Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/bb62bb7997f8505d71dd605c948faf55c102c283.cer
File:                     bb62bb7997f8505d71dd605c948faf55c102c283.cer (raw, json)
Hash identifier:          UXpvjpz7wA0M4D0ZGMPC/8zfnp7IJf8m+OIyYv8Yl8E=
Subject key identifier:   58:DB:4D:82:F4:2D:21:D8:88:8C:8A:19:14:FC:14:1A:BA:A5:C7:44
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F2DE7A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/03c2ce75-3084-4dd7-a7bd-c7205f3b999c/bb62bb7997f8505d71dd605c948faf55c102c283.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/03c2ce75-3084-4dd7-a7bd-c7205f3b999c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Jul 2023 16:42:48 +0000
Certificate not after:    Sun 01 Dec 2024 21:47:06 +0000
Subordinate resources:    AS: 271857
                          IP: 200.39.56.0/22
                          IP: 2803:7410::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15916666 (0xf2de7a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 25 16:42:48 2023 GMT
            Not After : Dec  1 21:47:06 2024 GMT
        Subject: CN=bb62bb7997f8505d71dd605c948faf55c102c283
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:81:6e:0d:ad:f0:d4:4b:66:5e:ff:59:2a:0e:
                    8f:bd:5a:87:e9:ed:7d:30:5b:4a:d5:3a:3b:3f:a1:
                    ee:47:65:24:f9:10:67:df:8e:a6:ef:f1:4a:fe:b3:
                    2f:3c:dc:7c:0a:ae:d7:c9:8d:f6:0b:fe:0c:d2:61:
                    ec:cd:24:42:ad:95:2f:20:7f:e7:df:f9:44:25:12:
                    1a:88:84:f0:d9:b0:8b:d2:de:b3:98:43:35:ad:40:
                    08:d0:77:90:3c:7c:6d:27:76:4a:92:53:d9:1d:2a:
                    c3:c7:8c:e4:8d:2b:1b:e2:4a:56:79:d7:da:ec:9b:
                    b2:f0:5b:7e:0c:89:fa:b9:01:5e:41:46:d3:58:4b:
                    25:04:2f:d1:79:67:53:67:f1:09:a7:66:86:7d:b8:
                    62:ca:7b:65:8f:82:07:33:8f:70:6f:17:f8:d6:b3:
                    28:1f:35:5e:e7:0b:c6:b0:f2:fd:1c:ea:d0:6f:2f:
                    99:94:ee:c0:1c:29:ab:ac:c5:bd:e4:37:22:7d:db:
                    46:15:3b:3a:80:53:7c:96:4e:c3:15:d4:c4:7a:b3:
                    17:ef:25:8e:7c:07:65:b5:53:df:18:9a:71:9d:4f:
                    d4:94:50:6a:aa:58:64:77:e1:1b:88:2e:c0:60:19:
                    7b:28:86:99:90:27:8a:39:f5:d2:a2:9a:fa:55:52:
                    7b:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:DB:4D:82:F4:2D:21:D8:88:8C:8A:19:14:FC:14:1A:BA:A5:C7:44
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/03c2ce75-3084-4dd7-a7bd-c7205f3b999c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/03c2ce75-3084-4dd7-a7bd-c7205f3b999c/bb62bb7997f8505d71dd605c948faf55c102c283.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.39.56.0/22
                IPv6:
                  2803:7410::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271857

    Signature Algorithm: sha256WithRSAEncryption
         a9:65:6d:f6:b9:e0:e6:03:2e:30:2a:b1:86:d6:35:b1:17:f5:
         af:7a:e9:df:10:e0:b7:0c:81:f1:82:ba:1c:53:6f:d5:1c:32:
         cd:c5:8f:5d:55:9c:fe:18:c0:2e:d6:e5:8a:9b:16:48:32:e3:
         3c:2e:11:e0:72:81:62:08:34:61:1d:59:60:c4:82:7e:4d:a9:
         43:56:ef:dc:c4:ee:50:c9:f5:d3:43:2a:08:6f:e7:1e:61:91:
         e5:cc:66:7e:2c:b3:f7:ce:6b:76:25:a4:9a:c4:4a:d4:51:2d:
         06:78:f3:2c:23:e4:24:d7:dd:0b:71:34:80:42:83:c7:6e:f3:
         a5:b8:03:f3:8f:c0:a6:1f:68:86:e7:bb:e0:d9:78:e1:09:d5:
         c3:18:ff:7f:05:c2:38:9b:79:c0:f8:49:7e:a3:af:2f:4b:eb:
         62:88:49:5d:bb:df:db:7c:09:1b:e1:b7:80:89:f6:f5:e5:44:
         71:26:96:8a:91:4b:67:ca:7d:ec:38:37:5f:d8:f1:32:b0:a4:
         74:80:b3:52:01:b0:cf:a2:2c:e7:be:29:a4:cb:3b:61:05:97:
         40:0e:0f:65:5d:3b:ff:f2:99:8c:14:fb:f0:78:a4:ff:14:13:
         78:c0:88:2c:b9:d1:e2:d6:c4:44:3a:1f:29:9e:b7:64:28:53:
         93:a7:29:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----