Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/53398be05c8c92d2dd129273aedd69f2c8ca21ef.cer
File:                     53398be05c8c92d2dd129273aedd69f2c8ca21ef.cer (raw, json)
Hash identifier:          AK8tEjtsj7V48Hf6BbZYcT11W0cIAYK7xuXGpTeXL5A=
Subject key identifier:   A8:AA:3D:C5:9C:CE:5B:ED:58:73:43:C5:74:AF:96:DB:71:E9:44:54
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108B6F1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bcaebe69-7ea4-4088-b74b-43870e411328/53398be05c8c92d2dd129273aedd69f2c8ca21ef.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bcaebe69-7ea4-4088-b74b-43870e411328/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 29 Jan 2024 19:15:49 +0000
Certificate not after:    Mon 17 Nov 2025 19:41:59 +0000
Subordinate resources:    AS: 266701
                          IP: 45.230.72.0/22
                          IP: 2803:2d20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17348337 (0x108b6f1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 29 19:15:49 2024 GMT
            Not After : Nov 17 19:41:59 2025 GMT
        Subject: CN=53398be05c8c92d2dd129273aedd69f2c8ca21ef
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:be:40:2c:61:d3:53:4a:9b:fb:c6:29:b1:a7:
                    ed:ee:d4:99:98:57:ab:b2:d3:ed:df:1e:aa:a0:76:
                    27:a7:2b:ec:c7:80:f0:f8:81:29:ee:f5:a2:8e:9b:
                    74:7e:5b:33:c6:de:b8:2e:35:3f:55:45:ab:62:07:
                    5a:22:4b:38:a6:63:5d:8e:74:35:9e:62:e7:6b:5c:
                    e2:8b:f0:e7:8d:fa:f9:6f:3e:e8:af:7e:a6:af:52:
                    a2:7d:1b:f7:64:0e:bc:52:16:ef:91:60:fe:c5:bc:
                    5d:d5:ac:2c:00:01:e2:54:96:05:14:71:fb:b7:19:
                    74:c1:40:26:fe:db:1d:fc:69:95:8f:a5:36:ce:e8:
                    39:1c:a4:53:d5:52:46:8d:9b:ec:f3:96:e0:67:a6:
                    51:87:1e:ce:2d:ce:ae:3e:f1:60:79:40:b5:9b:d8:
                    e7:73:d8:dd:a0:09:7b:ab:8e:3b:e4:76:f2:18:a5:
                    f7:cc:3b:dd:04:e6:12:63:b6:89:55:47:3a:54:97:
                    77:7d:f4:95:4f:2f:08:52:0e:e5:6b:07:ae:b5:68:
                    56:fd:d9:2a:1a:1d:e5:92:40:58:c8:22:7b:67:88:
                    09:78:2f:81:7f:20:f6:68:5a:59:c4:75:c4:e1:8f:
                    94:49:3c:bb:fd:e6:9e:10:2e:cf:55:f1:82:6e:90:
                    68:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:AA:3D:C5:9C:CE:5B:ED:58:73:43:C5:74:AF:96:DB:71:E9:44:54
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bcaebe69-7ea4-4088-b74b-43870e411328/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bcaebe69-7ea4-4088-b74b-43870e411328/53398be05c8c92d2dd129273aedd69f2c8ca21ef.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.230.72.0/22
                IPv6:
                  2803:2d20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266701

    Signature Algorithm: sha256WithRSAEncryption
         85:a6:1a:70:c6:a6:77:5d:89:04:ff:c8:e6:b8:32:58:dc:70:
         94:60:dd:3a:b3:78:4d:54:2f:a9:38:1e:e2:42:97:64:93:68:
         b2:7a:95:af:3b:e9:96:85:d8:46:a5:42:e5:3b:40:c4:be:97:
         08:e0:f2:32:f8:0f:eb:b5:b5:50:4e:f8:d5:39:42:98:ee:a5:
         ff:67:c0:c1:ab:73:cc:71:a9:e3:b3:ba:58:ea:f0:51:18:34:
         1a:9b:e4:36:7a:2a:c9:d6:c6:79:45:15:68:36:3f:52:ce:1d:
         c5:f5:41:d0:b1:18:46:d1:79:2f:83:f8:af:30:e3:aa:c5:a3:
         67:88:a2:28:19:32:68:41:40:10:d1:8a:15:32:5c:2b:f2:23:
         61:0e:99:05:8e:cd:6f:aa:9c:b5:6f:e5:02:d8:fb:f7:3d:f8:
         d3:49:78:ad:08:7a:13:ed:59:02:65:33:82:9b:ec:66:b7:48:
         1b:78:81:f9:aa:9a:a1:be:24:12:cb:46:be:a6:46:ce:c9:89:
         76:f8:b4:3b:28:4e:48:f3:24:e2:a2:ef:7e:72:a6:2e:40:df:
         5b:ce:ca:47:2e:51:d1:59:dd:ce:9b:74:84:d2:e5:84:64:f7:
         e6:35:dd:5e:2d:84:50:61:05:0a:d5:a9:1b:c0:7e:18:97:ec:
         3d:48:8d:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----