Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/885ec1383761477d3b9bf40e2f34d45bf0564fce.cer
File:                     885ec1383761477d3b9bf40e2f34d45bf0564fce.cer (raw, json)
Hash identifier:          FW/M9c+MV3eKT7/0viHRPVEcxdLGkBEh5oJwhDu/jFE=
Subject key identifier:   55:B3:DA:B6:8A:58:15:C0:66:56:35:3E:E6:2F:E8:11:E0:FD:17:01
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E6A2A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/885ec1383761477d3b9bf40e2f34d45bf0564fce.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 20 Apr 2023 22:23:11 +0000
Certificate not after:    Wed 05 Feb 2025 19:08:36 +0000
Subordinate resources:    AS: 266764
                          IP: 45.234.180.0/22
                          IP: 2803:f720::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15114914 (0xe6a2a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 20 22:23:11 2023 GMT
            Not After : Feb  5 19:08:36 2025 GMT
        Subject: CN=885ec1383761477d3b9bf40e2f34d45bf0564fce
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:7f:16:07:7c:de:38:64:ce:31:b8:41:37:a3:
                    c6:de:51:29:c1:39:b1:9f:21:57:5a:85:e5:47:9b:
                    4b:e3:50:18:1f:03:26:3e:bd:ed:00:e7:13:13:ca:
                    e5:cf:df:fe:96:53:55:b1:7d:1c:4d:6f:3f:a0:c0:
                    70:9d:61:78:5d:9d:3f:af:92:c4:79:50:99:30:16:
                    64:ce:c9:e9:1f:ff:fc:78:b9:55:fa:6b:a7:6d:ea:
                    62:2a:f9:03:e3:22:20:37:96:99:43:95:40:e0:3b:
                    3c:44:c3:d9:4f:e6:79:ab:64:fa:43:35:b5:6a:38:
                    35:7a:90:2c:b2:8a:a0:7a:1a:81:bd:a2:97:7e:0e:
                    d1:1f:fe:43:85:48:79:fc:cd:96:cb:43:f5:3f:a9:
                    d8:aa:03:71:65:7b:8b:7f:ec:2a:55:b0:91:53:a4:
                    62:7d:3c:38:65:87:09:3b:ec:e3:50:2f:91:a9:09:
                    a7:6a:5e:21:b5:b8:ff:dc:f3:aa:27:8e:73:e4:0d:
                    92:50:97:68:53:b4:79:3d:1b:4d:56:a8:c5:ab:09:
                    d1:3b:03:a4:92:f7:5a:e5:9b:bf:1a:b9:8a:34:3e:
                    af:ce:72:2c:b2:18:f6:ed:01:e0:cd:6c:c3:e7:33:
                    fd:71:ad:7e:97:e1:22:6a:c2:9e:d5:20:a3:bd:08:
                    15:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:B3:DA:B6:8A:58:15:C0:66:56:35:3E:E6:2F:E8:11:E0:FD:17:01
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9414bd3c-f731-4163-83e8-1e4ca45f8f42/885ec1383761477d3b9bf40e2f34d45bf0564fce.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.234.180.0/22
                IPv6:
                  2803:f720::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266764

    Signature Algorithm: sha256WithRSAEncryption
         83:e4:bf:00:fb:85:2f:69:c8:eb:13:d7:fe:63:08:6d:8d:94:
         35:44:1e:3b:73:af:a9:dc:a0:ef:82:c8:2a:91:05:1d:5b:c8:
         ab:a0:98:29:e1:df:44:68:74:ad:41:42:c2:f0:6a:91:a4:b9:
         28:c7:82:34:f3:6f:94:b8:3b:d3:50:28:9a:88:56:46:20:2f:
         c6:4a:44:de:c9:5e:2e:0a:d4:6d:d6:29:1a:a2:cc:c7:ff:91:
         ce:b7:25:93:db:41:d4:44:3a:97:fb:9f:07:04:f2:e2:bb:41:
         a7:0c:1b:07:56:b3:8d:0b:24:e3:47:6f:cd:70:b0:c3:23:c1:
         5f:d3:72:47:de:90:af:3e:00:4f:13:f8:6a:39:bc:9b:f7:64:
         62:7f:2d:e6:e0:68:1d:f1:b1:bc:29:d7:0e:2c:e7:f5:7d:3a:
         03:84:c5:03:0a:29:aa:e5:d4:60:24:df:6f:02:cc:96:df:d1:
         33:52:3a:cd:4a:66:4f:8e:a9:d2:ae:04:fd:0e:bf:a6:2c:62:
         cb:ad:9d:86:c8:3b:7d:e0:cd:21:5e:2d:8f:f9:16:51:93:55:
         65:d4:a5:fe:24:8a:eb:9a:7c:8e:cb:67:86:11:d1:2e:37:de:
         5d:2a:8d:4b:e2:7b:f1:50:72:99:b3:f1:0b:61:24:3d:2b:e7:
         ae:4f:f1:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----