Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50f2e353c2a1af3e7924280fa2d8603c1b56e309.cer
File:                     50f2e353c2a1af3e7924280fa2d8603c1b56e309.cer (raw, json)
Hash identifier:          zytU1zhUrVPURIKix/b3/gAln2tExH/dJ40IER3eiDU=
Subject key identifier:   EF:42:53:48:AE:B0:A1:9C:3C:58:57:E7:9F:89:B4:9C:0F:9A:40:A2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FCD6D1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/50f2e353c2a1af3e7924280fa2d8603c1b56e309.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 May 2022 20:21:00 +0000
Certificate not after:    Thu 14 Nov 2024 15:41:37 +0000
Subordinate resources:    AS: 271848
                          IP: 177.22.254.0/23
                          IP: 187.49.10.0/24
                          IP: 2803:8410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16570065 (0xfcd6d1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 12 20:21:00 2022 GMT
            Not After : Nov 14 15:41:37 2024 GMT
        Subject: CN=50f2e353c2a1af3e7924280fa2d8603c1b56e309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:47:06:28:38:85:6a:ba:07:60:2c:a4:f5:5a:
                    d2:c7:24:f4:74:82:47:e1:af:8c:75:c9:11:fc:7b:
                    02:39:6b:40:88:a7:4e:b9:8b:67:f5:06:01:3a:e5:
                    02:8b:7b:ae:da:e5:cf:86:26:35:89:c2:00:2d:3b:
                    9b:c1:d3:fd:69:99:95:35:1e:83:66:05:e2:32:76:
                    ca:1c:15:66:17:57:6f:f7:c5:b1:b5:f1:57:96:54:
                    76:d3:a4:b8:4b:50:af:fe:3a:4c:3e:9b:f9:e1:9d:
                    71:df:7f:7b:5d:d2:c8:12:c2:65:84:27:1a:b2:92:
                    83:e0:24:a4:90:e4:a6:d6:55:cc:73:fe:8e:06:36:
                    a8:7d:de:40:55:47:ca:73:ac:cb:00:65:f6:6b:f7:
                    31:3a:d6:95:8c:55:13:95:d5:63:b1:53:28:8a:ef:
                    1c:e0:dd:56:c5:0d:d7:c7:d3:c2:72:fe:1f:01:f7:
                    57:27:29:f7:22:af:61:a7:6d:19:c5:87:a9:26:b2:
                    27:da:38:d1:2e:36:1c:dd:d3:8b:b8:8e:03:2d:7c:
                    24:63:dd:c0:ec:65:ae:bf:f2:f3:35:aa:d8:2f:40:
                    a0:f0:bc:e4:e8:3d:0e:09:dd:12:c6:58:ae:6a:e4:
                    ce:ce:f9:66:20:a4:4b:32:aa:3c:f1:15:2a:44:78:
                    04:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:42:53:48:AE:B0:A1:9C:3C:58:57:E7:9F:89:B4:9C:0F:9A:40:A2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b4237b89-f403-4fd5-81da-10f21f8985a8/50f2e353c2a1af3e7924280fa2d8603c1b56e309.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.22.254.0/23
                  187.49.10.0/24
                IPv6:
                  2803:8410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271848

    Signature Algorithm: sha256WithRSAEncryption
         3e:63:a1:45:95:f7:b2:ac:e4:a8:6a:1b:ec:7e:82:f9:e1:87:
         6a:fa:ba:91:d9:79:9a:b3:88:64:1f:8c:81:3d:d7:ca:32:97:
         74:b7:e4:2c:56:1d:62:24:c3:cc:2d:6d:0b:26:70:e7:99:08:
         30:14:c3:3f:32:77:f1:39:2e:28:49:1f:01:33:f4:f5:9d:cc:
         94:4e:c7:b4:7d:88:98:27:4f:eb:a7:58:1d:1b:98:dc:5f:50:
         b5:2e:a8:7c:23:40:2e:df:b7:c2:32:1b:f2:82:39:c5:dd:ca:
         5c:74:4c:6b:de:45:8f:31:82:52:7d:eb:24:09:0b:30:b4:92:
         07:a5:ec:c9:e9:d5:b9:89:80:b0:33:20:a0:0e:ff:0e:bb:6a:
         a3:dc:16:10:38:f5:71:f8:d9:ae:a6:e5:4c:6a:d4:9e:5a:2e:
         89:30:e4:cf:5e:93:40:33:e0:3e:34:62:73:ce:d2:2e:a6:4e:
         74:f6:3c:40:c1:f5:cb:9e:9e:e8:13:30:c6:1c:58:a7:29:0c:
         c6:19:52:e3:83:aa:f5:35:83:b1:e9:cf:df:ce:dc:cf:35:e1:
         d8:c7:1a:85:27:93:01:8c:a8:ce:e0:f5:c6:4d:2d:ef:1d:d8:
         50:7a:28:12:da:dc:85:50:a2:2d:62:b2:40:a3:a5:bc:16:b4:
         0a:4e:88:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----