Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aafb715400c40e4a598c89a6775b6b30f9e41990.cer
File:                     aafb715400c40e4a598c89a6775b6b30f9e41990.cer (raw, json)
Hash identifier:          dMhhu5n/LBRi6u42oj5tGv0eXtlY7c1mltNbXQO4NHE=
Subject key identifier:   61:42:85:E9:8D:E3:EC:3D:A7:B6:9F:B8:0B:ED:DB:B2:51:52:12:18
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FEDE3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/b42dea8e-774c-425c-9975-8149f1dd1ab9/aafb715400c40e4a598c89a6775b6b30f9e41990.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/b42dea8e-774c-425c-9975-8149f1dd1ab9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 27 Oct 2023 20:37:47 +0000
Certificate not after:    Sat 15 Feb 2025 14:31:48 +0000
Subordinate resources:    AS: 52644
                          IP: 131.0.12.0/22
                          IP: 177.125.108.0/22
                          IP: 2804:1a28::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16703039 (0xfede3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 27 20:37:47 2023 GMT
            Not After : Feb 15 14:31:48 2025 GMT
        Subject: CN=aafb715400c40e4a598c89a6775b6b30f9e41990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c5:fd:88:d3:a2:87:08:41:fc:7d:b7:01:74:
                    6d:cf:99:a7:b8:2b:94:6b:3c:dd:e5:bb:d9:75:3c:
                    57:1f:10:da:c1:a3:c4:15:5b:50:97:bb:9c:b9:1f:
                    e4:d9:39:6d:e8:52:cf:02:d1:61:b3:63:02:ad:9b:
                    9b:f2:a4:48:93:e1:42:60:35:bd:6b:a4:51:b4:1f:
                    27:9e:a0:e9:c9:da:7c:21:29:cc:aa:ab:ed:90:b9:
                    e9:e3:c3:ff:c0:00:8d:23:76:e9:f6:d7:05:36:ce:
                    8e:c0:e1:53:a7:da:01:86:d1:b6:f8:d1:f9:6d:1e:
                    38:ae:da:77:c2:50:31:c3:34:15:0a:5c:50:ea:13:
                    f4:88:21:90:41:ad:91:95:13:9f:bf:43:65:f3:12:
                    39:a6:a2:4d:19:ea:e0:91:88:e2:27:f5:9d:7c:6e:
                    bb:53:d8:15:9c:23:78:ba:ae:c7:34:0c:28:a4:79:
                    1d:0c:32:0a:c2:0b:94:e9:b7:48:54:bb:f2:df:8f:
                    6f:60:cf:48:d7:82:40:d7:4c:23:ae:df:b3:47:1a:
                    00:34:92:db:51:31:a1:d1:b8:bf:fb:38:7e:5c:0d:
                    b7:95:d2:0e:4e:ad:d9:62:58:12:41:a3:c8:17:a8:
                    58:a5:9c:e6:34:7b:4d:bf:87:e8:ae:2a:cb:20:2b:
                    24:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:42:85:E9:8D:E3:EC:3D:A7:B6:9F:B8:0B:ED:DB:B2:51:52:12:18
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/b42dea8e-774c-425c-9975-8149f1dd1ab9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/b42dea8e-774c-425c-9975-8149f1dd1ab9/aafb715400c40e4a598c89a6775b6b30f9e41990.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.0.12.0/22
                  177.125.108.0/22
                IPv6:
                  2804:1a28::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  52644

    Signature Algorithm: sha256WithRSAEncryption
         47:8b:c1:bf:70:77:b3:56:46:84:ee:9e:06:b6:ef:4a:33:9e:
         26:24:c7:0b:af:2b:96:a7:14:ec:11:6f:38:fa:39:57:68:41:
         4a:bd:99:bb:08:58:42:25:4f:ee:a8:31:08:b0:b7:e2:bf:9d:
         b2:21:5b:f3:7a:15:39:e4:21:de:b1:b6:53:91:4d:71:00:11:
         32:f5:9f:3e:67:19:12:81:05:11:b3:9d:64:c7:de:fe:15:77:
         50:10:01:2a:be:85:61:53:07:1a:00:ef:d5:8a:bb:36:04:4d:
         11:7b:86:10:51:db:f7:13:f9:3c:44:92:17:d4:6a:cf:6f:83:
         b7:51:09:71:0a:73:ee:5d:9a:c5:1b:cb:49:4b:f5:65:e0:bb:
         e8:f3:77:b0:4b:c0:68:75:61:e5:bf:d8:aa:02:06:e7:3e:0e:
         1b:18:ad:ca:bb:be:1e:ba:2f:d2:a5:36:b4:39:33:c4:24:7b:
         b8:e7:ba:63:94:c6:da:3b:80:54:eb:f1:b3:e5:3c:70:b6:1a:
         f3:fa:1e:e4:ad:e6:b9:18:71:63:ba:91:44:9a:04:0e:c2:6c:
         af:63:72:71:9e:ea:cb:90:f8:61:cc:86:28:bc:c6:77:1b:16:
         c6:43:04:89:c1:ed:3f:c7:64:d3:bb:a9:2c:cd:5f:08:bb:7c:
         04:75:76:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----