Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/55ce26e43e616531431cfa8b4aeacc0772fcbdb2.cer
File:                     55ce26e43e616531431cfa8b4aeacc0772fcbdb2.cer (raw, json)
Hash identifier:          Ny8oWgquzs1JVrf/5rwkhXtpHyuqutlG2XabIvxkO3M=
Subject key identifier:   F5:E3:CB:01:EE:2E:66:CD:DE:81:6F:24:AA:96:9E:4D:3A:2B:63:FA
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE780E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1988d89c-12dd-42ee-a7a3-2b4e5c4cdb59/55ce26e43e616531431cfa8b4aeacc0772fcbdb2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1988d89c-12dd-42ee-a7a3-2b4e5c4cdb59/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 16:25:13 +0000
Certificate not after:    Sun 12 Jan 2025 13:57:25 +0000
Subordinate resources:    AS: 264138
                          IP: 138.97.84.0/22
                          IP: 2804:2308::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16676878 (0xfe780e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 16:25:13 2023 GMT
            Not After : Jan 12 13:57:25 2025 GMT
        Subject: CN=55ce26e43e616531431cfa8b4aeacc0772fcbdb2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:8e:97:2f:0b:40:8d:33:0f:14:50:31:9f:33:
                    4d:3d:d5:c2:c3:1b:a0:e5:7c:bf:74:9d:3f:35:db:
                    07:86:af:c9:8b:91:01:45:c7:48:08:1a:4a:8d:91:
                    b6:43:8d:9d:17:93:b6:0a:35:7f:6b:17:f4:fe:58:
                    03:f6:ee:b7:00:94:e3:cb:7a:7e:fb:44:79:5f:d5:
                    f1:09:29:4a:87:80:24:96:d0:8b:1f:83:bb:5a:d9:
                    20:75:18:fd:1c:02:07:cb:2b:83:5e:89:5d:73:77:
                    4a:03:81:3f:27:5b:7f:da:87:31:b8:31:e0:a2:56:
                    e0:07:36:14:cb:52:d5:eb:92:3e:aa:d3:d9:25:4d:
                    3f:d0:06:cc:16:fb:72:4a:dd:4e:c9:3f:5d:c8:49:
                    b6:aa:89:e6:04:75:4b:ab:bd:01:a1:c9:65:cf:5c:
                    e7:b3:59:53:d6:e7:89:a3:5f:3d:33:91:dd:32:bf:
                    7a:f8:c9:9d:3f:5a:e5:b9:38:3d:cb:5a:0c:e0:fc:
                    e9:89:8f:c6:7e:af:9f:04:ec:e9:93:76:a8:4f:e4:
                    0e:91:54:ec:cb:52:fd:4e:ff:5d:ab:1a:de:2f:5f:
                    ba:b9:05:94:0f:fa:97:75:4d:5d:e2:9c:8f:79:3b:
                    5b:cd:0a:db:23:24:31:8c:b1:5e:fe:70:48:c3:e8:
                    38:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:E3:CB:01:EE:2E:66:CD:DE:81:6F:24:AA:96:9E:4D:3A:2B:63:FA
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1988d89c-12dd-42ee-a7a3-2b4e5c4cdb59/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1988d89c-12dd-42ee-a7a3-2b4e5c4cdb59/55ce26e43e616531431cfa8b4aeacc0772fcbdb2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.97.84.0/22
                IPv6:
                  2804:2308::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264138

    Signature Algorithm: sha256WithRSAEncryption
         c2:29:33:da:e6:27:af:0e:da:25:2a:d1:d8:2e:9b:74:78:c8:
         28:06:95:5d:d6:93:3c:68:67:1f:76:16:a9:bb:12:76:72:ad:
         04:a1:86:fb:8e:44:27:fa:d7:b6:13:24:f5:6b:ef:f1:6d:bc:
         98:52:75:c5:76:24:a3:19:c3:c3:a8:60:d7:99:46:b0:b9:1f:
         4e:6f:69:31:b0:ab:68:87:e5:51:3c:06:35:a1:cc:10:ae:46:
         75:8a:2b:e9:b4:51:8f:35:54:0a:89:ba:67:d5:b5:22:a3:20:
         93:26:6f:2e:29:6c:17:3c:b7:e0:62:f5:cc:e0:28:a7:28:31:
         b0:56:41:0b:9a:a4:d1:4e:8f:99:c2:cd:20:25:b4:70:49:44:
         85:92:a2:9b:63:a7:54:16:9c:a4:e5:74:67:97:36:d8:11:27:
         7f:8a:1c:e8:7f:26:58:62:33:2e:4e:29:4d:98:b1:da:ec:8a:
         11:60:7c:0d:68:09:95:65:08:ab:e7:63:b1:17:ff:d8:13:60:
         7b:6d:68:41:9c:84:ce:97:5a:a1:fb:0d:a9:e5:f2:5d:91:01:
         39:dc:f0:08:ef:6c:15:4e:46:2d:1c:dc:91:bc:99:3e:d5:60:
         4c:10:23:28:e8:51:5c:0c:c2:32:3d:e8:16:87:2f:70:2c:99:
         d7:ba:bd:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----