Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.cer
File:                     dce19eee3e5c1bb13241d78afef96a9a5f803f4b.cer (raw, json)
Hash identifier:          MXk20ygEkPwldy2sO/nt55iwx3mAw0ZLMGGt2//JIaM=
Subject key identifier:   28:3D:A4:6D:B8:4F:E7:98:B7:F4:BE:C0:29:18:DA:29:27:06:9B:BD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4C7ED
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 04:06:52 +0000
Certificate not after:    Thu 09 Jan 2025 05:00:00 +0000
Subordinate resources:    AS: 271860
                          IP: 45.71.32.0/22
                          IP: 45.224.144.0/22
                          IP: 2803:8210::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14993389 (0xe4c7ed)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 04:06:52 2023 GMT
            Not After : Jan  9 05:00:00 2025 GMT
        Subject: CN=dce19eee3e5c1bb13241d78afef96a9a5f803f4b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:7d:22:e2:ab:e5:92:ff:de:ca:1f:ac:57:bc:
                    35:e3:16:d3:ee:3e:98:0c:28:0c:5e:f9:a9:c1:0b:
                    32:d9:76:4b:f0:05:f4:d9:2f:b5:68:87:b3:7a:99:
                    24:b2:ce:77:6f:ba:83:7b:94:fc:30:06:c2:8e:b8:
                    fa:71:8b:df:35:95:16:e1:3b:f0:e8:5e:fd:8a:6a:
                    f4:29:2c:71:78:0c:e6:ac:68:e9:d6:35:d1:44:15:
                    07:df:a2:2a:4a:8f:3c:a7:55:ad:37:59:1d:d3:48:
                    ff:19:d9:db:fe:f7:e3:b5:c0:62:19:83:2b:1e:35:
                    bf:4f:08:5d:79:85:7a:52:28:29:09:3e:80:6f:fe:
                    6b:7a:45:4c:35:22:8a:41:00:a1:a8:01:c8:64:63:
                    15:e9:03:ec:d3:bb:a1:f6:c8:13:9c:a5:16:8d:c1:
                    ac:ed:3b:8e:e5:bf:22:49:1f:9c:41:fb:60:71:18:
                    6b:21:cf:68:92:9a:41:18:a9:7c:05:94:04:42:01:
                    cb:67:03:f7:f9:8e:2f:8e:ac:af:13:f3:4d:fb:61:
                    78:6e:6d:d9:09:f1:c5:86:4c:ac:ff:66:76:2f:3a:
                    84:f2:92:89:69:d1:2f:88:50:33:23:0e:31:bd:cb:
                    f9:fc:9b:68:19:f8:ad:58:ce:cd:e4:91:b7:6e:a3:
                    dd:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:3D:A4:6D:B8:4F:E7:98:B7:F4:BE:C0:29:18:DA:29:27:06:9B:BD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/54d86626-0a96-4858-9139-c387fc99fc19/dce19eee3e5c1bb13241d78afef96a9a5f803f4b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.71.32.0/22
                  45.224.144.0/22
                IPv6:
                  2803:8210::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271860

    Signature Algorithm: sha256WithRSAEncryption
         99:c5:8e:fe:ce:1a:b3:e1:f9:11:3d:41:b1:e0:f4:06:99:c8:
         11:af:5f:5d:bf:a0:24:06:98:4d:aa:66:fd:83:77:dc:49:34:
         49:48:2e:ec:f8:a8:8d:49:0c:bd:9f:52:06:50:37:ff:5a:8a:
         44:9c:70:51:6c:d2:f6:26:1d:1b:a8:b9:d8:9c:9a:e9:2d:a9:
         e0:76:0a:29:c7:7e:10:57:40:f9:34:67:dd:30:f0:03:4c:1b:
         5a:c0:0f:b5:0d:c4:f5:69:4e:4f:3a:40:77:84:00:b8:46:7e:
         72:cb:22:4f:5c:90:fc:29:06:bc:ba:a4:4e:b6:0c:62:5a:f5:
         0e:72:9d:c8:6e:6d:17:cd:98:b9:a2:8a:ad:0a:09:34:78:af:
         5b:be:84:56:f7:cd:0b:c3:05:da:ce:2f:ee:55:0f:5b:84:09:
         79:bc:72:80:b6:5a:87:50:3a:e4:52:5f:5f:81:29:8e:c4:90:
         28:d1:07:04:68:0f:e8:2f:2f:7e:ec:b2:4c:52:ac:18:85:94:
         5d:7d:30:e0:94:7d:ab:cd:31:cb:bd:30:e1:aa:d6:a2:b4:be:
         51:4d:db:66:89:17:8e:84:48:6c:91:14:79:24:31:f9:98:db:
         82:1b:45:d2:1a:a8:c9:35:dc:cd:db:6a:c1:7d:a0:40:63:80:
         72:ab:8f:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----