Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8990ad9f538e7caecced885cc5a040183697f4c6.cer
File:                     8990ad9f538e7caecced885cc5a040183697f4c6.cer (raw, json)
Hash identifier:          jVBEoRsS8xSwvrc68TfJVC8lEvZDrL2U0acY4viHvE8=
Subject key identifier:   8E:D2:C8:A3:06:20:9F:85:8D:00:2A:76:B1:2F:10:7C:9C:3B:EE:0B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE7790
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9851b0e4-8a5d-4202-b23a-f0ced3c8c7ea/8990ad9f538e7caecced885cc5a040183697f4c6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9851b0e4-8a5d-4202-b23a-f0ced3c8c7ea/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 16:18:24 +0000
Certificate not after:    Thu 12 Jun 2025 13:42:19 +0000
Subordinate resources:    AS: 262551
                          IP: 177.72.192.0/22
                          IP: 2804:5f8::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16676752 (0xfe7790)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 16:18:24 2023 GMT
            Not After : Jun 12 13:42:19 2025 GMT
        Subject: CN=8990ad9f538e7caecced885cc5a040183697f4c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:93:46:23:4a:48:59:a2:45:e1:4f:15:e0:4e:
                    d0:d6:dc:40:28:02:81:2e:e8:1d:02:48:2d:e5:ca:
                    22:1f:da:f6:2d:b8:99:c0:1b:81:40:2b:28:04:68:
                    02:da:42:c5:37:f7:fc:0c:38:e6:3e:d1:69:ab:ea:
                    08:9e:9f:b6:9d:2d:5d:c0:ba:e0:8a:16:d9:bf:a4:
                    0c:ce:03:e2:cd:30:7f:50:1a:d6:b2:d2:36:43:ec:
                    e9:f4:84:b3:d2:e0:5e:0e:9e:a0:2c:f8:3f:c8:fb:
                    d6:8b:64:75:d2:eb:d1:09:66:25:81:03:51:5c:a4:
                    49:a6:64:da:ff:fc:17:65:7f:ee:31:c6:6d:07:ed:
                    f7:bb:54:4d:14:72:14:6b:95:be:fd:2e:ba:6a:80:
                    a3:fe:8a:35:65:19:24:e9:04:bb:d1:3c:10:86:57:
                    5e:6f:f5:79:11:37:f5:9c:62:eb:1d:2c:97:41:d6:
                    49:b2:2d:29:5e:e5:a8:73:53:af:e8:98:9b:ab:1d:
                    58:2c:b7:c0:5a:9c:f6:d0:d2:ca:9c:30:69:d9:e5:
                    00:86:3c:21:d1:40:f0:96:9e:8e:d7:d6:e4:10:e4:
                    6b:38:c9:f3:6f:58:b5:cc:f9:1a:53:21:36:b1:2e:
                    8c:d0:58:17:87:43:9e:6d:7e:aa:c5:96:15:80:8d:
                    0f:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:D2:C8:A3:06:20:9F:85:8D:00:2A:76:B1:2F:10:7C:9C:3B:EE:0B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9851b0e4-8a5d-4202-b23a-f0ced3c8c7ea/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9851b0e4-8a5d-4202-b23a-f0ced3c8c7ea/8990ad9f538e7caecced885cc5a040183697f4c6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  177.72.192.0/22
                IPv6:
                  2804:5f8::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262551

    Signature Algorithm: sha256WithRSAEncryption
         c2:b1:dc:13:2c:79:d2:31:c3:bf:d2:05:83:54:2f:d2:10:a7:
         93:5d:94:ad:3f:3e:dd:8b:d3:a2:ff:01:2b:99:3c:49:b5:16:
         91:b4:bc:13:82:31:7b:3e:65:9a:26:18:dc:29:2d:c2:89:01:
         f6:67:0f:c9:00:f4:9d:ee:cc:b0:28:4c:1e:27:40:f5:08:40:
         08:e0:6b:ce:91:b3:aa:2d:85:e0:53:78:42:f3:4e:89:f7:b8:
         9d:67:cb:ea:a7:af:7c:6a:de:57:76:04:37:b8:bb:76:a3:04:
         f2:12:e0:e8:ee:17:76:00:88:c9:29:b5:ab:4f:9b:c2:14:f9:
         69:54:b1:57:6b:23:5d:c5:ff:6f:54:74:c5:10:ea:bc:90:8b:
         d8:b2:7b:b1:af:a5:de:0c:bb:07:9d:75:56:dd:a0:83:f0:25:
         a0:e1:f8:89:54:c6:b1:98:92:a3:06:23:12:86:6a:db:aa:ae:
         12:6e:4c:df:1a:65:d2:75:b7:c6:d8:61:0d:46:1c:a9:d8:ac:
         2b:4b:71:7a:08:c4:89:80:62:34:3a:97:e2:68:86:ae:da:3f:
         61:ef:eb:b9:cf:73:8b:97:50:b8:70:81:6b:97:8c:35:d6:fd:
         6e:b6:2b:ec:0f:90:c9:13:df:10:05:58:2f:c7:6a:e5:fd:88:
         a7:c1:76:ee
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----