Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer
File:                     5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.cer (raw, json)
Hash identifier:          g7hUOUZJRnePmRYeSqeJ1YLXC+2Jd97dZJ9aL81ULYo=
Subject key identifier:   3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E9071F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 19:42:03 +0000
Certificate not after:    Tue 03 Dec 2024 16:42:07 +0000
Subordinate resources:    AS: 263213
                          IP: 191.97.96.0/22
                          IP: 2803:e280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15271711 (0xe9071f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 19:42:03 2023 GMT
            Not After : Dec  3 16:42:07 2024 GMT
        Subject: CN=5dbe213308e1f657ad90814bcb8813d9fd9c8c4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:81:c3:8b:80:bc:1f:12:89:56:5c:da:39:70:85:
                    39:80:b8:b4:d7:0a:99:d4:8a:7b:01:89:b6:33:74:
                    11:a6:ed:e5:65:c4:30:9e:66:28:93:93:05:4e:62:
                    8b:8c:d4:58:7b:8b:55:7c:3e:2e:66:57:b1:a1:12:
                    8d:64:06:57:18:7f:ca:e8:0d:7b:52:96:7a:88:61:
                    cd:40:c9:73:17:a5:e8:2c:0c:81:d1:63:6c:bd:9b:
                    b8:d7:7f:e2:05:17:82:49:96:90:36:85:cb:17:70:
                    59:72:fc:87:18:5c:4f:88:b2:1e:40:61:f0:3d:3c:
                    52:e8:3a:75:23:fe:90:31:1b:17:73:3d:b5:64:9c:
                    32:9f:6a:d6:f6:04:39:7d:f3:f2:2f:a3:5e:a9:8c:
                    f7:f6:06:c8:5d:e0:6c:56:83:aa:94:38:08:03:af:
                    8e:90:ce:e0:27:01:57:ef:0f:3e:c1:74:5b:57:cb:
                    f8:31:41:51:12:86:76:cc:33:9d:dc:c6:b8:e5:c5:
                    23:25:43:39:f4:69:36:23:d6:56:fb:d6:f2:54:5b:
                    7d:31:65:fd:ab:1f:52:63:13:e7:b7:30:6c:c0:e5:
                    a7:61:35:02:4f:d8:a3:5a:c4:d7:94:5c:88:aa:b6:
                    57:84:7e:d0:aa:e7:03:cf:8f:47:f2:60:6c:93:eb:
                    d2:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:90:04:1A:AC:83:67:A2:CE:39:A6:10:AF:03:79:B5:70:EA:BB:2F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b161f8fe-fed4-4345-b7b8-d20fee2596e5/5dbe213308e1f657ad90814bcb8813d9fd9c8c4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.97.96.0/22
                IPv6:
                  2803:e280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263213

    Signature Algorithm: sha256WithRSAEncryption
         36:c2:b4:c3:97:6c:9b:14:c7:ab:7b:6d:f2:54:5c:ae:fb:48:
         10:58:c0:af:af:92:d1:2d:06:5d:0b:4c:d2:50:48:34:95:c5:
         4c:28:d2:b6:c8:9d:be:b5:2a:13:a6:f0:a8:4c:9a:0c:ec:e1:
         b2:c0:59:b4:fd:21:41:f1:cd:7d:17:3b:c6:67:2a:4e:74:78:
         bc:b2:ce:0e:07:bd:ea:fc:60:f9:69:cf:5e:9d:9d:fa:6b:53:
         8f:87:3c:a9:dc:22:68:ad:85:86:49:4b:40:fe:04:67:95:b4:
         a8:87:48:2a:26:02:3a:92:e5:21:ca:ff:b9:3f:28:c0:e1:57:
         07:fc:9c:02:72:a4:71:bd:da:df:39:9d:e8:16:8d:37:a5:ec:
         bf:f4:6b:c2:fc:9f:1a:ea:00:6d:66:9d:75:bd:53:2f:dc:0e:
         36:16:f3:04:8c:dc:c6:88:a7:58:7e:aa:4d:ad:7f:d9:f6:9b:
         7d:68:48:ca:9c:98:19:7b:a3:67:8d:8e:86:02:80:7e:48:8d:
         0b:c4:55:77:08:66:5f:e3:4d:bf:3d:ae:a3:cb:ec:02:26:49:
         2c:e0:3a:88:f0:92:04:f9:68:64:1a:f2:ed:84:27:bf:28:c4:
         f6:9d:3f:83:d4:7f:ea:d5:ac:f7:fc:0f:bd:b2:ab:69:1b:56:
         98:38:21:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----