Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e2e64338d19201e9f70ecbbb89effde10e9a0df7.cer
File:                     e2e64338d19201e9f70ecbbb89effde10e9a0df7.cer (raw, json)
Hash identifier:          p1EkPR8KmSR2R8I5kTq2Me/EI7eY/H30fbKeLApvZ4s=
Subject key identifier:   C6:4A:A2:16:53:61:F0:E7:34:83:A3:49:76:19:E6:F1:7C:83:16:2B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010DD96D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/cd9fea27-12be-45eb-a7dc-88585f7d4ccd/e2e64338d19201e9f70ecbbb89effde10e9a0df7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/cd9fea27-12be-45eb-a7dc-88585f7d4ccd/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Mar 2024 15:00:29 +0000
Certificate not after:    Fri 31 Jan 2025 19:03:39 +0000
Subordinate resources:    AS: 272107
                          IP: 190.151.134.0/24
                          IP: 2801:1b:9800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17684845 (0x10dd96d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar 13 15:00:29 2024 GMT
            Not After : Jan 31 19:03:39 2025 GMT
        Subject: CN=e2e64338d19201e9f70ecbbb89effde10e9a0df7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:18:8f:23:96:ae:de:5e:a5:c9:73:c5:a8:91:
                    1a:4f:f5:f5:22:54:6d:ae:70:91:7d:59:c7:9f:60:
                    54:d7:64:d5:e1:f8:6d:fa:83:03:48:0d:a4:b7:04:
                    23:bc:08:a3:46:88:e8:af:e7:7d:53:eb:6b:6e:ed:
                    43:07:ee:be:bf:57:72:e1:63:3e:81:7f:7e:ff:16:
                    51:81:7d:70:d6:12:86:31:4a:24:9a:bd:06:85:21:
                    27:3d:94:5b:5b:c0:cb:bb:80:83:31:83:ff:ae:2a:
                    ac:2b:fb:47:bb:80:e1:9d:2b:7f:54:88:bc:08:e6:
                    f5:33:02:55:75:de:96:47:4e:ac:aa:82:41:3c:92:
                    d3:48:83:dc:15:35:a7:f8:36:44:e5:3c:2f:b8:71:
                    c4:aa:af:06:8d:55:1f:fa:23:25:fb:da:72:0b:ee:
                    f4:10:f7:7d:b4:d4:d3:1a:7e:9a:0f:30:05:65:22:
                    d2:11:44:b2:0c:12:6a:4e:b6:10:00:be:ea:4e:28:
                    b6:13:e2:65:72:a9:d1:ff:04:26:90:0d:50:d4:b5:
                    a5:8d:13:9f:34:a2:24:4c:8c:54:bd:15:b1:3d:2b:
                    40:14:08:ad:ce:a0:d4:4f:24:85:c2:ff:bb:7d:bf:
                    5b:d4:4a:d7:c0:83:96:2e:4a:2e:9d:f0:17:4c:d2:
                    c8:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:4A:A2:16:53:61:F0:E7:34:83:A3:49:76:19:E6:F1:7C:83:16:2B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/cd9fea27-12be-45eb-a7dc-88585f7d4ccd/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/cd9fea27-12be-45eb-a7dc-88585f7d4ccd/e2e64338d19201e9f70ecbbb89effde10e9a0df7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.151.134.0/24
                IPv6:
                  2801:1b:9800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  272107

    Signature Algorithm: sha256WithRSAEncryption
         b5:5f:a0:0e:f3:f4:fc:2b:73:1a:26:c2:94:87:03:96:51:68:
         00:fb:cc:37:ae:3d:cc:1c:39:6b:66:0e:71:12:89:62:ed:7b:
         08:7d:9a:1b:93:9c:fd:ff:b8:1e:13:3b:5e:a7:f5:c6:98:20:
         0f:97:b6:00:2e:85:92:eb:31:53:5f:4e:5f:31:cf:c9:25:de:
         a0:df:f3:ec:7c:85:a0:18:53:c7:a8:f7:96:e4:29:f5:3f:03:
         8c:f1:36:74:0c:f1:f1:07:e8:c8:82:90:ea:38:ab:47:fa:a1:
         46:62:b6:3e:2f:93:27:0d:cb:05:b0:6f:e6:18:f9:a2:64:7a:
         cc:94:45:1c:27:a2:31:d5:d7:22:30:ad:f9:16:ed:18:87:9c:
         1f:f5:b3:e1:63:0b:0b:2e:68:97:96:6e:8e:13:8d:54:6f:d0:
         be:6f:07:50:1c:26:35:d5:b1:03:2f:2e:e5:0d:b1:e5:ca:a1:
         b4:fe:af:05:1d:29:53:2a:56:ee:c3:cf:d7:1c:2c:5d:c3:53:
         21:a3:e8:cf:f3:a3:df:08:41:81:63:69:72:ca:dd:82:a8:b3:
         8f:0b:be:04:bc:8c:bb:65:d3:8b:66:6a:ca:36:8e:8f:ae:ce:
         6d:6d:f7:38:64:d1:a8:ed:15:96:33:93:d0:72:16:a2:4a:14:
         8c:aa:ed:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----