Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/df1be125ec1d292250f681dbc0d24f3c5805670d.cer
File:                     df1be125ec1d292250f681dbc0d24f3c5805670d.cer (raw, json)
Hash identifier:          dcX2m5p0GvC13OYg1XsX2z2GSEq7SzoQoJZB2lgesi4=
Subject key identifier:   04:09:5F:65:BB:4C:FB:B4:EF:22:05:DA:D5:86:84:DE:FE:D9:55:2D
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F09AFF
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e2fcadd0-cc88-4dcb-93d6-8abc3678ef6e/df1be125ec1d292250f681dbc0d24f3c5805670d.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e2fcadd0-cc88-4dcb-93d6-8abc3678ef6e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 04 Jul 2023 11:41:27 +0000
Certificate not after:    Wed 25 Dec 2024 16:04:07 +0000
Subordinate resources:    AS: 267779
                          IP: 45.172.28.0/22
                          IP: 2803:57a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15768319 (0xf09aff)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  4 11:41:27 2023 GMT
            Not After : Dec 25 16:04:07 2024 GMT
        Subject: CN=df1be125ec1d292250f681dbc0d24f3c5805670d
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:d8:aa:00:3a:88:1c:b3:c2:5d:de:ae:10:51:
                    49:86:39:40:f8:15:e4:28:ad:b3:8c:74:41:e4:65:
                    bc:2d:fc:3c:fd:c0:67:fc:72:ee:fb:23:4e:ac:8e:
                    43:cd:e6:8c:b0:e8:4b:00:3c:97:fc:2a:67:fa:62:
                    9e:98:6a:89:57:e4:07:6c:26:fc:a2:92:ec:09:03:
                    3b:05:de:2f:23:78:0f:06:08:6f:ac:6a:1f:88:70:
                    93:a9:1d:17:88:a4:3e:fe:40:83:54:1c:15:25:2e:
                    57:ba:a2:0b:94:eb:4c:09:8d:4b:d8:3f:ec:93:83:
                    8b:ff:95:fc:97:b8:7d:0c:07:07:ef:6c:72:30:3e:
                    31:29:80:df:4a:cd:ad:64:3c:87:60:e8:bf:f6:3f:
                    1a:1c:77:91:22:3c:c1:5b:d5:d9:15:ca:b5:04:f3:
                    db:3a:f2:86:b5:92:2a:a9:d6:d3:bc:0f:e0:79:57:
                    49:a2:fe:ec:c8:a8:53:a5:3e:3d:16:84:89:ac:9c:
                    83:b9:59:4d:a8:6a:fa:2d:96:51:e3:e7:68:d9:0d:
                    9a:cd:89:3a:64:1d:97:ea:e1:d5:0b:fb:71:54:a6:
                    fc:46:3c:49:04:d8:8b:5e:46:5a:86:08:18:45:cb:
                    43:03:67:94:c6:ca:7d:67:2a:d5:88:e6:b8:19:9b:
                    3e:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:09:5F:65:BB:4C:FB:B4:EF:22:05:DA:D5:86:84:DE:FE:D9:55:2D
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e2fcadd0-cc88-4dcb-93d6-8abc3678ef6e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e2fcadd0-cc88-4dcb-93d6-8abc3678ef6e/df1be125ec1d292250f681dbc0d24f3c5805670d.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.28.0/22
                IPv6:
                  2803:57a0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267779

    Signature Algorithm: sha256WithRSAEncryption
         15:02:c5:69:be:64:f1:3f:ff:0b:a3:90:be:ff:d4:29:f0:65:
         a0:e5:e5:94:50:56:ed:25:b6:8b:5a:37:1c:a8:fc:f2:0f:64:
         57:aa:d4:2b:93:54:ca:fc:54:79:bd:28:88:a0:3b:77:4e:83:
         da:05:da:6e:26:ca:11:a7:f7:bd:ac:60:9b:0a:7f:d9:ce:76:
         5e:58:bc:6d:3b:2a:9e:01:17:6e:8f:b7:0d:2c:2a:8f:7c:b9:
         9e:1c:2b:ff:43:75:60:1e:07:5d:3f:e3:ff:62:b0:35:96:3f:
         50:0b:50:93:e0:23:28:11:64:57:bd:79:33:04:f9:af:02:f4:
         d8:ee:3e:14:9b:4a:33:d9:da:ba:86:b5:66:3b:7d:4b:21:0c:
         13:fd:58:dc:df:5c:4b:c2:53:cb:c3:39:16:8e:b6:dc:93:6f:
         b1:6a:16:79:93:0a:d9:52:99:26:c1:cc:29:e2:74:94:17:fb:
         12:2b:7b:23:48:c6:d5:c2:f5:6e:a8:46:2d:1c:7c:06:4d:6e:
         13:9e:56:cf:32:86:bf:e4:51:d5:be:63:d9:24:0b:76:2d:35:
         16:84:10:0e:74:86:76:f0:7d:bc:8a:96:21:77:63:a5:b6:5b:
         35:ef:02:fa:51:55:44:52:1b:e5:3b:46:46:a1:5e:06:03:09:
         a2:9d:c9:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----