Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5a87907b9ef24cb59648e8fd0b029232a460cf62.cer
File:                     5a87907b9ef24cb59648e8fd0b029232a460cf62.cer (raw, json)
Hash identifier:          G/VK1C4s/aTqN5ORXi8uOMysMLAFRU3c++5dK6Yeyzc=
Subject key identifier:   68:C9:C5:12:15:BD:53:F1:82:36:9B:AA:00:C6:72:D4:EE:17:00:AE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9FD84
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/5a87907b9ef24cb59648e8fd0b029232a460cf62.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 16 May 2023 14:38:53 +0000
Certificate not after:    Sun 19 Jan 2025 16:05:43 +0000
Subordinate resources:    AS: 267802
                          IP: 45.173.40.0/22
                          IP: 2803:ffa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15334788 (0xe9fd84)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 16 14:38:53 2023 GMT
            Not After : Jan 19 16:05:43 2025 GMT
        Subject: CN=5a87907b9ef24cb59648e8fd0b029232a460cf62
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:a1:cb:2b:41:6c:11:12:e9:a1:d2:e7:4c:8f:
                    4d:a2:c0:af:20:c5:15:60:63:f5:06:fb:31:a5:ca:
                    f2:e4:12:fd:6f:13:e4:d5:ed:23:70:4e:55:50:2f:
                    88:9d:e9:bc:f8:0d:c8:d3:1d:78:34:1d:df:17:cf:
                    75:db:14:35:1b:cc:76:bf:53:1a:4a:ad:f0:ef:c4:
                    44:42:37:74:5b:f0:b1:5e:68:6b:d1:ea:6e:b1:64:
                    52:5d:63:5d:f2:97:12:2a:4c:2b:35:20:1c:46:38:
                    e2:45:51:9e:17:e4:59:c1:13:1d:6c:bd:60:b4:49:
                    c9:e8:d4:33:5c:4e:ba:b7:7f:9b:96:f9:46:01:07:
                    41:dc:41:f4:21:f5:b0:2b:61:d9:d6:6f:64:b4:0d:
                    f7:d8:5a:a4:09:8e:9a:95:9d:e1:5a:2d:1e:42:2c:
                    3b:66:14:fa:85:c6:27:92:c7:54:33:c7:c0:81:bf:
                    0c:a4:14:3b:86:97:f0:10:56:d6:f6:32:35:a8:3a:
                    ac:22:82:46:96:5a:63:34:6e:86:7a:80:db:39:ff:
                    26:08:a9:da:a5:57:98:b3:96:33:86:61:24:6c:e0:
                    59:d8:70:53:88:7e:80:7e:b6:19:f3:f2:48:73:7c:
                    b3:ab:1a:2f:fc:68:9c:12:25:db:49:a6:1c:e5:b8:
                    a8:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:C9:C5:12:15:BD:53:F1:82:36:9B:AA:00:C6:72:D4:EE:17:00:AE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2f78a3dd-7ec6-4524-bbc3-6ff9d59f39e4/5a87907b9ef24cb59648e8fd0b029232a460cf62.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.173.40.0/22
                IPv6:
                  2803:ffa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267802

    Signature Algorithm: sha256WithRSAEncryption
         50:97:e4:3a:16:90:f0:b3:95:13:28:21:14:db:7a:0f:16:23:
         f0:11:0a:e3:de:f7:6d:1c:9c:09:84:0b:6f:a1:ec:ec:53:8e:
         9f:05:df:18:6d:d1:48:9e:26:c2:59:97:a5:77:db:14:25:48:
         fd:58:52:57:9d:5a:ef:91:6b:92:eb:5b:73:28:9e:7e:95:ca:
         ce:fc:a3:02:6e:89:a9:c7:a0:54:e8:d4:69:f1:66:ec:09:3a:
         08:73:4d:61:5a:61:d3:50:8b:bf:54:c6:9e:9e:09:c1:f1:87:
         1d:63:4d:7e:46:7c:72:98:73:6a:c8:45:f9:4d:c3:3f:e6:51:
         e9:78:76:07:00:c2:15:31:2e:79:e5:f1:b0:bd:40:95:15:9b:
         48:d9:ec:4d:6f:40:4e:ab:fd:9e:1d:46:74:68:b0:cd:ab:b2:
         dc:3f:f8:25:da:79:e8:7c:d6:b7:c8:c7:84:9c:ca:02:3c:89:
         92:2f:01:76:b9:c6:8d:00:fb:64:a6:e5:16:d1:8f:45:fe:a4:
         6c:f3:e3:fe:c8:b8:43:10:a6:04:23:ef:1f:89:0f:11:6f:fe:
         6c:5a:a1:cf:98:25:50:80:eb:e4:04:91:39:c3:2e:7f:40:b0:
         0a:d7:30:17:44:94:53:73:3d:2a:0b:22:f3:2f:7d:76:e2:63:
         8c:a8:49:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----