Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/c8c59d2967ce698ceab49f8ca58b384c5945c526.cer
File:                     c8c59d2967ce698ceab49f8ca58b384c5945c526.cer (raw, json)
Hash identifier:          /sk9OAKEMOluQjrX/YJX8nMlO5spvfSS9EGqX81DY5g=
Subject key identifier:   14:56:46:EF:81:44:06:74:79:77:4B:F8:FD:28:D3:EA:A0:24:45:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F973C3
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/c8c59d2967ce698ceab49f8ca58b384c5945c526.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 10 Feb 2022 17:40:53 +0000
Certificate not after:    Mon 14 Oct 2024 17:47:02 +0000
Subordinate resources:    AS: 272024
                          IP: 181.189.24.0 -- 181.189.26.255
                          IP: 2803:2510::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16348099 (0xf973c3)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb 10 17:40:53 2022 GMT
            Not After : Oct 14 17:47:02 2024 GMT
        Subject: CN=c8c59d2967ce698ceab49f8ca58b384c5945c526
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:60:39:1c:36:2a:89:72:9c:40:11:e6:59:3c:
                    1f:63:4f:bd:48:63:f3:77:02:25:53:fe:ed:91:2c:
                    8b:85:e0:92:bf:b8:4f:e9:ab:9b:0b:75:2a:a7:69:
                    21:83:9c:5c:ba:5d:52:7a:9d:8f:1a:19:bd:2c:5e:
                    46:3a:d2:99:7d:45:33:7e:20:8a:71:8b:a8:26:2f:
                    bf:63:16:40:63:0e:ea:5a:72:be:09:54:24:96:c0:
                    c7:db:42:b5:7b:76:34:df:01:1f:4c:6a:db:cf:d0:
                    c7:93:e1:91:25:e5:6b:bd:23:cb:84:1c:cb:44:9c:
                    49:fa:65:cd:0f:6e:de:e2:d2:a7:1c:f9:fb:9d:81:
                    19:da:96:66:44:de:c5:cf:0e:a7:4e:98:b5:9a:a6:
                    e6:d2:82:d1:bf:f0:c9:fe:a0:70:c2:9a:31:12:c1:
                    65:e1:2a:21:72:c2:32:fe:3e:65:60:79:44:27:71:
                    be:c5:5f:72:e5:b6:5d:55:1b:0b:b6:35:40:e2:4b:
                    26:d9:b2:d1:f4:55:49:63:2d:97:e2:c3:ab:eb:f3:
                    ff:59:2b:b1:a7:34:4c:07:17:66:30:64:41:29:7f:
                    d4:3f:be:ae:6b:1e:e2:18:50:46:e7:49:4f:a0:ca:
                    3c:42:8d:17:b6:d7:4c:9a:fa:00:b5:39:c3:3a:91:
                    b5:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:56:46:EF:81:44:06:74:79:77:4B:F8:FD:28:D3:EA:A0:24:45:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0a1754b1-521f-44fb-a4f8-9929ee552e2e/c8c59d2967ce698ceab49f8ca58b384c5945c526.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  181.189.24.0-181.189.26.255
                IPv6:
                  2803:2510::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272024

    Signature Algorithm: sha256WithRSAEncryption
         22:75:a5:13:6f:19:03:7c:e9:e7:0c:3f:86:c7:e1:09:9d:29:
         1b:aa:fe:4b:26:4f:3b:9b:15:ab:e5:78:60:93:f7:47:89:50:
         b6:19:16:89:d4:98:61:ef:0e:f7:4c:9f:53:f8:ef:0c:bd:c5:
         54:53:38:81:8e:ed:4e:20:1c:aa:1b:75:ba:24:e5:d1:0b:bb:
         99:22:3c:a4:2f:b9:18:60:49:c5:43:34:69:96:70:78:0f:d2:
         22:28:06:0e:a7:f2:8c:db:c3:31:52:f6:bd:c8:ee:31:2b:96:
         40:6a:51:9a:29:30:2a:90:c0:a2:7e:06:7a:77:c0:04:c8:fa:
         5f:76:a0:28:c0:8e:99:d1:4f:c0:0b:b2:85:ca:9f:e4:99:3e:
         d2:9e:1f:a5:7a:1d:eb:19:13:59:95:76:34:6d:0a:5e:5e:b8:
         79:d5:35:01:5c:2a:f4:b7:c7:e4:bb:4b:5f:85:e7:2a:77:ae:
         ba:33:39:98:2e:71:5b:37:b4:27:2c:6a:58:ed:6a:68:82:03:
         9f:e5:ce:79:3f:c2:6c:c7:f5:ce:e7:b4:40:21:05:eb:b5:28:
         7e:23:3b:32:88:25:4c:8b:59:0c:5a:b6:ce:f3:ee:70:38:a5:
         99:86:90:a3:ad:5e:3c:86:b5:aa:bd:4c:4a:1e:47:5d:a0:89:
         cf:97:e7:0e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----