Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/52551d982b271140464c07a1caefb2fc43659259.cer
File:                     52551d982b271140464c07a1caefb2fc43659259.cer (raw, json)
Hash identifier:          ssOmxL98wMYlqUHxU2l37zWWAZc3lDnhqfBCDlrep+E=
Subject key identifier:   9C:BA:7D:28:98:25:70:4D:1B:B9:57:87:4F:95:42:0C:3A:35:32:BA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       ECFB73
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/98abee66-b927-45d5-84b7-704b096eabb5/52551d982b271140464c07a1caefb2fc43659259.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/98abee66-b927-45d5-84b7-704b096eabb5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 06 Jun 2023 22:03:17 +0000
Certificate not after:    Wed 10 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 3132
                          IP: 161.132.0.0/16
                          IP: 200.1.176.0/21
                          IP: 209.45.0.0/17
                          IP: 2801:150::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15530867 (0xecfb73)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun  6 22:03:17 2023 GMT
            Not After : Jul 10 06:00:00 2024 GMT
        Subject: CN=52551d982b271140464c07a1caefb2fc43659259
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:c0:86:e0:88:2b:69:10:c8:14:72:0b:1b:82:
                    77:34:3e:af:85:78:0e:60:ee:41:cf:43:17:f1:23:
                    06:0f:d8:2b:48:cc:b6:bd:58:fc:14:1d:32:89:96:
                    ca:77:10:18:46:5b:81:b7:63:ad:68:fe:74:d2:46:
                    1d:7f:5e:95:28:5e:54:bf:cb:52:49:34:d9:8d:df:
                    d8:a6:e7:da:92:9e:c4:e2:72:80:e6:e1:0c:b1:30:
                    bc:b3:12:6b:d0:ca:9b:ae:4b:f2:eb:6d:da:c3:66:
                    73:3c:b7:ab:0c:4b:b9:70:8c:9b:2d:ea:cc:1e:56:
                    d9:17:7e:4a:d9:a6:4e:86:c5:54:6e:58:7d:e7:c6:
                    f9:29:ba:01:06:f8:62:09:44:1d:c2:35:20:5a:39:
                    f7:e9:db:b5:e9:eb:4c:e9:b8:1b:73:a9:26:38:b8:
                    44:45:ea:a0:44:79:9c:b5:70:b0:0e:0a:2a:3e:eb:
                    a5:29:4f:67:87:94:7e:2a:20:61:78:36:5e:f5:9b:
                    8b:bc:5d:66:1f:51:4e:39:3d:39:31:4c:42:5e:87:
                    59:c4:a9:d1:ca:8b:af:18:31:35:2f:b3:03:d9:dc:
                    d5:e0:69:99:ce:5c:da:6c:cd:57:35:27:ba:4a:ed:
                    76:51:32:d4:f9:d0:07:e6:b9:8a:c1:62:85:9b:57:
                    ae:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:BA:7D:28:98:25:70:4D:1B:B9:57:87:4F:95:42:0C:3A:35:32:BA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/98abee66-b927-45d5-84b7-704b096eabb5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/98abee66-b927-45d5-84b7-704b096eabb5/52551d982b271140464c07a1caefb2fc43659259.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  161.132.0.0/16
                  200.1.176.0/21
                  209.45.0.0/17
                IPv6:
                  2801:150::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  3132

    Signature Algorithm: sha256WithRSAEncryption
         49:ca:a1:e8:31:25:68:d3:f7:92:c5:df:9d:32:27:fd:db:5e:
         3b:ff:12:cb:68:b2:95:f2:54:9b:2b:17:04:a0:f3:ca:93:f4:
         05:33:6c:87:eb:b8:f4:53:67:f5:8b:d8:f0:ce:6d:70:02:3c:
         6f:e3:61:53:d3:64:3f:66:1b:5c:29:14:4f:d8:12:28:b6:6a:
         82:cf:99:f3:d3:b4:99:c5:28:d5:c7:2f:f9:c4:a6:6e:cb:1b:
         97:17:53:e1:e2:c7:54:cf:db:7a:3e:e9:6c:cf:71:3f:e8:a7:
         c7:c9:43:2b:f1:aa:28:13:60:c5:3a:35:62:50:53:a4:0c:61:
         27:55:b9:31:cc:f9:ad:0a:bc:06:a1:e8:01:37:14:91:f2:86:
         fc:5c:f0:0f:de:66:8f:58:8d:31:32:6d:c5:07:81:e5:c6:8c:
         b6:3a:92:c7:66:72:da:73:7e:ec:b7:94:22:e7:58:3f:e0:54:
         99:a5:09:ac:bb:ff:05:5d:74:0e:7b:12:da:00:9b:20:25:c4:
         28:4e:2d:3c:be:44:02:73:a6:ab:b2:47:6f:89:ac:2d:c9:68:
         3d:d2:59:8c:14:b0:2d:24:12:aa:78:7d:ef:f9:d3:ce:f1:82:
         0b:08:7d:4a:32:75:e8:32:9f:e8:e5:8c:e1:99:2c:81:50:18:
         72:bf:cc:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----