Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ac153a536702ca3ed716c8983a7b9c486127f49d.cer
File:                     ac153a536702ca3ed716c8983a7b9c486127f49d.cer (raw, json)
Hash identifier:          HE7fThyUPl7wdYnwTxDwCw1kxWPum8VTbCkK60DZXhs=
Subject key identifier:   6C:63:25:5D:46:E4:AD:8D:A7:54:FB:92:39:FF:8B:59:A0:04:58:A7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E89FF3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0bba40b3-b6a9-4716-b93c-63fd26ab2671/ac153a536702ca3ed716c8983a7b9c486127f49d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0bba40b3-b6a9-4716-b93c-63fd26ab2671/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 05 May 2023 16:04:27 +0000
Certificate not after:    Mon 18 Nov 2024 22:37:05 +0000
Subordinate resources:    AS: 267754
                          IP: 45.169.96.0/24
                          IP: 2803:73a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15245299 (0xe89ff3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 16:04:27 2023 GMT
            Not After : Nov 18 22:37:05 2024 GMT
        Subject: CN=ac153a536702ca3ed716c8983a7b9c486127f49d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ed:b6:06:f2:4d:b9:7d:54:30:1c:a2:c1:66:
                    ed:7f:fc:4e:66:e7:8b:d9:ab:de:9b:2e:fd:f9:e1:
                    05:ed:f4:3d:c8:0c:53:b9:42:8c:63:4f:9f:17:19:
                    cb:5e:6b:e0:a6:19:7c:19:d4:e9:6c:1c:34:35:ee:
                    6d:af:00:6b:63:9c:16:fd:8a:f5:9c:63:ce:ec:ee:
                    91:7d:04:9a:bc:90:f0:77:4f:35:fc:c8:36:85:6b:
                    fc:d9:36:4b:9a:b1:25:ec:d5:ad:13:0e:be:4d:39:
                    25:53:d0:1b:be:59:66:5a:a9:f8:df:77:b8:9c:93:
                    39:57:c1:46:76:7b:f2:48:4f:53:7d:22:96:07:bd:
                    23:dc:45:b9:33:4b:0e:20:1f:88:82:06:65:fb:0d:
                    21:55:bc:9b:ed:87:45:75:a1:ec:c8:52:fb:fd:f0:
                    1f:e7:1c:eb:74:55:e5:09:13:3f:2b:eb:8e:07:8d:
                    40:c2:3f:90:5d:bc:aa:61:81:f3:97:5f:54:1c:c8:
                    0a:dc:78:95:00:d1:1b:9c:40:90:ba:28:38:55:5a:
                    a9:58:0b:b9:0d:ea:c0:75:6f:f8:42:e9:66:b5:f2:
                    5e:69:23:2f:f4:fb:f1:6d:f3:54:01:09:aa:64:48:
                    35:d2:57:73:8e:7e:4a:37:77:d0:d4:9e:e3:d7:0c:
                    7d:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6C:63:25:5D:46:E4:AD:8D:A7:54:FB:92:39:FF:8B:59:A0:04:58:A7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0bba40b3-b6a9-4716-b93c-63fd26ab2671/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0bba40b3-b6a9-4716-b93c-63fd26ab2671/ac153a536702ca3ed716c8983a7b9c486127f49d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.169.96.0/24
                IPv6:
                  2803:73a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267754

    Signature Algorithm: sha256WithRSAEncryption
         c7:77:8c:ab:17:e2:6d:8a:c8:d0:a7:4a:a7:8f:b2:99:1c:ee:
         e2:24:e0:33:a3:f7:ed:bd:37:9b:21:eb:1b:e6:bb:9f:51:86:
         b6:d7:80:c6:c9:57:2b:dc:f8:5e:d3:6e:52:ff:f0:86:1c:0d:
         97:ac:18:29:49:b7:17:35:64:0c:9e:cb:9d:b6:7d:ef:07:46:
         1c:39:7f:7f:33:e3:3f:80:3e:82:0c:b6:e9:9b:bd:2d:c3:08:
         7d:83:bb:c7:0b:35:34:4e:ed:9a:7a:9c:da:01:f7:65:2d:fa:
         0b:76:f1:d5:18:51:93:f1:de:1d:63:aa:e3:8e:90:47:e8:b1:
         44:fc:d2:de:ea:94:81:9c:6d:01:5e:9e:db:55:28:21:2a:f3:
         2f:56:25:28:92:d1:d0:d4:d9:d3:bb:77:9a:dc:7a:1f:8a:f5:
         14:c5:4c:5a:09:83:00:ef:12:e5:83:8e:75:1d:b5:ad:db:89:
         53:70:ef:25:10:02:f5:bc:9d:fd:99:ef:b9:7f:fb:40:da:ed:
         0c:20:f8:86:bd:52:07:de:62:24:bc:96:64:dc:70:38:e8:d7:
         9a:6f:9e:d7:e6:b6:08:4c:76:f5:8b:be:e3:50:ed:1a:01:25:
         c3:24:0a:6a:f5:03:de:f2:3d:20:41:ed:b2:dc:2a:22:b4:dd:
         f0:1c:d0:88
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----