Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d31e458179c522e37f5e3421dfa6f267a137e3a2.cer
File:                     d31e458179c522e37f5e3421dfa6f267a137e3a2.cer (raw, json)
Hash identifier:          hZQDdne4QRP0r6XtSnMmXIdxKW2Sez0XcT9HE/BYXco=
Subject key identifier:   1E:AB:29:52:C6:DF:E9:97:44:8E:E8:BB:1D:D9:81:F2:F3:21:D9:32
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E71B6A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8aa294af-d4b3-44a7-8c2a-c904104663a5/d31e458179c522e37f5e3421dfa6f267a137e3a2.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8aa294af-d4b3-44a7-8c2a-c904104663a5/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 24 Apr 2023 22:01:42 +0000
Certificate not after:    Tue 10 Sep 2024 17:39:35 +0000
Subordinate resources:    AS: 61523
                          IP: 170.239.244.0/22
                          IP: 2803:8cc0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15145834 (0xe71b6a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 24 22:01:42 2023 GMT
            Not After : Sep 10 17:39:35 2024 GMT
        Subject: CN=d31e458179c522e37f5e3421dfa6f267a137e3a2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8a:c5:e2:0c:68:47:79:f7:ae:c8:a7:2a:06:a6:
                    f2:96:30:d3:54:4c:92:d5:fc:34:ec:9f:83:73:62:
                    49:e8:12:4c:74:fa:22:17:92:1b:e5:bf:91:0e:9b:
                    8e:c6:26:91:86:2e:99:ab:65:65:86:65:8d:c9:0f:
                    9b:7d:9e:7e:80:9e:75:5f:b8:2e:15:eb:ee:1a:6f:
                    ca:87:ee:1b:d6:60:af:d8:1f:31:9b:1f:83:e1:65:
                    20:99:a9:bf:4c:df:88:b4:eb:01:a2:c0:d7:57:46:
                    40:b6:59:f0:c5:45:01:4c:c4:fb:f8:49:93:ee:08:
                    9e:9e:74:b6:f6:1d:ab:80:88:71:3b:8f:00:f4:7c:
                    b7:eb:e8:65:21:bf:cb:c5:a3:a9:c7:ed:b0:5e:c0:
                    16:81:2b:13:c2:e7:5a:50:fc:d8:b5:20:21:aa:5d:
                    f3:a5:51:2b:78:aa:96:6c:dc:a0:b1:74:b7:88:18:
                    cb:16:17:b9:4b:c1:94:b3:4c:e9:5a:71:6f:09:0b:
                    8f:73:bd:f2:ca:88:dc:d0:28:f8:19:8f:df:65:8d:
                    de:8b:31:58:d1:22:d4:11:dd:38:89:04:0d:bc:59:
                    37:38:5e:69:ba:5a:40:5b:6d:57:83:31:62:90:a4:
                    a2:31:d8:c4:43:61:fe:de:34:ec:88:12:8e:01:b7:
                    fb:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:AB:29:52:C6:DF:E9:97:44:8E:E8:BB:1D:D9:81:F2:F3:21:D9:32
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8aa294af-d4b3-44a7-8c2a-c904104663a5/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8aa294af-d4b3-44a7-8c2a-c904104663a5/d31e458179c522e37f5e3421dfa6f267a137e3a2.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.239.244.0/22
                IPv6:
                  2803:8cc0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61523

    Signature Algorithm: sha256WithRSAEncryption
         a4:d3:ef:00:42:f5:0c:62:93:a1:e1:c1:5f:fb:7c:df:98:c7:
         ed:fe:50:3f:78:e4:32:9e:08:30:a4:6d:ad:b0:ab:d2:d8:be:
         e9:34:51:a7:82:86:fd:27:ea:55:54:75:b8:56:72:6b:3f:1c:
         99:70:ee:3a:05:cb:62:e7:1d:96:25:e2:5d:81:b0:56:25:6d:
         38:3e:4f:f4:46:10:32:52:db:15:db:9b:9d:1b:53:a6:44:c7:
         cc:7d:fa:78:38:e8:2e:73:2c:b6:40:e6:ef:df:3c:54:24:5b:
         87:7c:e7:ba:4c:b8:91:84:4f:40:bd:f8:ca:ae:21:d3:1f:93:
         c3:be:2b:8f:b1:e1:cf:16:db:46:93:32:b1:93:63:a1:48:2b:
         d3:5a:0e:b1:08:48:55:ce:56:06:a5:75:e1:12:9a:ee:1e:b1:
         69:22:5b:f7:77:37:22:8d:e9:49:ef:e6:84:38:03:4f:a8:1b:
         dd:ca:ef:f0:9e:4c:d4:91:c3:7a:e0:ce:97:dc:36:e4:1d:37:
         3a:76:fe:96:14:2b:a3:3f:db:3d:27:65:a5:5b:db:68:36:9c:
         2c:2c:30:0e:a8:e4:67:19:39:3e:d7:90:1a:f8:8f:e3:60:f0:
         d5:35:57:39:54:d1:bd:e1:0c:8b:4e:3c:20:14:5c:fa:c7:1f:
         c9:fe:40:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----