Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/844cc8c5a2dc70311d998622d46309497c3d982c.cer
File:                     844cc8c5a2dc70311d998622d46309497c3d982c.cer (raw, json)
Hash identifier:          nRLqWEI43xQdhJULsyWjqciX9URgemT3TjLGJtNakF4=
Subject key identifier:   A5:15:CA:3C:8A:F0:DB:40:5D:D7:3C:92:03:97:F8:4F:9D:29:D4:3D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D81B31
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 24 Nov 2022 14:02:39 +0000
Certificate not after:    Fri 15 Mar 2024 23:29:08 +0000
Subordinate resources:    AS: 265720
                          IP: 160.20.80.0/22
                          IP: 2803:8dc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14162737 (0xd81b31)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov 24 14:02:39 2022 GMT
            Not After : Mar 15 23:29:08 2024 GMT
        Subject: CN=844cc8c5a2dc70311d998622d46309497c3d982c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:d9:79:cf:89:23:33:c3:a0:1c:8f:b1:46:1d:
                    12:06:64:81:21:b2:35:75:bd:da:90:ac:bc:89:12:
                    05:9f:49:9d:9b:f1:93:01:77:20:62:b9:65:9e:39:
                    45:08:6c:59:08:90:94:a7:35:36:d7:0b:d0:d2:82:
                    48:67:43:88:f5:43:a3:a7:8c:00:7b:16:07:e7:f4:
                    37:9f:07:ad:f5:c4:f7:3c:e8:30:df:99:e3:d2:41:
                    7d:f2:18:51:4a:9c:ec:c9:80:33:d2:6a:08:3a:cf:
                    4a:61:28:ff:12:91:53:a3:68:6e:1b:0c:8f:b6:45:
                    83:3a:50:46:ab:f2:7e:5d:2d:e1:95:1d:f7:bf:17:
                    96:0a:9a:fb:ba:5c:38:79:71:b6:16:7f:68:b6:bb:
                    54:21:7c:28:c4:e9:0d:f6:b7:b8:d7:7a:a7:5a:55:
                    b8:b4:df:5a:bd:40:6d:82:51:a9:a4:04:9d:33:ef:
                    8f:23:ee:68:ab:68:aa:34:28:69:18:1a:d6:69:c0:
                    18:d3:61:8a:6e:24:66:b0:2d:63:a4:be:8a:42:30:
                    05:59:07:e8:8a:60:0b:0d:90:bf:3c:9f:87:9c:69:
                    65:f8:5f:81:cb:86:f4:40:48:d4:33:a8:a4:01:36:
                    30:08:a0:6c:dd:71:1f:05:73:cb:0c:04:1e:84:78:
                    fd:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:15:CA:3C:8A:F0:DB:40:5D:D7:3C:92:03:97:F8:4F:9D:29:D4:3D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a4d9b84a-f472-4ebe-b0e2-ea9a128d1157/844cc8c5a2dc70311d998622d46309497c3d982c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  160.20.80.0/22
                IPv6:
                  2803:8dc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265720

    Signature Algorithm: sha256WithRSAEncryption
         70:88:9d:1e:e9:48:01:07:27:68:d1:f3:b5:80:07:d4:d2:99:
         2e:2d:44:19:fb:4e:84:1f:f8:62:78:e3:3a:e3:7d:dc:a4:a6:
         32:bc:54:d0:1f:26:51:ba:a2:e6:1a:66:35:e2:96:24:90:26:
         62:3c:67:3a:ba:49:1b:b9:a5:6e:63:07:78:50:e7:61:e0:2a:
         b1:3f:10:d2:a3:c9:f6:1f:e2:d7:98:33:81:a6:87:86:ca:f5:
         8c:52:9a:33:e2:4a:9f:dd:4e:d8:7c:7c:8c:91:3e:b5:fb:87:
         fe:af:34:ad:58:b0:75:6b:39:3b:a6:f1:64:50:37:8a:9a:0a:
         db:e4:ac:6c:95:b3:2d:6c:bd:ce:d9:88:d1:70:ec:43:a0:96:
         09:81:99:71:32:35:02:34:b5:dc:97:ed:0f:ad:29:4f:8d:b1:
         41:73:6e:6e:3f:98:79:8d:e3:3f:d0:ef:bc:91:45:b7:08:3f:
         e9:cc:ae:7c:f2:a7:8a:1e:6c:f8:d5:99:77:e1:a0:b6:09:9d:
         fc:a6:8b:67:bb:45:44:4c:b2:2e:a4:6e:42:1b:15:6d:42:d7:
         66:05:a2:6f:20:58:aa:41:39:3e:a6:48:39:74:45:bf:ae:79:
         f2:af:71:0a:5f:40:a7:f4:59:41:9f:ab:37:c3:d8:0a:a8:f9:
         f9:c2:91:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----