Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb.cer
File:                     aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb.cer (raw, json)
Hash identifier:          oZrK4Cb3uiNBU8haAfgIb8HG2w83e2ieMBxooefEuXA=
Subject key identifier:   C8:AA:E9:59:79:A7:28:3E:E0:6D:96:FC:87:B6:54:5D:9C:B6:BC:C2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F3B062
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cd32aaf0-6ec8-4a49-bf70-08f791d4f4a0/aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cd32aaf0-6ec8-4a49-bf70-08f791d4f4a0/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 05 May 2022 21:58:12 +0000
Certificate not after:    Sun 01 Sep 2024 19:54:04 +0000
Subordinate resources:    AS: 264804
                          IP: 170.238.236.0/22
                          IP: 2803:d4c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15970402 (0xf3b062)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  5 21:58:12 2022 GMT
            Not After : Sep  1 19:54:04 2024 GMT
        Subject: CN=aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:1e:86:1f:f6:ce:7e:6c:72:f1:54:42:95:e0:
                    58:f4:8c:da:99:58:9b:a9:44:e8:23:af:82:27:51:
                    ab:f2:49:bd:4e:b2:37:cf:91:5e:12:b6:65:cf:36:
                    c1:2c:5b:d8:f5:76:60:60:09:ac:db:76:59:62:03:
                    64:0c:88:4c:2b:77:50:4c:98:f3:63:2f:68:4b:cc:
                    98:90:45:df:ae:00:b1:ca:dd:8d:f0:63:c0:34:bd:
                    3a:2c:df:04:66:79:20:5c:93:2b:26:6f:3f:8e:af:
                    05:8d:08:8f:62:58:5f:c8:1a:5b:47:16:87:a6:db:
                    9f:e9:c0:f5:70:8e:e4:05:14:cf:a3:7d:9e:54:a1:
                    d6:ab:46:e4:5e:45:51:d4:6b:81:28:53:48:95:cc:
                    47:4c:4d:38:64:93:4e:05:e5:16:e5:d9:ec:48:4c:
                    e0:56:bf:43:9d:ee:87:1b:37:b9:e8:42:4a:ae:9c:
                    cb:17:a3:4a:98:6c:46:57:33:a0:f3:a1:fb:df:6d:
                    0d:c9:e5:52:9c:66:d6:4a:69:0c:b8:e7:23:bd:28:
                    52:99:ae:02:87:92:b7:05:93:20:30:c5:ee:e5:d0:
                    54:52:8b:c3:a0:d8:03:dc:f2:ee:7d:68:5e:ab:4e:
                    6c:7a:eb:a6:68:32:3e:2d:4a:06:30:cb:9e:e3:f2:
                    98:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:AA:E9:59:79:A7:28:3E:E0:6D:96:FC:87:B6:54:5D:9C:B6:BC:C2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cd32aaf0-6ec8-4a49-bf70-08f791d4f4a0/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cd32aaf0-6ec8-4a49-bf70-08f791d4f4a0/aca75ac4fe6390a460e5cfe2db8bdfd0bcc8c6fb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.238.236.0/22
                IPv6:
                  2803:d4c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264804

    Signature Algorithm: sha256WithRSAEncryption
         9e:58:a5:f1:fe:35:61:b3:2d:ef:8f:43:1b:bf:05:40:85:5c:
         b9:a7:cd:7b:5d:7f:18:da:b9:f2:fd:1a:1c:b1:5e:14:d7:20:
         47:ff:2d:b8:a3:1e:a1:25:dc:0f:7c:13:f7:a1:a9:01:20:a2:
         a6:b7:d0:b0:32:a7:f2:44:d9:7a:a6:fc:b3:a6:83:e3:66:f9:
         62:52:59:27:b7:b3:c2:9d:3e:b4:77:c7:c8:c6:ef:9e:c4:86:
         66:9e:67:62:38:9b:4f:21:3f:ec:e5:85:01:2e:dc:ad:f0:bc:
         31:de:ab:7f:1e:20:b2:39:62:a0:2f:69:34:78:90:cd:94:07:
         d7:5e:7c:99:5b:3e:6f:c9:1b:de:59:b2:e7:cd:3c:11:5a:d0:
         bd:6e:6a:69:fa:1b:35:aa:97:27:8c:ff:46:62:21:8d:2b:73:
         f3:be:bc:e9:0e:f4:a5:b6:03:9e:e5:95:90:e3:80:92:3f:6e:
         c2:0b:1c:40:bb:6b:d5:62:ad:5c:26:19:98:84:7f:3b:4c:6f:
         6c:fd:36:a4:d2:ce:e3:97:fa:7d:47:c8:68:97:73:24:a2:32:
         04:47:b7:b0:18:94:4e:68:82:be:a6:74:2b:b4:e6:e3:ae:cd:
         e9:c6:a0:c6:df:de:93:cb:85:f6:89:f3:fa:43:09:cd:b8:98:
         e6:29:a7:0a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----