Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7ae44ff2c4dee84dd852b661cd60c3080d1539db.cer
File:                     7ae44ff2c4dee84dd852b661cd60c3080d1539db.cer (raw, json)
Hash identifier:          NGyQLcY1soVBxfgCfaz5WjsOVq8EKC9KNya4ii2S3Pc=
Subject key identifier:   41:C3:84:25:B0:1D:DD:0B:AD:8C:6B:8E:99:9B:53:1E:27:42:68:8D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8A719
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/89af612e-f6b5-467e-afa9-ad2bccd1f88c/7ae44ff2c4dee84dd852b661cd60c3080d1539db.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/89af612e-f6b5-467e-afa9-ad2bccd1f88c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 17:03:38 +0000
Certificate not after:    Tue 19 Nov 2024 15:22:52 +0000
Subordinate resources:    AS: 266704
                          IP: 45.229.36.0/22
                          IP: 2803:ed20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15247129 (0xe8a719)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 17:03:38 2023 GMT
            Not After : Nov 19 15:22:52 2024 GMT
        Subject: CN=7ae44ff2c4dee84dd852b661cd60c3080d1539db
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4e:45:c5:77:e5:a1:7c:3c:59:17:90:af:e2:
                    06:46:2b:8c:48:21:29:69:4b:40:f6:62:c0:23:40:
                    19:51:fb:c7:02:bd:21:69:17:03:c6:24:5f:69:ab:
                    73:94:07:10:94:66:45:75:f2:9d:67:56:bd:bc:7f:
                    41:c0:41:eb:07:a8:2b:f2:31:73:ff:ee:e6:f2:ea:
                    52:f1:89:b8:50:1c:0c:01:f8:81:e9:19:eb:1f:15:
                    ca:24:12:63:a2:e7:b5:cf:fb:dd:0b:0a:93:5a:0f:
                    c5:1f:5f:90:ce:76:ea:15:bd:ee:61:7b:41:09:bb:
                    60:7c:f9:c5:7e:52:4c:52:ec:91:ea:5f:bd:2f:84:
                    67:1e:0d:5d:77:3f:88:11:e5:9e:c1:3d:d4:1b:f8:
                    31:f8:cb:f3:46:b2:08:d4:78:26:16:b8:0b:6c:bb:
                    bd:ff:e7:5c:b0:c2:e6:74:1a:73:07:c7:fb:e0:93:
                    f8:14:a1:28:a3:0e:d4:6f:f7:e2:6b:a2:98:94:1c:
                    c7:78:fa:d4:cb:64:86:c3:28:1a:a2:99:77:69:c7:
                    69:2a:79:6a:ab:da:9f:7d:f6:c3:9b:f3:85:f5:49:
                    a7:b4:71:ad:b2:2a:86:3c:29:16:db:95:d9:91:68:
                    89:b3:a3:d3:a2:aa:b1:b4:45:bc:06:91:2b:be:13:
                    6b:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:C3:84:25:B0:1D:DD:0B:AD:8C:6B:8E:99:9B:53:1E:27:42:68:8D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/89af612e-f6b5-467e-afa9-ad2bccd1f88c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/89af612e-f6b5-467e-afa9-ad2bccd1f88c/7ae44ff2c4dee84dd852b661cd60c3080d1539db.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.229.36.0/22
                IPv6:
                  2803:ed20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266704

    Signature Algorithm: sha256WithRSAEncryption
         92:70:69:b5:9f:d5:17:7c:16:d1:d7:8b:1c:5a:b3:95:75:c4:
         a7:6a:33:a5:68:74:6b:3b:d7:92:70:e9:fb:60:cc:3b:91:15:
         cf:59:8f:27:78:6b:eb:97:c0:52:49:65:34:27:3d:57:d2:53:
         66:8c:05:bf:32:8b:55:98:d4:79:a8:01:71:a0:42:e2:39:17:
         f5:3c:24:fa:b4:60:dc:34:59:12:e9:1a:f4:bf:87:d9:55:97:
         e7:f3:65:33:c5:2e:a2:32:ff:f5:33:43:ee:ed:5a:1e:49:f6:
         b3:d4:63:f7:ac:10:29:59:75:78:a5:1e:03:01:b9:ef:89:fd:
         b7:08:f6:4f:1c:19:b8:50:64:2e:64:81:59:c9:b8:57:1a:06:
         67:44:de:b2:18:c9:64:dc:3f:ef:d7:8b:cb:61:cc:e6:5d:bd:
         9a:73:58:5a:2e:5d:3f:4c:5c:93:81:fb:d6:6b:cd:83:f8:84:
         1f:19:ec:9c:ea:01:b0:b4:ee:a9:62:15:83:eb:1c:aa:a2:64:
         9c:01:75:a3:60:d9:f7:82:47:a9:01:65:c1:e7:45:6b:a2:fe:
         e4:44:72:a6:86:76:07:b7:a1:d4:21:d0:70:56:17:1f:95:cc:
         d4:30:7c:68:22:0d:a6:22:d3:e9:79:21:c9:70:d1:4e:83:f6:
         9a:64:c4:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----