Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58e985c54e7c0ed1b54dcd8792f024b9349bc312.cer
File:                     58e985c54e7c0ed1b54dcd8792f024b9349bc312.cer (raw, json)
Hash identifier:          8Irwc/e0ooH5FKERZqNKBAvUD/V8c4rtaeDJ6uLSsWE=
Subject key identifier:   F6:2B:B1:65:4B:D8:DD:A7:E9:7D:A9:27:89:8F:61:A3:49:45:CC:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EFEE14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f0b5f48f-3813-4b65-983c-5401799497f7/58e985c54e7c0ed1b54dcd8792f024b9349bc312.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f0b5f48f-3813-4b65-983c-5401799497f7/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 28 Jun 2023 16:45:37 +0000
Certificate not after:    Tue 04 Jun 2024 18:50:09 +0000
Subordinate resources:    AS: 264748
                          IP: 170.233.208.0/22
                          IP: 2803:ef40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15724052 (0xefee14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 28 16:45:37 2023 GMT
            Not After : Jun  4 18:50:09 2024 GMT
        Subject: CN=58e985c54e7c0ed1b54dcd8792f024b9349bc312
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:a1:65:6d:22:31:1d:b8:0c:71:38:8b:4e:2a:
                    ab:38:fb:4f:26:83:ce:4f:97:6a:0c:75:ac:bc:69:
                    21:eb:07:6c:90:b6:86:3f:6d:d7:02:9b:16:ad:d2:
                    80:21:b9:4b:49:50:a9:1f:30:12:5c:ef:30:32:03:
                    ac:6c:c9:18:62:4e:b6:4e:07:9b:35:b2:7e:9d:c3:
                    41:2b:d3:28:34:b0:c0:eb:e2:51:2f:b0:80:e9:7c:
                    02:a1:2a:4e:24:17:09:ee:88:ea:b9:6d:7c:c8:bd:
                    1f:42:fe:28:61:36:d8:85:79:0e:d5:d9:77:ff:6d:
                    a8:11:b7:97:80:03:45:af:60:ac:9f:36:34:63:af:
                    60:5b:a7:ff:78:81:65:85:09:48:4e:e7:ff:93:91:
                    a2:a1:86:14:1a:52:d0:1f:04:ba:12:53:37:9b:38:
                    6a:83:5f:4c:60:d3:17:42:c7:af:6e:82:82:6a:9a:
                    f5:9d:63:f1:49:5a:d9:1d:41:c9:68:85:87:ac:b4:
                    ea:c7:8d:35:9b:f5:f8:99:10:b5:cc:b9:96:a1:7d:
                    74:b2:94:6a:91:8a:99:64:dc:4a:32:34:7e:21:40:
                    ab:8a:a5:a6:e2:a9:ac:4c:8a:3d:ac:4e:9d:1f:0c:
                    60:16:b7:24:58:93:a3:a3:3f:24:db:f7:1d:83:c1:
                    e0:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:2B:B1:65:4B:D8:DD:A7:E9:7D:A9:27:89:8F:61:A3:49:45:CC:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f0b5f48f-3813-4b65-983c-5401799497f7/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f0b5f48f-3813-4b65-983c-5401799497f7/58e985c54e7c0ed1b54dcd8792f024b9349bc312.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.233.208.0/22
                IPv6:
                  2803:ef40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264748

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:c6:6a:8c:9c:a4:7c:27:57:64:3b:48:e3:40:95:c9:51:
         e4:f6:fb:5d:77:74:d3:73:1a:2b:bb:33:00:8c:1d:48:96:b7:
         ca:54:1f:90:72:bd:f1:73:23:e2:fc:a6:ac:d1:a7:f9:d8:36:
         0d:c0:e9:57:9a:05:2b:9e:98:19:f3:ed:f6:19:d0:0c:70:5e:
         06:2e:dd:ab:ea:aa:96:15:cc:0d:9f:3a:ac:6e:db:54:b1:d7:
         82:3b:9f:6a:aa:4a:8d:7f:42:0d:4f:49:98:e7:cc:60:88:b6:
         32:60:59:e5:9c:8b:57:2e:b4:bd:1a:c6:a2:6a:d2:75:a2:02:
         f8:64:4f:38:8d:f2:41:bd:b3:d5:11:8c:07:cc:f9:a5:41:33:
         22:b6:2f:30:e3:a6:3d:0e:0d:db:b3:bf:a7:fe:33:01:68:d9:
         c2:b1:5b:46:6c:99:2e:a0:3d:82:b0:80:73:9a:44:78:ed:86:
         f7:10:88:d5:05:8c:83:1a:db:ac:7d:c2:d8:49:fb:39:c9:f4:
         50:31:9e:97:d2:24:49:06:16:22:79:03:53:6a:69:41:6e:fd:
         39:02:e3:43:92:89:ad:1a:f2:11:25:3d:aa:d7:72:eb:7b:41:
         84:cc:0e:a0:87:16:fb:73:ae:4f:c5:4c:7a:f9:4a:f9:37:82:
         ca:00:51:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----