Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/8e6d921545b03efad8b1304da74e6a1b2ab99bbb.cer
File:                     8e6d921545b03efad8b1304da74e6a1b2ab99bbb.cer (raw, json)
Hash identifier:          Dy2zM1zcqaTXcvEdI3dHxurFmzgiE6yIs48c5FZz5ZQ=
Subject key identifier:   4E:7B:68:8F:D6:8D:86:EE:1D:A3:01:FA:32:88:14:93:6E:86:AA:88
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3CDE9
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d39598dc-3c7f-4478-b8e9-eb8a5c488905/8e6d921545b03efad8b1304da74e6a1b2ab99bbb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d39598dc-3c7f-4478-b8e9-eb8a5c488905/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 15:11:59 +0000
Certificate not after:    Mon 01 Apr 2024 16:58:01 +0000
Subordinate resources:    AS: 52512
                          IP: 45.7.228.0/22
                          IP: 2803:43c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14929385 (0xe3cde9)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 15:11:59 2023 GMT
            Not After : Apr  1 16:58:01 2024 GMT
        Subject: CN=8e6d921545b03efad8b1304da74e6a1b2ab99bbb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:a5:0b:dd:aa:26:0c:5d:3f:ce:99:c0:4e:93:
                    93:9f:a6:57:01:8d:0d:df:22:f1:f7:6f:b4:f9:22:
                    8e:03:c8:04:3d:06:01:9c:9f:c1:28:bc:58:b4:fa:
                    df:08:12:fd:a2:41:70:95:65:1d:ee:f0:d5:53:b9:
                    d8:0c:11:13:c9:f1:30:52:c5:56:5e:23:01:f8:6a:
                    f5:ad:4d:ad:7e:37:17:c4:29:5f:e6:c9:90:03:d1:
                    83:b4:2b:e3:9c:d9:87:2b:7b:fa:00:79:78:b5:bc:
                    3e:97:0c:28:69:d0:ef:0c:44:77:5d:6a:35:c7:f7:
                    92:6f:b3:99:12:d1:ce:0a:34:a5:bf:06:c5:21:e6:
                    42:a6:9d:7e:72:69:5b:6a:fe:f3:7b:31:10:2e:ef:
                    b5:c9:30:bc:2e:04:35:93:c3:7c:a4:60:67:6b:91:
                    78:4a:7b:3a:1f:51:57:05:56:e2:78:f5:f0:b6:38:
                    57:df:b8:58:ce:75:ab:53:f2:fa:2e:64:cb:c2:01:
                    76:3d:2c:a7:fe:50:4a:b6:de:e6:37:64:e3:e2:9d:
                    70:60:eb:2d:ea:d9:b2:bf:bb:e5:3a:06:13:99:59:
                    43:98:c9:e7:4a:d7:7e:44:26:46:b2:7a:de:30:fe:
                    c9:56:27:8a:f4:76:a2:6f:5b:56:7f:29:db:61:74:
                    db:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4E:7B:68:8F:D6:8D:86:EE:1D:A3:01:FA:32:88:14:93:6E:86:AA:88
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d39598dc-3c7f-4478-b8e9-eb8a5c488905/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d39598dc-3c7f-4478-b8e9-eb8a5c488905/8e6d921545b03efad8b1304da74e6a1b2ab99bbb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.7.228.0/22
                IPv6:
                  2803:43c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52512

    Signature Algorithm: sha256WithRSAEncryption
         84:ed:3b:42:d8:98:72:23:63:40:f1:5a:54:65:93:40:c2:66:
         59:d3:fd:19:db:97:a6:b5:03:48:2c:4d:fd:34:35:b1:7d:9a:
         0c:2d:f4:3d:19:02:2e:d8:a2:6d:e3:b8:a0:f2:92:32:64:2b:
         b2:7c:fd:d8:18:a5:63:1c:5f:e9:aa:86:f5:b8:5b:55:e7:c7:
         6a:49:a6:d2:a7:a6:b1:23:62:c6:a8:27:d6:f7:be:ba:f6:6c:
         8f:c2:57:08:ef:e0:ea:78:d8:1b:0e:6f:e8:d7:1f:71:e0:79:
         af:55:6a:c1:c0:8d:91:06:60:83:85:52:26:e8:99:8c:36:ad:
         16:62:e5:ce:ae:55:05:73:99:a9:91:e4:40:1a:6b:2c:71:c4:
         2c:12:5f:6d:8c:26:0c:bb:a2:46:0a:15:dc:f6:38:9c:ea:60:
         70:bc:22:03:7e:88:6a:34:35:ee:9c:99:75:f8:d6:23:6b:e0:
         e4:f2:a7:12:3c:ca:e6:9d:05:08:a1:1b:44:92:52:2e:91:99:
         c6:e2:d4:ac:56:13:08:ec:e2:6a:93:fa:03:86:55:1c:1c:93:
         2d:b5:ea:81:85:a6:46:84:c9:95:7a:82:c8:90:e7:da:1b:f4:
         af:a7:6b:0b:a5:63:4b:fb:a3:39:c0:a4:5f:12:f8:f1:f7:24:
         54:a3:bd:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----