Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/533be4fa315ac02f1399f8b25bc0ba5233ff5407.cer
File:                     533be4fa315ac02f1399f8b25bc0ba5233ff5407.cer (raw, json)
Hash identifier:          R1MhS8E16O59Zj25on8tPW8c7InYyz92brgEuAvAN7s=
Subject key identifier:   3A:46:88:76:67:EE:24:BF:A0:D8:08:A8:0F:B1:5B:58:F6:F8:F2:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF1AC9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b5a0b9c0-b6fc-4f39-bcdb-d1be0f4779b3/533be4fa315ac02f1399f8b25bc0ba5233ff5407.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b5a0b9c0-b6fc-4f39-bcdb-d1be0f4779b3/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 21:24:59 +0000
Certificate not after:    Wed 30 Oct 2024 13:43:38 +0000
Subordinate resources:    AS: 263509
                          IP: 191.243.176.0/20
                          IP: 2804:1300::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16718537 (0xff1ac9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 21:24:59 2023 GMT
            Not After : Oct 30 13:43:38 2024 GMT
        Subject: CN=533be4fa315ac02f1399f8b25bc0ba5233ff5407
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:39:16:6c:46:a9:75:99:e9:bd:26:95:1f:75:
                    86:64:26:48:95:82:25:ce:bf:5d:8d:88:e3:73:b8:
                    34:b0:94:4b:1d:22:1f:2b:c5:7c:7d:c1:2d:d9:db:
                    c4:4c:1a:c4:c9:c6:7b:6e:84:e4:dd:83:39:3a:02:
                    b6:ba:67:92:0c:3e:6a:d9:26:a7:62:cf:d3:fb:22:
                    62:81:6c:73:06:e2:1d:be:f0:c1:0d:1a:22:17:0e:
                    72:81:e5:22:19:98:08:e2:09:d8:d5:cd:e9:2c:ab:
                    40:0c:79:c3:cb:bf:f1:80:2d:a2:f9:16:70:fe:47:
                    1e:dc:66:0b:f6:ad:42:f1:b3:77:e8:be:91:da:44:
                    bd:ca:af:fb:e7:7b:76:b3:ff:3e:bd:88:91:2d:be:
                    e2:49:03:b9:88:ca:13:93:be:a2:c8:04:a0:d0:28:
                    7a:a7:4e:39:8d:ca:3d:d8:18:62:2f:c3:47:2b:cd:
                    c9:3c:c1:45:10:2a:4e:f2:bf:cf:6e:bc:06:18:9e:
                    5d:72:f3:a1:c7:2b:9d:28:bf:9d:0c:79:ab:97:29:
                    49:4f:6a:8f:56:f5:c7:80:de:3f:02:c7:e6:0b:81:
                    5f:e8:10:aa:0e:fb:37:3f:c6:50:7b:1b:73:c2:bc:
                    14:a8:77:1f:b2:09:20:a4:8a:74:65:db:35:08:b3:
                    e1:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3A:46:88:76:67:EE:24:BF:A0:D8:08:A8:0F:B1:5B:58:F6:F8:F2:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b5a0b9c0-b6fc-4f39-bcdb-d1be0f4779b3/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b5a0b9c0-b6fc-4f39-bcdb-d1be0f4779b3/533be4fa315ac02f1399f8b25bc0ba5233ff5407.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.243.176.0/20
                IPv6:
                  2804:1300::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263509

    Signature Algorithm: sha256WithRSAEncryption
         89:c1:26:db:dd:06:d8:2c:e8:13:9e:83:e9:96:97:c0:97:10:
         61:d4:85:44:0e:15:44:60:69:3d:4a:c0:c0:13:84:c7:6d:b4:
         36:1b:39:4d:de:c4:f3:d1:64:31:79:bc:b4:b7:fb:72:18:42:
         28:e3:41:cc:6a:28:a9:09:e9:f9:64:d7:7c:ad:ea:4f:e9:de:
         59:b4:6d:4a:e3:47:60:28:88:b5:a6:cb:f9:bd:58:b3:cf:f9:
         1d:ae:ed:7e:68:e3:86:07:13:76:e0:74:a1:1c:e1:65:cf:cb:
         6a:c2:56:fe:1f:9d:b6:21:e7:67:88:a5:3e:06:11:72:40:27:
         38:4a:d0:7f:31:3c:4d:1a:d6:da:59:96:d4:6d:20:8d:9a:80:
         84:56:d0:08:55:19:84:ec:0f:28:b1:72:9d:53:4c:2f:bc:a8:
         7d:f8:ad:8f:f7:76:4b:36:45:d8:39:e0:a6:9f:67:ed:ed:58:
         a0:05:3b:fc:72:bc:df:ac:02:7a:11:d7:c4:fe:53:47:2d:df:
         94:12:27:df:de:eb:6b:20:ac:80:d7:91:a9:6c:ec:b4:bb:08:
         85:16:98:a1:e7:fb:e1:78:2d:5d:c2:42:9d:e9:ad:d0:3b:0d:
         af:0e:47:ca:7b:ce:6a:91:a0:c1:e2:a9:0c:98:1b:99:18:0a:
         01:8d:48:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----