Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/e75ecf0348bbb60824979a85d8e4f231a1dfc34a.cer
File:                     e75ecf0348bbb60824979a85d8e4f231a1dfc34a.cer (raw, json)
Hash identifier:          O43hbQcYQL2J8/djrNWB9gHxFuQ2OfLiwDYtCoXvN6I=
Subject key identifier:   FA:9D:8B:5A:B3:7B:EE:E9:D4:68:54:0E:0F:FA:3A:F8:48:E7:76:11
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DA1222
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/76fbb3dc-e068-4d6f-9739-2c605d6a7bd9/e75ecf0348bbb60824979a85d8e4f231a1dfc34a.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/76fbb3dc-e068-4d6f-9739-2c605d6a7bd9/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Dec 2022 20:51:33 +0000
Certificate not after:    Sun 22 Sep 2024 16:06:35 +0000
Subordinate resources:    AS: 269847
                          IP: 45.187.36.0/22
                          IP: 2803:c0e0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14291490 (0xda1222)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 20 20:51:33 2022 GMT
            Not After : Sep 22 16:06:35 2024 GMT
        Subject: CN=e75ecf0348bbb60824979a85d8e4f231a1dfc34a
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:92:d1:a6:15:3e:c5:34:db:c1:3a:d0:9a:2b:31:
                    e4:39:fd:76:17:20:6d:a2:32:ee:42:b8:3b:75:57:
                    6a:07:ee:43:8b:82:3a:57:a5:51:da:a5:50:44:8e:
                    5b:f5:7e:dd:9c:33:8d:ee:1d:3c:70:18:28:03:de:
                    8c:49:0f:67:b9:25:29:29:49:30:92:dd:92:1d:ef:
                    56:4d:b1:27:ae:fc:5c:6b:1e:1b:8c:3f:f9:73:29:
                    2d:bc:55:ce:6c:69:f7:f3:d6:50:f7:d6:9a:3a:92:
                    44:65:d2:d7:9b:f8:5a:68:22:05:87:07:57:93:56:
                    95:eb:94:b5:9c:34:b3:0f:3a:13:b4:21:ce:7d:d7:
                    be:b2:6a:50:2f:dc:4c:8d:f0:e5:e3:5b:94:ba:e7:
                    ef:ac:7f:24:c8:32:9a:bb:87:ea:e7:89:1e:2c:f6:
                    f5:33:b2:b7:c5:f4:12:9d:ca:66:d7:10:d0:1c:70:
                    ed:82:fe:74:a8:98:23:31:a9:ae:2b:87:b1:b3:17:
                    b0:f2:63:02:23:d5:5e:bd:33:43:14:44:89:38:52:
                    b4:ef:fe:59:a3:52:f0:ea:39:24:96:c0:76:06:8a:
                    cb:af:a3:69:fe:ed:74:66:55:58:7e:a7:e6:e7:67:
                    3c:0f:84:55:54:08:13:ea:22:28:9a:0f:39:cc:dd:
                    90:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:9D:8B:5A:B3:7B:EE:E9:D4:68:54:0E:0F:FA:3A:F8:48:E7:76:11
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/76fbb3dc-e068-4d6f-9739-2c605d6a7bd9/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/76fbb3dc-e068-4d6f-9739-2c605d6a7bd9/e75ecf0348bbb60824979a85d8e4f231a1dfc34a.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.187.36.0/22
                IPv6:
                  2803:c0e0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269847

    Signature Algorithm: sha256WithRSAEncryption
         30:36:8d:c8:b1:af:00:cf:fb:e6:db:46:00:f8:3b:a5:7a:cc:
         3c:5a:5b:74:9a:07:3c:83:bd:3a:8b:57:46:07:84:30:48:73:
         c1:10:63:e8:84:e0:fe:40:86:7d:12:ed:26:6a:58:0e:21:a6:
         ed:19:1c:2a:1d:48:19:58:6a:24:71:0c:dc:63:0f:78:64:0c:
         99:e1:ed:96:06:b2:1e:26:bc:55:fd:3a:52:88:47:d8:f5:06:
         04:60:6c:6f:e5:de:fa:36:86:b7:dd:9c:00:10:d4:9b:87:67:
         de:49:4a:08:b8:49:78:80:54:d9:07:d4:4f:07:4d:90:9d:26:
         56:3e:7a:b4:9c:84:ed:d8:9f:72:94:31:7f:c4:92:8f:09:e9:
         70:59:de:35:08:f7:1c:03:26:37:a1:c1:94:52:bc:e0:b1:1a:
         94:43:ef:17:79:25:ee:86:c4:72:47:62:84:9a:5b:ec:91:87:
         8c:0f:2e:4e:65:ff:9c:c0:fa:95:9b:36:e2:01:67:ae:8a:b7:
         55:65:56:d7:bb:00:63:85:14:10:81:c8:e1:a8:ec:c5:31:75:
         00:78:d5:71:41:51:ff:f3:7f:89:23:81:fd:b5:63:1c:f0:c2:
         dc:8e:a2:d3:85:0f:e9:09:0c:1a:5d:b4:b4:07:39:93:1f:73:
         a2:b3:c8:39
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----