Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d223720a7e586b29ad476427902e4583b908da8c.cer
File:                     d223720a7e586b29ad476427902e4583b908da8c.cer (raw, json)
Hash identifier:          x4Oz7rweUm+VWk/lNUQuBqhyXymTgiwL6dbbrX3krNI=
Subject key identifier:   1A:1F:2F:FA:3E:26:2F:7A:95:6D:F4:7B:DF:97:C9:14:3C:30:BC:84
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F973E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bedebdfb-bd92-4a48-8e96-50938e5b7815/d223720a7e586b29ad476427902e4583b908da8c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bedebdfb-bd92-4a48-8e96-50938e5b7815/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Sep 2023 17:13:22 +0000
Certificate not after:    Fri 11 Oct 2024 16:08:02 +0000
Subordinate resources:    AS: 266669
                          IP: 45.227.5.0/24
                          IP: 2801:154::/42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16348132 (0xf973e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 13 17:13:22 2023 GMT
            Not After : Oct 11 16:08:02 2024 GMT
        Subject: CN=d223720a7e586b29ad476427902e4583b908da8c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:eb:c0:ca:5f:6e:5b:82:22:04:c3:13:1a:85:
                    64:99:26:13:77:56:5f:c6:7f:5f:22:e1:d4:cf:39:
                    37:0e:ad:fd:70:51:5d:9c:82:60:b4:cf:22:9b:2e:
                    ec:ac:e1:34:70:67:43:8e:ce:a8:e2:7c:4e:08:68:
                    17:85:ac:fb:f5:01:39:ab:cd:95:a1:a7:44:6b:db:
                    4e:7f:e6:a5:0f:e4:20:9e:d4:5e:0a:e2:ed:f1:a1:
                    f4:15:cf:d6:3a:58:94:02:f9:39:da:64:2b:84:c7:
                    a3:cb:15:a0:e0:2c:ab:09:fd:f2:96:82:ea:db:d5:
                    0d:8a:83:08:c3:0f:78:5d:e8:8b:f3:cb:35:c8:15:
                    25:2c:16:cb:48:c1:85:9a:e6:9d:62:6d:a9:9b:71:
                    89:ac:1f:29:b7:fc:73:9f:57:53:76:f9:f9:25:76:
                    2e:7b:39:74:e3:bb:21:0a:41:01:03:e5:9e:3f:5c:
                    6c:23:25:f8:df:d7:d2:7e:cb:29:6c:0b:cd:4e:45:
                    fa:a2:ab:bd:fa:18:40:23:32:37:e3:ca:ce:eb:0d:
                    e7:f8:95:f0:f0:86:f4:73:b9:11:de:ec:e8:7c:ba:
                    f9:ed:bc:c5:65:e5:39:cd:b4:c0:f7:c5:68:85:61:
                    79:26:00:3d:c0:7b:01:bf:28:87:e2:3f:33:71:86:
                    a9:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:1F:2F:FA:3E:26:2F:7A:95:6D:F4:7B:DF:97:C9:14:3C:30:BC:84
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bedebdfb-bd92-4a48-8e96-50938e5b7815/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bedebdfb-bd92-4a48-8e96-50938e5b7815/d223720a7e586b29ad476427902e4583b908da8c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.5.0/24
                IPv6:
                  2801:154::/42

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266669

    Signature Algorithm: sha256WithRSAEncryption
         b6:d5:ed:53:03:68:0f:24:7e:9b:42:76:02:55:c3:c1:77:52:
         85:52:83:b9:f5:eb:7a:20:ab:9e:c3:a4:a7:f1:40:58:02:e2:
         8c:80:e0:b0:ef:61:2d:90:9e:16:f2:c8:4c:12:be:fc:79:da:
         91:d1:f6:8f:c4:ec:0a:66:be:96:25:7d:27:74:d6:f1:86:22:
         42:a5:a1:3b:21:af:b9:af:6c:72:a0:b4:d9:d3:68:9b:77:1a:
         99:87:66:50:95:fb:35:39:db:60:f1:50:4c:cb:7c:a9:44:34:
         c0:95:cb:e6:74:89:65:a0:e3:84:47:d2:60:bd:4c:12:3c:4f:
         eb:9f:e9:10:02:cd:68:de:85:e2:c1:58:0c:96:37:14:08:08:
         d5:91:a0:df:ae:72:1d:79:ec:a4:05:2a:79:3d:e2:40:d8:25:
         40:85:c9:90:7f:df:a5:42:99:2b:b9:3d:8e:73:a0:1a:5a:26:
         fa:14:6a:3b:d2:e9:0f:39:cf:af:0e:f1:5c:a3:1c:f8:a2:87:
         0e:8c:cb:a7:46:5f:d6:c7:1c:c6:50:de:ff:97:2e:dd:74:4d:
         6a:49:f8:6f:66:55:42:21:0e:2e:3e:6d:0a:46:8a:09:90:7b:
         c6:97:5c:96:ef:36:e3:bc:97:bd:46:bc:1f:a1:f8:45:cb:47:
         e2:ac:89:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----