Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/b0e7767839101668b30fa4d00e810e964fc7e6d4.cer
File:                     b0e7767839101668b30fa4d00e810e964fc7e6d4.cer (raw, json)
Hash identifier:          ym5ftYqAKGxns/uHA55zJnrx3pwfxQnUUpIhYdJLbHU=
Subject key identifier:   07:A0:32:C2:20:E3:09:E3:B7:FE:33:D6:DF:EF:2F:2E:7A:98:7E:7A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E86D4A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/13d16019-1986-4b48-947a-ebec0ce498e8/b0e7767839101668b30fa4d00e810e964fc7e6d4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/13d16019-1986-4b48-947a-ebec0ce498e8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 18:42:26 +0000
Certificate not after:    Sat 15 Jun 2024 15:00:00 +0000
Subordinate resources:    AS: 28597
                          IP: 200.234.240.0/20

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15232330 (0xe86d4a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 18:42:26 2023 GMT
            Not After : Jun 15 15:00:00 2024 GMT
        Subject: CN=b0e7767839101668b30fa4d00e810e964fc7e6d4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:d3:3f:77:5f:d9:e6:18:79:0e:6f:e4:f1:42:
                    ad:e7:e7:03:00:12:da:9c:e6:af:ac:84:e7:40:f2:
                    be:95:af:8a:1a:9b:d9:90:18:92:2d:28:e0:8c:09:
                    0d:eb:fb:db:17:9e:88:53:72:58:40:ed:95:00:5f:
                    e9:17:6e:41:7e:48:da:24:59:5a:05:ab:e2:e6:74:
                    a4:16:e2:47:8a:24:ab:79:79:31:7e:79:47:ed:76:
                    8d:de:9a:ce:57:96:83:b4:d6:8d:9a:b1:48:14:16:
                    36:bd:37:49:e1:74:aa:a6:0b:5c:b3:54:eb:13:57:
                    92:20:60:10:8f:20:6f:61:40:ee:3d:29:64:95:b9:
                    b4:cd:a0:02:dd:7a:c1:5b:e1:02:80:f4:02:e7:26:
                    81:d7:10:82:f7:2b:6b:f1:6b:02:e6:8b:9f:da:57:
                    92:b7:0c:86:74:35:18:e1:74:47:04:02:f5:9e:85:
                    2c:74:e0:90:81:4c:6b:b3:fe:a0:d9:d9:af:27:65:
                    d5:22:c7:dc:b6:06:54:24:fc:07:46:a0:94:dc:62:
                    02:2c:c8:f7:50:35:56:9c:46:89:9a:86:6c:2d:79:
                    b3:00:e2:31:77:dc:5b:07:58:df:e6:6c:41:9e:be:
                    ea:a4:0f:81:26:1d:df:a4:89:04:f4:0f:55:a1:cc:
                    bd:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                07:A0:32:C2:20:E3:09:E3:B7:FE:33:D6:DF:EF:2F:2E:7A:98:7E:7A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/13d16019-1986-4b48-947a-ebec0ce498e8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/13d16019-1986-4b48-947a-ebec0ce498e8/b0e7767839101668b30fa4d00e810e964fc7e6d4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.234.240.0/20

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28597

    Signature Algorithm: sha256WithRSAEncryption
         6a:68:f0:26:21:11:e0:d4:8d:62:1a:0f:9a:dd:78:83:e8:80:
         bf:1d:e1:e8:1e:0a:8c:23:78:4a:2a:c8:7e:1e:52:fc:64:08:
         d3:66:c1:1b:a5:b3:c0:a7:ed:07:19:43:9a:8d:8e:24:d8:5f:
         2d:dc:22:9f:f5:50:b7:a6:92:ff:6b:5d:9d:50:b9:bb:11:5f:
         17:d8:ea:13:c5:28:99:b0:a5:78:ca:18:f6:42:dd:64:6e:d0:
         9e:44:c5:c6:9d:d8:63:e0:2d:e1:9e:3c:a5:9d:7a:c9:cd:e0:
         88:dd:e3:a5:fe:8a:1c:ec:9b:ad:97:d3:33:7f:34:9d:ca:41:
         29:65:ac:e9:c4:02:8b:9f:10:ce:e0:1f:52:04:e9:21:0f:94:
         34:e4:77:fb:78:28:7b:8c:60:8c:81:38:08:13:ed:7c:d8:2c:
         99:bd:7b:50:0d:2f:2d:ec:89:81:2c:1f:f2:7b:06:58:49:1c:
         b9:58:ad:64:72:37:fc:83:79:7b:93:fb:ae:8f:b9:38:fc:b7:
         38:c0:52:28:80:9a:62:82:01:2f:06:8e:b6:4f:7d:b9:1f:61:
         83:52:a1:90:0f:9a:04:92:24:98:83:f3:75:d3:dd:6f:f0:38:
         e8:ff:cf:82:6c:ad:50:b0:5c:bd:36:c0:0e:9c:aa:4d:19:ef:
         ee:33:10:52
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----