Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e39cc57909779e839557713f38f36b0f9740a082.cer
File:                     e39cc57909779e839557713f38f36b0f9740a082.cer (raw, json)
Hash identifier:          CGgnrD5/9QjFqu4vgE7q9jqCLBQ+uwHkiTrwDMECN+4=
Subject key identifier:   52:32:75:63:95:67:73:86:ED:86:DE:81:C7:F0:78:EC:52:42:3F:67
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01059786
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/5e521979-4a1c-42eb-b68b-249197ea89d8/e39cc57909779e839557713f38f36b0f9740a082.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/5e521979-4a1c-42eb-b68b-249197ea89d8/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 Jan 2024 15:56:27 +0000
Certificate not after:    Thu 12 Dec 2024 20:32:34 +0000
Subordinate resources:    AS: 263215
                          IP: 191.98.196.0/22
                          IP: 2803:7280::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17143686 (0x1059786)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan  2 15:56:27 2024 GMT
            Not After : Dec 12 20:32:34 2024 GMT
        Subject: CN=e39cc57909779e839557713f38f36b0f9740a082
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:18:bf:31:e6:35:bc:60:d3:69:c4:41:91:2e:
                    43:46:49:7b:94:ca:c1:db:a2:22:75:12:a6:c9:69:
                    13:ce:52:bd:21:e6:37:f0:02:b3:85:c9:5f:64:53:
                    be:06:2a:ef:19:45:da:9d:ee:ea:e3:b3:1d:69:2c:
                    b1:af:c3:86:8a:2e:ef:7c:ab:e5:11:8c:52:29:c7:
                    84:80:b8:99:81:c4:ac:7d:e2:bc:1c:b3:9a:47:c6:
                    e1:4c:ee:71:fe:b3:03:9d:01:d5:96:0d:33:e3:12:
                    0f:c4:ff:70:20:a7:04:f4:e3:53:15:11:a6:cd:03:
                    ea:2a:ed:2d:c4:02:2f:68:18:5e:53:d1:95:54:99:
                    b4:2c:9d:02:aa:e1:08:e4:0b:bf:8f:cc:b2:36:76:
                    bb:b8:62:4f:d1:ca:6a:77:31:4d:46:df:ca:d1:62:
                    3d:2c:1d:c1:d1:1c:94:c6:c3:42:56:19:a6:10:e5:
                    f3:dc:38:61:5d:bf:7e:94:d2:b6:e9:49:73:c8:15:
                    3f:74:71:40:bd:5f:67:55:89:55:8e:46:c8:67:34:
                    36:3b:a7:1b:07:6e:50:ff:f4:a1:b3:55:61:7f:ec:
                    49:c9:43:13:da:cc:fd:13:01:00:b1:d2:93:84:fa:
                    0b:ce:36:a7:68:67:22:46:7e:b3:be:29:e8:43:9c:
                    d4:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:32:75:63:95:67:73:86:ED:86:DE:81:C7:F0:78:EC:52:42:3F:67
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/5e521979-4a1c-42eb-b68b-249197ea89d8/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/5e521979-4a1c-42eb-b68b-249197ea89d8/e39cc57909779e839557713f38f36b0f9740a082.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  191.98.196.0/22
                IPv6:
                  2803:7280::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  263215

    Signature Algorithm: sha256WithRSAEncryption
         9c:68:ec:91:06:e0:2b:4a:7e:0c:27:33:e4:78:18:5f:da:01:
         6f:01:64:39:7f:06:df:50:5d:15:47:4d:b7:f3:5d:23:c3:b8:
         c7:a6:77:2d:d6:0b:ba:15:1b:85:0b:40:1d:b6:2c:63:c0:34:
         67:cd:2a:fe:ba:32:14:3f:fe:d3:56:95:c1:45:c7:98:48:b4:
         68:3c:d9:12:68:38:8d:35:d3:88:a1:29:10:92:16:0e:89:e3:
         9a:a0:2f:aa:43:ae:9b:33:80:e1:de:57:27:8e:8a:f7:8b:be:
         46:32:8f:08:20:f5:bc:1b:88:60:ca:a2:17:76:57:bc:73:5f:
         7c:fe:c8:f7:d5:29:ff:42:4a:e9:51:4c:84:d9:12:2f:c9:f5:
         d5:7c:3d:74:88:db:51:3c:0f:98:21:dd:28:90:d0:02:00:92:
         38:bc:25:be:85:8a:bd:41:9e:4e:d4:1a:5a:d8:09:69:7e:4d:
         78:37:57:cb:d4:d9:cf:0f:6f:f1:4d:7a:9a:a4:57:34:ca:40:
         4a:4c:a1:b7:8b:de:f4:bc:b5:78:f6:0a:b2:d3:aa:15:72:4b:
         5f:55:0d:07:de:03:26:b0:3a:9e:68:b5:0a:ce:8a:38:20:4e:
         ba:5a:0e:e8:4b:ff:7d:23:2a:3b:36:92:c8:4e:8d:fb:04:b4:
         83:ab:58:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----