Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/7e685e118be1622bd95e8bbe14743454ce26fceb.cer
File:                     7e685e118be1622bd95e8bbe14743454ce26fceb.cer (raw, json)
Hash identifier:          NU5Bidk1gIymQyV+wje7JE7a6E53WWMvjyrBocvRMRs=
Subject key identifier:   41:4F:7A:CB:80:F9:A0:D6:53:DA:D6:3C:01:4A:6C:A5:4D:00:C9:53
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FED19C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1df5443e-4b69-41e9-88c5-e886f0748e5f/7e685e118be1622bd95e8bbe14743454ce26fceb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1df5443e-4b69-41e9-88c5-e886f0748e5f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:36:56 +0000
Certificate not after:    Fri 28 Feb 2025 11:46:05 +0000
Subordinate resources:    AS: 266233
                          IP: 45.6.228.0/22
                          IP: 2804:3cc4::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16699804 (0xfed19c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:36:56 2023 GMT
            Not After : Feb 28 11:46:05 2025 GMT
        Subject: CN=7e685e118be1622bd95e8bbe14743454ce26fceb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:59:00:22:83:17:6e:c8:26:bf:ff:f2:e3:0b:
                    78:71:8c:4b:93:3d:5f:da:f1:47:db:75:07:48:cd:
                    19:77:d3:ba:7b:e1:4e:b9:a1:54:a8:3e:c8:65:8c:
                    90:45:82:c1:84:a0:35:a4:c4:cb:b3:50:70:69:3c:
                    db:1e:cd:ac:d6:d8:97:0c:52:1e:da:a8:e4:59:54:
                    b6:d7:0c:a8:b3:98:a6:08:f1:9f:0f:c4:99:58:7b:
                    96:ec:dd:3e:3a:d9:cd:9d:d0:10:99:0f:c9:0f:4b:
                    f3:1d:f6:bf:78:65:2d:d1:bb:4a:7f:f0:a8:b2:70:
                    fa:be:bc:a6:df:6e:bf:b2:a4:74:35:c9:34:79:2e:
                    ff:fb:32:b3:d6:25:f8:ee:60:5e:c8:07:c6:f7:c5:
                    9f:c1:e7:c5:40:da:32:c7:63:69:69:67:08:49:3b:
                    e8:0b:03:fb:4f:61:74:6b:cc:b6:b7:96:fc:9f:7c:
                    db:bf:c4:ab:ab:1e:7b:56:63:c3:3e:1b:41:4a:84:
                    c2:93:a2:f1:de:49:a1:7c:15:3f:89:ca:75:c0:62:
                    4f:2c:56:0e:dc:2e:b5:84:c5:9a:1f:c8:24:72:d0:
                    2a:6e:60:96:02:1f:d1:19:25:7d:9d:f3:01:0d:5c:
                    95:54:c2:ae:0e:e5:55:06:e8:9c:d2:78:25:0f:97:
                    23:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:4F:7A:CB:80:F9:A0:D6:53:DA:D6:3C:01:4A:6C:A5:4D:00:C9:53
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1df5443e-4b69-41e9-88c5-e886f0748e5f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1df5443e-4b69-41e9-88c5-e886f0748e5f/7e685e118be1622bd95e8bbe14743454ce26fceb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.6.228.0/22
                IPv6:
                  2804:3cc4::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266233

    Signature Algorithm: sha256WithRSAEncryption
         81:33:01:a7:73:39:49:dc:f6:d9:84:0d:93:12:23:b8:4f:0b:
         96:16:87:f5:0a:43:f7:2e:9d:35:4e:14:c0:22:81:b3:93:33:
         18:fd:20:64:4b:ca:1e:f7:30:43:aa:51:e9:00:69:75:c8:8b:
         06:3c:88:20:c2:c1:e1:3e:cd:95:55:4e:79:bd:82:89:ba:15:
         f9:41:71:de:2e:96:e5:0a:99:6f:7b:e6:24:2c:48:29:20:71:
         e2:b0:e1:27:e1:02:fc:66:83:00:ce:ef:9c:8a:76:5a:b6:69:
         5c:48:9d:ca:2c:77:57:9d:bb:23:ac:cc:2f:34:e8:fd:9f:11:
         59:80:f9:f8:15:b2:c4:27:43:14:91:9d:ec:59:fe:52:91:4c:
         27:56:5e:4a:50:85:7f:ee:94:83:fe:7b:5e:eb:18:ad:69:b0:
         61:8f:3c:3b:5c:28:45:a0:6c:d8:ff:bf:8b:96:71:24:28:a3:
         33:62:c9:24:42:28:f8:71:0b:2f:5a:c9:70:85:5b:4d:cc:25:
         34:62:b5:33:b2:38:19:cc:35:06:c3:3e:c1:a2:e3:31:9e:7c:
         6b:7a:43:ff:84:d3:78:0f:b6:3b:ea:cb:8d:af:21:a7:21:ed:
         e2:40:6b:0a:67:cf:36:15:1e:e5:67:ad:e9:53:f3:83:fa:73:
         ee:67:36:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----