Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8df99760071ce203224e149129b2b2ee98d28c35.cer
File:                     8df99760071ce203224e149129b2b2ee98d28c35.cer (raw, json)
Hash identifier:          nV+/LpzzWQjYeYC6kCBSfpi8XqL8VQ13rXdnpDpeYAE=
Subject key identifier:   C4:AA:85:1F:42:BE:33:B5:46:43:58:5C:31:B4:E2:54:55:41:40:D0
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4B82E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e9cd377e-6986-4687-9c70-ee7ae45df7e2/8df99760071ce203224e149129b2b2ee98d28c35.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e9cd377e-6986-4687-9c70-ee7ae45df7e2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 21:02:48 +0000
Certificate not after:    Mon 26 Feb 2024 21:16:48 +0000
Subordinate resources:    IP: 181.224.222.0/24
                          IP: 2803:ff10::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14989358 (0xe4b82e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 21:02:48 2023 GMT
            Not After : Feb 26 21:16:48 2024 GMT
        Subject: CN=8df99760071ce203224e149129b2b2ee98d28c35
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:84:ae:38:4e:66:ce:4d:de:fe:e8:5e:1c:f0:
                    67:0d:e1:f0:2a:e7:75:45:6b:bf:d1:02:1b:38:7e:
                    d8:06:dc:50:8d:97:4d:8e:d9:6b:88:be:9c:6e:b1:
                    c4:e4:c0:59:2d:f2:f6:d2:3c:5b:88:97:20:db:32:
                    23:cf:ca:54:f4:7b:64:dd:c7:44:54:53:5d:0a:17:
                    f0:2f:b3:55:4c:e4:c5:20:aa:e5:3b:b7:ae:ea:0c:
                    0b:92:de:86:67:4b:87:b0:fa:e1:d9:1d:a3:00:de:
                    29:2d:d7:cc:d5:ed:f1:82:1c:46:60:7f:65:67:d9:
                    5e:b9:b6:42:d9:5c:1b:cb:de:93:c9:7a:dd:fd:d5:
                    02:dd:c3:49:24:b8:7c:a9:88:e0:60:50:5f:6d:18:
                    b4:81:83:7e:c1:c8:d1:ad:36:23:82:67:18:e8:53:
                    7f:83:67:f1:b3:c1:fd:c5:30:f8:83:d4:8f:b2:cf:
                    98:64:c2:7a:c3:ee:4c:6e:7d:a8:ca:b8:94:6e:71:
                    14:67:9a:45:11:30:a5:d3:a1:63:d8:df:cc:29:b0:
                    1f:af:33:7f:1b:1a:13:1b:52:fd:33:63:8c:af:32:
                    3e:15:3e:a8:13:0b:b3:bd:65:52:1c:ac:2d:66:c8:
                    7e:6a:69:e3:7d:61:5f:ca:5c:05:61:d6:46:3c:d2:
                    ec:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:AA:85:1F:42:BE:33:B5:46:43:58:5C:31:B4:E2:54:55:41:40:D0
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e9cd377e-6986-4687-9c70-ee7ae45df7e2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e9cd377e-6986-4687-9c70-ee7ae45df7e2/8df99760071ce203224e149129b2b2ee98d28c35.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.224.222.0/24
                IPv6:
                  2803:ff10::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:58:b4:c3:e4:75:8e:1d:8f:50:a8:ff:ab:33:f2:d5:40:15:
         d7:6d:9e:1c:7d:5c:a6:d9:f8:ed:4e:39:53:4d:e5:70:b5:68:
         37:e6:3c:ea:ba:8d:77:3b:38:80:15:67:a8:81:e2:f5:4c:ed:
         2e:72:4a:38:c6:6c:d0:18:22:fc:7c:17:e1:df:f9:78:87:4e:
         1a:dd:5d:fa:76:af:4b:6a:7b:52:d3:65:93:04:b2:32:47:e2:
         59:4d:eb:c0:b5:8f:44:c0:16:f1:a8:96:b3:a4:9e:48:ae:2a:
         8c:1d:97:0a:43:c5:d1:d1:8a:99:04:7b:35:6e:97:68:18:c5:
         3c:17:e0:94:c4:96:e9:1d:15:fd:a7:9b:20:2e:07:e4:c5:b8:
         c1:22:f2:dc:d2:40:67:36:23:16:9d:6f:aa:85:b6:0a:29:3b:
         f8:84:0a:cd:1b:29:bc:0a:00:34:7a:60:7b:a7:c7:03:1a:57:
         e8:a3:bf:e1:93:bd:0a:16:a9:6f:f6:12:ff:1b:40:4c:2d:19:
         e4:86:53:e9:49:38:87:12:86:ed:b3:39:e4:02:1d:2b:e3:e1:
         f2:33:00:b3:5d:4c:3e:32:57:dd:d4:f9:22:29:33:ac:f2:ee:
         9e:49:7f:cf:09:35:02:55:7a:ae:19:19:65:2f:bc:0d:19:e3:
         f3:6d:b8:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----