Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a76899983723d38e7331028287eee66963c2ed5d.cer
File:                     a76899983723d38e7331028287eee66963c2ed5d.cer (raw, json)
Hash identifier:          /uNNg1CErQoM8lFV/V9nzyT2Zfika2b0x7ESFYyP0Ww=
Subject key identifier:   F1:2A:B3:C2:B2:ED:C1:C7:D2:F5:A3:24:01:C6:8B:1F:23:DC:AA:35
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E3C8FF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7bba54b9-9c19-4136-ad95-6ffd4fc7d516/a76899983723d38e7331028287eee66963c2ed5d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7bba54b9-9c19-4136-ad95-6ffd4fc7d516/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 05 Apr 2023 13:39:24 +0000
Certificate not after:    Thu 08 Feb 2024 15:40:13 +0000
Subordinate resources:    AS: 263220
                          IP: 179.0.202.0/24
                          IP: 2801:1f:c000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14928127 (0xe3c8ff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr  5 13:39:24 2023 GMT
            Not After : Feb  8 15:40:13 2024 GMT
        Subject: CN=a76899983723d38e7331028287eee66963c2ed5d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:68:9d:9e:9b:88:ee:4c:bb:f5:dd:73:e0:82:
                    42:0e:d4:ef:87:d1:e0:d2:64:fc:00:e8:ba:f9:01:
                    42:6a:2f:e6:1c:01:df:9a:84:9b:fc:fb:9b:1d:8c:
                    a1:99:be:ac:76:f8:27:82:0a:47:59:54:75:ca:cd:
                    67:4d:32:cb:95:39:df:b3:78:bf:d2:ee:47:8a:dc:
                    81:a8:31:4b:ad:cd:f2:b5:80:e0:1e:aa:b4:c9:15:
                    7e:dd:c8:41:a0:8d:ab:de:a9:c8:4a:01:b1:b0:e5:
                    47:7e:5c:60:c7:8b:92:0a:96:68:01:83:b8:95:10:
                    ee:34:f7:a0:1a:ee:fa:4c:87:bf:49:b6:5d:a4:ed:
                    54:10:fa:0b:99:08:5c:f7:de:d0:b3:3b:fd:73:83:
                    27:ab:3c:85:e0:f2:8d:1d:06:41:a4:bc:45:fa:77:
                    a8:be:20:71:eb:df:ea:6b:13:e2:10:2f:94:32:f8:
                    fd:29:99:34:cf:cc:e0:62:2c:30:01:4d:1d:db:d3:
                    33:9e:38:6f:7b:fa:bc:5f:a9:92:66:99:b2:fc:62:
                    c2:18:de:7f:7b:44:df:5f:e5:57:0f:fb:34:14:74:
                    bf:e6:4e:69:07:82:bc:80:ec:fb:be:ff:c1:81:1b:
                    27:ff:09:21:45:02:0d:07:0d:5d:e3:67:13:34:e9:
                    c0:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:2A:B3:C2:B2:ED:C1:C7:D2:F5:A3:24:01:C6:8B:1F:23:DC:AA:35
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7bba54b9-9c19-4136-ad95-6ffd4fc7d516/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7bba54b9-9c19-4136-ad95-6ffd4fc7d516/a76899983723d38e7331028287eee66963c2ed5d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.0.202.0/24
                IPv6:
                  2801:1f:c000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263220

    Signature Algorithm: sha256WithRSAEncryption
         87:d2:c6:5d:05:2d:4b:7c:05:c1:34:b6:70:8a:be:54:db:fb:
         be:87:9a:26:46:8f:52:14:8b:92:44:bd:ae:04:b5:8f:01:d9:
         4f:ff:1a:9b:0c:cc:8a:91:8a:cb:bf:2d:26:b7:a6:38:73:a9:
         f8:89:e0:bc:e4:f1:16:ef:52:3c:46:95:26:e7:f9:12:1d:62:
         d3:fc:04:26:e2:ec:2f:da:aa:4c:cf:3d:0b:b7:5f:45:77:88:
         38:8f:71:f4:94:66:dd:35:7e:be:e0:24:7d:41:2b:8d:97:b0:
         b5:c2:11:74:88:66:7f:70:c1:78:26:f1:49:a5:88:63:58:46:
         eb:c2:70:43:d9:c6:4c:20:a1:f9:ba:1e:4a:35:1e:8c:79:b7:
         fb:89:95:ed:3c:9a:86:44:a8:ee:cf:32:ff:54:dc:07:26:fe:
         fb:53:0d:c1:94:1a:b3:00:69:17:df:4f:85:1c:49:0a:05:d7:
         8b:75:ce:14:6f:3b:fd:4a:43:97:fc:c5:ad:31:7b:5f:ce:0f:
         76:73:06:fb:be:f1:7a:29:0d:dd:c7:95:a5:d2:ae:da:8b:d9:
         57:aa:8c:f8:f2:67:30:8c:3b:ea:e5:bc:d2:c0:08:7c:a3:dc:
         9f:7a:e9:c9:31:b5:a0:d4:50:56:d5:17:de:fb:c3:e0:e3:26:
         26:73:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----