:
         84:a2:fb:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----