Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/da518432aed2a70e1524b6d625a0b2a4eae9231c.cer
File:                     da518432aed2a70e1524b6d625a0b2a4eae9231c.cer (raw, json)
Hash identifier:          OvB1IXHC1IZExxlW1i5YO0t4rqVbUTQXAuJ7T+IMlBI=
Subject key identifier:   90:20:11:8C:61:54:DD:CC:87:D4:C8:47:68:43:55:57:19:B1:C5:B3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F90412
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2a7e2bbf-c4b1-4406-95d2-8d208836a077/da518432aed2a70e1524b6d625a0b2a4eae9231c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2a7e2bbf-c4b1-4406-95d2-8d208836a077/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 10 Sep 2023 17:23:15 +0000
Certificate not after:    Mon 22 Jul 2024 22:32:58 +0000
Subordinate resources:    AS: 263685
                          IP: 201.131.77.0/24
                          IP: 2801:17:a000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16319506 (0xf90412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 10 17:23:15 2023 GMT
            Not After : Jul 22 22:32:58 2024 GMT
        Subject: CN=da518432aed2a70e1524b6d625a0b2a4eae9231c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:7e:44:14:60:1a:94:4b:6b:0b:56:6b:71:db:
                    d9:0d:41:29:a9:47:29:24:c1:01:cd:37:48:9e:1c:
                    7b:15:13:c6:39:4a:5d:2d:90:23:b9:b9:b6:fa:cb:
                    f6:c5:66:f3:e3:72:2f:f9:db:41:97:3a:d4:53:d8:
                    a9:2c:87:42:74:86:f4:32:43:5e:d0:77:11:7c:56:
                    3f:78:bd:a4:13:f7:af:80:93:81:d8:4b:f7:85:0f:
                    95:7b:22:cc:a1:e5:9d:35:76:8b:36:ef:f1:dc:09:
                    ad:94:c6:90:5f:b5:42:d7:5b:1b:a0:3a:55:47:f0:
                    13:ee:0b:f8:a8:6e:51:27:2c:1c:15:1f:0d:c5:9a:
                    6a:c9:db:62:2e:84:32:4b:7a:f2:04:7e:1f:df:b2:
                    ec:5a:ff:c0:b9:e4:a5:e0:af:34:16:39:f9:8f:6e:
                    5b:f9:f5:4d:d7:4b:4c:77:44:25:7f:88:38:a0:7f:
                    68:7a:b1:79:a8:84:8a:aa:ff:fb:78:5e:93:ee:8d:
                    ba:c0:3c:f3:c9:bc:4b:d8:70:1f:21:6d:c9:0c:30:
                    64:c8:f3:f4:0c:16:2f:65:85:3e:5b:6f:2a:a2:8d:
                    aa:14:8a:b0:01:e3:ad:55:8f:cd:f4:0c:6f:33:ec:
                    e0:9a:90:dc:4d:a6:e8:6d:6b:e6:06:d9:fb:aa:61:
                    56:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                90:20:11:8C:61:54:DD:CC:87:D4:C8:47:68:43:55:57:19:B1:C5:B3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2a7e2bbf-c4b1-4406-95d2-8d208836a077/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2a7e2bbf-c4b1-4406-95d2-8d208836a077/da518432aed2a70e1524b6d625a0b2a4eae9231c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.131.77.0/24
                IPv6:
                  2801:17:a000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263685

    Signature Algorithm: sha256WithRSAEncryption
         4d:06:a1:80:7e:5c:e9:e6:75:83:cf:63:98:8d:20:e3:e7:e8:
         3b:2f:68:8a:db:80:b8:43:b2:9b:6d:ef:c3:34:69:fe:7e:11:
         bf:01:6d:df:fd:3e:cb:be:09:56:77:ef:94:9d:4f:4d:14:91:
         c0:85:bf:83:83:4a:04:5b:3d:d8:cf:ae:4a:ad:91:03:5a:d9:
         48:14:14:91:47:99:c3:1b:0f:01:08:4c:db:09:49:87:7d:28:
         86:33:2e:e0:75:59:1c:02:bc:c8:72:b7:a7:3e:32:c8:58:38:
         8f:7c:b1:97:30:29:3a:20:1b:61:ea:0b:58:05:70:cb:14:e1:
         a7:9e:39:f4:ff:71:6d:9f:5c:5d:11:b7:6b:02:1a:64:d8:33:
         b3:9b:6f:cf:ef:90:13:8a:8d:20:97:e0:98:65:71:e2:c3:d5:
         55:bb:6d:3e:47:f5:50:7b:99:2d:a5:5f:21:a4:82:88:81:e8:
         17:5d:a9:b5:ce:52:81:27:68:97:1d:8e:e3:88:4a:22:1f:0f:
         80:1a:27:f3:d1:ac:c7:57:f1:2a:94:db:ac:ed:bd:cd:4a:95:
         fa:e0:02:65:86:9b:5d:1d:1d:dd:43:42:46:98:c7:58:c1:c7:
         6c:b7:1a:1e:4f:d1:55:87:58:09:f0:54:a3:f8:81:84:99:d6:
         59:10:83:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----