Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/662e36392db912b36216a9631775ef4fd0daf9e2.cer
File:                     662e36392db912b36216a9631775ef4fd0daf9e2.cer (raw, json)
Hash identifier:          sDyg5UDqsUhvsvnc+6aafTJH5XxAfkYpaPbBekL2wLU=
Subject key identifier:   A9:63:01:75:44:E3:42:54:F1:18:8C:12:A1:49:31:04:C8:48:91:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE4BC2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0e7cf73f-4c5b-41b0-a4a4-bffcc927287e/662e36392db912b36216a9631775ef4fd0daf9e2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0e7cf73f-4c5b-41b0-a4a4-bffcc927287e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 11:40:23 +0000
Certificate not after:    Sun 15 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 14845
                          IP: 200.49.224.0/20
                          IP: 2801:100::/40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15616962 (0xee4bc2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 11:40:23 2023 GMT
            Not After : Dec 15 04:00:00 2024 GMT
        Subject: CN=662e36392db912b36216a9631775ef4fd0daf9e2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:13:13:52:4e:45:79:f7:b9:7d:51:c0:d0:96:
                    9e:45:22:94:89:65:90:63:2b:ba:de:bf:0d:1e:1f:
                    07:25:9e:1c:46:5b:90:c6:6a:95:6e:a9:a4:14:e9:
                    3d:c5:59:c4:9d:92:9c:7d:3f:cb:ac:13:70:6e:bc:
                    eb:61:55:8d:ec:59:b4:0b:90:6a:19:0f:ae:60:54:
                    e6:45:da:11:f1:3e:64:95:36:62:d7:47:5f:14:b7:
                    2d:25:0a:59:b1:bb:b8:12:e8:a2:83:6a:9a:9e:5b:
                    30:b3:3c:51:bf:cf:1e:92:74:ab:71:26:f0:ad:48:
                    72:a4:8f:0d:22:b8:42:c3:33:b0:8e:b9:38:3c:96:
                    df:84:86:85:2f:b9:0a:1f:3a:54:df:b5:34:d2:51:
                    bb:5a:30:82:35:a5:58:82:f8:39:a3:42:51:84:10:
                    94:b4:5d:9e:97:94:32:45:37:01:13:24:47:f4:9c:
                    db:fd:f4:3e:44:5d:c8:79:d2:2f:f1:97:5c:a4:90:
                    24:09:b4:7d:7c:81:ae:7f:fa:84:0e:a6:41:a9:76:
                    35:8f:55:32:4f:b4:fd:1d:76:02:20:81:f7:4d:95:
                    93:3f:6d:12:26:30:1b:02:79:14:53:7f:fc:e3:b2:
                    44:7c:15:ac:4d:46:3e:f0:42:88:b5:2d:88:25:15:
                    e8:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:63:01:75:44:E3:42:54:F1:18:8C:12:A1:49:31:04:C8:48:91:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0e7cf73f-4c5b-41b0-a4a4-bffcc927287e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0e7cf73f-4c5b-41b0-a4a4-bffcc927287e/662e36392db912b36216a9631775ef4fd0daf9e2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.49.224.0/20
                IPv6:
                  2801:100::/40

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  14845

    Signature Algorithm: sha256WithRSAEncryption
         05:17:5c:de:7e:9d:d8:2c:4f:ae:0e:e0:e8:16:0e:29:d0:04:
         60:6e:8d:68:17:37:8b:57:3d:3d:65:14:8f:df:78:d7:4c:9e:
         5f:e1:7b:24:57:fc:0c:aa:6c:f7:52:0b:e2:b8:c9:2d:7d:9d:
         02:ff:19:83:ad:6c:15:67:2a:33:38:6b:6c:73:a0:b4:a0:95:
         17:b5:ae:ed:13:ec:fe:c7:7b:ab:dd:3e:63:26:a1:13:b1:94:
         c7:86:2e:25:0e:37:f0:55:45:8d:5e:d2:ac:a9:e8:6a:d7:40:
         58:55:ab:7b:65:76:6b:a1:ed:5b:68:23:82:bd:e8:39:43:d0:
         6f:f6:66:72:27:ec:77:58:42:b6:2d:31:eb:93:e0:4f:9b:0d:
         23:c8:2f:bf:97:f2:c6:27:6e:42:62:5c:44:b2:a0:5b:25:91:
         e2:c2:35:b2:a5:c8:9f:2d:b7:43:1e:da:1f:92:bc:e7:47:bd:
         fc:58:c9:f9:a0:53:7d:ee:4f:c2:72:6d:a7:8b:79:49:a2:bd:
         ee:d2:f2:cc:0f:99:08:4e:fc:d7:af:21:e8:35:ca:1d:8c:ac:
         ad:e2:9f:60:bc:35:a6:bb:75:f9:d9:ff:5c:65:c1:9e:95:35:
         21:fc:45:bd:66:38:2b:15:58:ce:b8:13:dd:0b:fa:41:f2:a3:
         a3:ed:62:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----