Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/4ac8ec5dcf3b4d25c6412c30a1b5912461b45cb6.cer
File:                     4ac8ec5dcf3b4d25c6412c30a1b5912461b45cb6.cer (raw, json)
Hash identifier:          puBSArsZhlwZUv5SZlZJWYnYy9ES/7NxdVhNpUMgpSQ=
Subject key identifier:   42:C5:6D:E5:D2:09:74:9B:39:18:79:E9:08:D1:77:05:9F:2C:6F:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE7CAB
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fa315b9b-d6db-4ce8-b087-80ac5eedda36/4ac8ec5dcf3b4d25c6412c30a1b5912461b45cb6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fa315b9b-d6db-4ce8-b087-80ac5eedda36/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 16:25:28 +0000
Certificate not after:    Fri 22 Nov 2024 13:15:37 +0000
Subordinate resources:    AS: 267155
                          IP: 45.229.144.0/22
                          IP: 2804:48f4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16678059 (0xfe7cab)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 16:25:28 2023 GMT
            Not After : Nov 22 13:15:37 2024 GMT
        Subject: CN=4ac8ec5dcf3b4d25c6412c30a1b5912461b45cb6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3a:d6:78:49:76:ad:33:46:b5:09:0e:90:06:
                    f2:9c:90:70:10:b5:60:04:ba:27:87:78:a5:0b:4b:
                    91:76:e9:8d:c2:fc:db:68:4b:b1:64:c2:5e:ad:2a:
                    da:e3:c9:cf:1e:5a:c9:90:05:74:e3:3b:1b:d1:7e:
                    4a:19:e6:d5:cc:18:24:d9:e1:ba:8c:43:94:12:c5:
                    4f:87:fa:bf:a1:34:ed:29:ca:68:05:b3:c3:81:18:
                    f9:35:b8:88:b3:28:2d:0e:b7:89:22:2d:72:a5:af:
                    ca:d5:de:b1:ad:f5:3a:e6:c5:50:a4:50:8e:cc:24:
                    08:22:ac:3b:64:85:31:91:4d:40:90:18:a1:a7:4c:
                    1f:91:51:b3:dc:77:87:35:17:a5:5f:99:d5:42:6f:
                    5b:cb:d0:5b:bb:16:ce:4e:b7:63:b0:2d:33:8e:cf:
                    f0:fc:bd:3a:d8:55:86:67:e8:6e:e3:d6:ae:e4:31:
                    5f:d1:da:00:31:4e:ba:5c:c0:81:ed:8d:a3:3d:90:
                    5c:18:c5:ec:2f:4d:27:6f:7f:9c:f4:db:74:aa:2a:
                    19:fd:82:df:6e:dc:71:99:3f:f2:34:0a:32:9a:7a:
                    50:d5:f0:03:09:e2:c0:19:7c:7c:d2:be:d2:dc:e3:
                    7c:41:53:a6:f6:c1:fc:a4:c3:df:94:68:89:68:40:
                    3a:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:C5:6D:E5:D2:09:74:9B:39:18:79:E9:08:D1:77:05:9F:2C:6F:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fa315b9b-d6db-4ce8-b087-80ac5eedda36/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fa315b9b-d6db-4ce8-b087-80ac5eedda36/4ac8ec5dcf3b4d25c6412c30a1b5912461b45cb6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.144.0/22
                IPv6:
                  2804:48f4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267155

    Signature Algorithm: sha256WithRSAEncryption
         47:79:ab:5a:2c:8b:11:f0:19:4e:87:a9:3c:6b:47:e4:a3:49:
         b1:1a:e5:ed:c7:08:c5:2e:9e:02:1a:9a:41:55:ea:55:c5:bf:
         4b:eb:3b:84:22:f5:7b:17:bf:9d:7f:86:7e:dc:98:63:c6:65:
         c6:ab:d4:3c:2e:80:61:34:c4:e3:fa:18:c8:20:29:7d:3d:d3:
         f8:72:94:79:b6:3d:89:19:8d:30:b2:d0:79:1b:c0:2c:9c:a6:
         af:88:84:53:bc:91:f0:80:32:d2:5a:ba:f3:ec:a8:40:79:3b:
         62:2f:9d:88:c0:35:5a:48:02:b5:40:7f:7d:30:cb:62:7d:97:
         c7:7d:6e:b5:01:18:ad:80:8e:c3:a4:f3:5a:a0:7d:e3:ae:05:
         76:a4:31:c5:ac:92:1a:1f:89:ec:a2:f6:20:8f:9e:9b:b0:bd:
         45:2d:7c:de:10:d1:7a:10:90:92:4b:b8:f4:5b:a6:ae:98:2d:
         93:f0:a0:54:ff:49:d1:04:21:ef:61:3e:c9:59:cd:bd:47:f0:
         64:99:0d:95:e5:53:76:0d:f5:6e:dd:4c:a8:20:b4:d0:bb:25:
         96:c0:35:22:95:fd:77:a4:8c:25:a1:1c:75:e5:9b:96:9b:f8:
         0b:6c:cb:76:09:52:19:28:e8:a7:30:12:19:75:62:0b:7b:fb:
         f6:fc:98:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----