Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/67476849bf62cbf1ec33187b02467ff5ce0b6dcf.cer
File:                     67476849bf62cbf1ec33187b02467ff5ce0b6dcf.cer (raw, json)
Hash identifier:          9Lct+isYXAVQC2P8tmxJLgqv64WEAue3cnzailonn8s=
Subject key identifier:   4A:E9:72:85:61:00:70:24:53:4A:8D:2D:3B:D6:79:2D:3A:02:6B:BE
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DED374
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/99789358-d024-410e-bce8-8adde433bdd4/67476849bf62cbf1ec33187b02467ff5ce0b6dcf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/99789358-d024-410e-bce8-8adde433bdd4/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 13 Feb 2023 21:03:02 +0000
Certificate not after:    Sun 10 Mar 2024 18:23:29 +0000
Subordinate resources:    AS: 52383
                          IP: 186.65.96.0/21
                          IP: 2803:9c00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14603124 (0xded374)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 13 21:03:02 2023 GMT
            Not After : Mar 10 18:23:29 2024 GMT
        Subject: CN=67476849bf62cbf1ec33187b02467ff5ce0b6dcf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:a7:6a:c1:41:70:85:d9:fe:4e:32:f7:85:d4:
                    be:9b:3a:43:50:f3:fa:1f:c0:82:ef:07:8e:00:65:
                    af:85:fd:a6:5b:d6:86:19:3e:34:6e:57:52:21:e3:
                    11:35:7c:7e:ec:cf:41:3d:13:25:63:d2:23:da:b7:
                    9b:a4:77:86:a6:b5:e3:97:0a:83:65:4c:e6:48:df:
                    74:df:78:3c:f4:38:a1:3e:b8:62:e2:27:d7:38:16:
                    17:83:f4:92:93:ca:34:ba:49:8d:fa:1f:b0:60:a6:
                    13:70:46:30:ad:84:05:1b:6a:86:a8:6b:b7:11:f5:
                    7e:f6:35:8e:ae:69:75:b7:14:e9:82:b8:c6:8a:ce:
                    34:44:97:60:94:29:5c:da:12:9c:42:87:15:76:9e:
                    07:52:7a:06:8f:f2:a5:e5:6b:e3:a7:dd:c4:e1:87:
                    c5:35:26:65:90:2d:e8:78:6e:64:72:b4:de:a0:32:
                    f9:4e:b9:db:62:b1:de:29:28:88:cc:8e:4b:70:89:
                    fe:21:7f:e3:a9:90:ea:1b:94:52:57:0c:3f:b3:93:
                    bf:9d:95:43:ae:b2:cd:ab:25:ee:8d:8f:99:d5:33:
                    72:8a:fc:b5:d5:59:a1:ea:97:a8:f6:9d:af:19:8c:
                    3b:e3:a8:f5:39:e5:9c:97:cc:86:2d:35:63:d0:fb:
                    63:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:E9:72:85:61:00:70:24:53:4A:8D:2D:3B:D6:79:2D:3A:02:6B:BE
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/99789358-d024-410e-bce8-8adde433bdd4/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/99789358-d024-410e-bce8-8adde433bdd4/67476849bf62cbf1ec33187b02467ff5ce0b6dcf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  186.65.96.0/21
                IPv6:
                  2803:9c00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52383

    Signature Algorithm: sha256WithRSAEncryption
         99:79:6c:b1:98:0a:30:4c:3b:df:96:49:8a:75:19:6c:e1:5c:
         c6:0c:2b:01:ee:89:71:74:85:f6:98:2b:d5:08:ea:b4:27:26:
         99:64:d8:07:bc:5e:ba:47:ad:d7:7c:8e:a4:7a:ee:11:83:0d:
         62:c1:b3:53:e5:dc:51:12:b4:f0:f4:8a:b2:3c:b9:1f:80:f7:
         28:a0:d3:ac:d4:9d:09:62:8e:f2:e5:5a:f2:3f:57:b7:f5:a9:
         db:9e:95:03:af:01:ee:bf:01:e0:08:ec:dd:a6:09:4e:cb:1d:
         c9:8e:3e:c9:3d:f1:b3:4c:82:a7:d6:e9:02:67:f0:1e:08:3e:
         de:b3:22:c9:b8:d7:4a:ad:8a:a8:61:a5:15:eb:ab:f1:d2:39:
         d1:03:5b:37:45:89:83:66:b7:52:e8:be:bd:3d:83:88:be:94:
         1b:92:fa:47:3f:f3:88:dd:bb:56:93:86:1c:e9:07:43:73:06:
         3e:0d:87:d6:65:c2:f5:10:f8:10:0b:33:67:7a:eb:be:8b:32:
         2e:0a:f2:dd:96:4c:d0:b9:fa:01:a7:7c:eb:ed:5f:18:06:cd:
         f4:dd:84:8b:e6:a3:7f:54:b8:81:8e:dc:9f:55:45:bb:81:b6:
         c5:2a:df:29:26:fe:f1:1d:4f:a2:d4:d6:c0:0c:e1:25:26:d8:
         cb:de:93:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----