Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/dffb3fbe0b57ecf53867200b0c8a60e5b7064dd4.cer
File:                     dffb3fbe0b57ecf53867200b0c8a60e5b7064dd4.cer (raw, json)
Hash identifier:          rFLTkmkyoOZSZ7P0ESXhtXysJ0DB7gy4AzTikh5MTOE=
Subject key identifier:   AC:DF:70:D5:CE:97:CC:BB:86:29:60:07:7B:E9:75:30:8E:91:57:96
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E874A1
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/9b7e6643-ee93-4f02-89c0-fba52b03d08a/dffb3fbe0b57ecf53867200b0c8a60e5b7064dd4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/9b7e6643-ee93-4f02-89c0-fba52b03d08a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 04 May 2023 19:40:08 +0000
Certificate not after:    Mon 20 Jan 2025 22:16:46 +0000
Subordinate resources:    AS: 270109
                          IP: 190.83.80.0/22
                          IP: 2806:3b0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15234209 (0xe874a1)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  4 19:40:08 2023 GMT
            Not After : Jan 20 22:16:46 2025 GMT
        Subject: CN=dffb3fbe0b57ecf53867200b0c8a60e5b7064dd4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d3:7f:d1:8d:1c:8c:d4:6d:b4:f9:73:6f:42:
                    89:14:8e:f2:3e:d9:c9:0f:da:07:ac:6c:15:8c:9f:
                    06:e2:9a:97:bc:7d:d2:83:6b:f8:fb:f1:1f:06:7c:
                    92:8c:70:c3:68:91:32:08:fb:d0:5a:9f:ef:80:5b:
                    bd:1c:da:c9:c2:54:87:21:81:b2:6a:e2:1c:0e:98:
                    c4:e0:6a:76:03:77:24:f7:52:38:25:c2:db:37:9b:
                    2b:9d:2d:68:f9:95:11:81:5b:00:ab:76:8d:e1:c1:
                    86:16:bd:50:26:21:48:2e:ce:92:ea:17:ff:f8:1d:
                    7e:ba:fa:b5:64:e5:5f:74:c9:62:5b:2c:20:1c:4b:
                    d1:43:5e:82:35:fc:79:60:d2:9e:50:5a:82:2a:b8:
                    85:06:b9:96:dd:5e:b5:31:ef:65:5d:4d:15:ce:1d:
                    21:1d:3d:e3:86:a7:c7:b2:f7:f4:b7:f6:9c:cc:70:
                    19:f1:d9:d3:f5:c7:08:a8:41:d6:3b:80:e2:7d:44:
                    2b:3c:16:ab:ad:f6:1e:2a:77:71:27:8c:55:70:ea:
                    74:8e:02:e8:c7:d0:c3:78:dd:ff:7d:cc:82:39:09:
                    f1:90:82:59:6d:c6:3e:24:d2:07:9b:07:90:44:7a:
                    0d:95:ca:d1:30:48:c9:1c:21:6d:f4:d5:56:f0:99:
                    66:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:DF:70:D5:CE:97:CC:BB:86:29:60:07:7B:E9:75:30:8E:91:57:96
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/9b7e6643-ee93-4f02-89c0-fba52b03d08a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/9b7e6643-ee93-4f02-89c0-fba52b03d08a/dffb3fbe0b57ecf53867200b0c8a60e5b7064dd4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.83.80.0/22
                IPv6:
                  2806:3b0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270109

    Signature Algorithm: sha256WithRSAEncryption
         bf:16:69:e9:71:31:af:81:0b:77:e8:88:40:f3:a9:6f:77:65:
         8f:1b:0b:c7:a9:3e:9e:18:61:0d:d8:72:1a:4a:30:80:5a:d0:
         96:5f:66:db:e0:46:4f:8c:87:a3:fb:92:48:8b:f8:e0:5f:22:
         fc:0e:ff:27:cb:cc:41:18:50:c0:fd:51:49:e6:23:17:ac:23:
         9f:40:50:73:28:d1:65:38:88:2e:c4:da:88:80:c8:4f:79:35:
         ce:bb:4b:78:de:6b:95:37:ae:92:71:8a:56:b0:24:21:08:63:
         24:6a:84:c7:df:54:9a:a2:0d:38:01:77:80:e5:7e:eb:73:25:
         36:51:29:20:63:a8:df:0c:84:49:29:09:56:f8:f5:39:d6:f6:
         75:86:97:f5:2e:53:4d:de:9a:66:47:17:9d:65:35:40:d4:a4:
         7d:b2:3e:e4:c6:e1:b6:db:a1:8a:24:60:ca:71:65:ba:c5:6d:
         1d:94:fc:6f:9f:fc:1e:6a:38:82:1a:cc:98:a3:98:a0:95:33:
         f6:c3:8f:68:1f:a7:20:ac:db:2e:16:5f:8c:47:19:d7:08:2a:
         29:4f:b9:20:a0:93:d8:55:64:8a:27:ee:9d:a8:4c:a6:df:a9:
         65:ce:58:5c:48:9e:d5:63:7e:6b:9f:a3:05:fc:2e:19:80:29:
         a8:48:66:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----