Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9f59ed8d55858712b20562e3e7deda92b28bf74e.cer
File:                     9f59ed8d55858712b20562e3e7deda92b28bf74e.cer (raw, json)
Hash identifier:          Gtr3eSFEmQzDI2mRARf6D8L6m/IX05crB57iCDQRSpE=
Subject key identifier:   72:C3:A3:B8:47:05:03:4D:7A:C2:62:F2:9C:10:BD:5D:D6:A5:1A:13
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F5460D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/fa76c21f-3767-426c-bfeb-3ce5d2346a12/9f59ed8d55858712b20562e3e7deda92b28bf74e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/fa76c21f-3767-426c-bfeb-3ce5d2346a12/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 15 Aug 2023 13:44:40 +0000
Certificate not after:    Sun 01 Sep 2024 18:45:50 +0000
Subordinate resources:    AS: 264803
                          IP: 170.238.226.0/23
                          IP: 2801:19:5000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16074253 (0xf5460d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 15 13:44:40 2023 GMT
            Not After : Sep  1 18:45:50 2024 GMT
        Subject: CN=9f59ed8d55858712b20562e3e7deda92b28bf74e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:dc:0b:25:7c:c6:7f:b3:71:b9:b3:3f:e9:35:
                    30:93:55:b7:01:3e:52:73:a0:09:88:2a:9b:c9:37:
                    05:dc:58:4c:32:2e:6a:c3:6b:df:84:62:e7:8f:1c:
                    f9:44:53:60:ef:d2:9c:35:9d:11:2f:38:97:01:b2:
                    e4:1f:88:cc:71:39:7f:c6:ac:2c:68:6f:b8:28:4c:
                    1d:92:e9:b0:c2:c8:8d:91:7e:73:8f:8f:0e:7a:c6:
                    3d:3d:bf:b0:27:b1:ec:91:20:46:de:e8:b6:53:dd:
                    42:77:2a:a2:28:a1:12:74:e8:eb:f0:9f:eb:c2:d1:
                    61:df:b7:f9:2f:8e:db:36:ad:c9:5e:bf:76:91:ac:
                    64:c3:8d:4b:fe:a9:74:20:67:31:68:2c:30:59:bb:
                    d3:4c:f0:41:db:d2:a3:f4:76:04:7b:89:e1:53:36:
                    94:c5:05:63:4e:5d:bb:83:6b:b4:a9:0e:cd:19:a2:
                    ef:c5:7e:99:80:df:50:b1:fa:48:31:1d:64:af:f5:
                    17:d6:9c:b3:f7:7f:85:69:2d:6a:50:ac:53:1e:61:
                    9d:65:35:21:1e:c9:7a:99:03:48:ea:f8:76:b7:b3:
                    d9:9a:35:9a:0e:20:58:ac:da:75:d8:72:ed:46:05:
                    54:02:44:05:e5:45:50:b4:bc:64:90:29:dc:ec:17:
                    62:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:C3:A3:B8:47:05:03:4D:7A:C2:62:F2:9C:10:BD:5D:D6:A5:1A:13
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/fa76c21f-3767-426c-bfeb-3ce5d2346a12/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/fa76c21f-3767-426c-bfeb-3ce5d2346a12/9f59ed8d55858712b20562e3e7deda92b28bf74e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.226.0/23
                IPv6:
                  2801:19:5000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264803

    Signature Algorithm: sha256WithRSAEncryption
         b4:99:3c:e9:42:da:25:a7:8d:11:41:d7:47:2d:1d:10:f9:9c:
         fa:b8:b0:24:af:aa:97:80:f9:92:a6:a7:74:b1:a2:a1:23:20:
         34:03:09:b6:ac:51:b7:86:38:80:4d:1f:12:91:22:18:73:1c:
         30:f3:6a:92:2e:7b:7f:15:28:c6:f7:22:44:e7:cc:65:3e:ef:
         57:8f:ce:d0:58:97:c6:33:00:13:11:a0:f5:68:f1:c9:75:5f:
         66:df:5e:63:b5:25:92:52:d5:73:06:06:07:ce:5c:6e:6b:5e:
         bb:f1:5a:0e:64:96:e8:84:08:99:3c:49:6e:54:81:e6:56:d5:
         03:4d:71:09:cc:e6:2e:c9:e1:19:35:00:20:2f:a8:c8:22:b3:
         f7:b9:a7:80:5f:f1:b9:1b:88:9b:55:f8:f1:94:5f:b4:dc:e2:
         ed:0f:ab:bb:9e:d3:a4:d9:df:d6:a3:41:43:b6:f4:32:7b:c0:
         c1:af:9b:9a:4f:ab:f8:8b:bf:83:a2:d2:fa:03:be:fc:78:19:
         fb:ac:cd:dd:b3:59:2a:ed:69:6c:61:c7:2e:76:72:3d:09:54:
         52:1d:80:7a:81:8a:69:d8:62:ee:d1:2c:db:98:5b:f3:d5:1b:
         19:2b:2c:e7:23:57:09:8a:59:a1:8a:19:40:a1:8b:4e:c9:b4:
         04:96:80:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----