Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/edba985abb9aa8c868630a6e72152bc9c99aa7cb.cer
File:                     edba985abb9aa8c868630a6e72152bc9c99aa7cb.cer (raw, json)
Hash identifier:          rHCnSysu50DL+J014L2VG1UHSUdfqrCCySW/KFtEY44=
Subject key identifier:   14:48:2B:9D:EB:CD:1B:5F:A9:CD:6D:31:4B:A8:30:DF:28:95:AA:25
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E48971
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/6919f5e5-8d38-46c6-9fae-0681b2f2f2d6/edba985abb9aa8c868630a6e72152bc9c99aa7cb.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/6919f5e5-8d38-46c6-9fae-0681b2f2f2d6/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 10 Apr 2023 14:29:55 +0000
Certificate not after:    Fri 06 Dec 2024 15:12:31 +0000
Subordinate resources:    AS: 265645
                          IP: 138.36.92.0/22
                          IP: 2803:86c0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14977393 (0xe48971)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 10 14:29:55 2023 GMT
            Not After : Dec  6 15:12:31 2024 GMT
        Subject: CN=edba985abb9aa8c868630a6e72152bc9c99aa7cb
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:07:34:5a:e3:43:06:62:0a:e8:f3:78:51:b8:
                    62:6c:98:5a:f8:50:e1:6c:53:6d:6c:4c:ee:44:05:
                    30:a2:fd:4a:1e:24:47:b5:d2:0a:ad:3c:7e:47:bf:
                    62:99:ab:f6:ba:c0:1c:47:ba:c7:c8:2a:a2:eb:65:
                    a4:73:08:68:41:e6:53:b6:19:7e:3e:90:db:26:ef:
                    23:b9:4e:6e:9b:0e:74:95:73:11:31:83:16:8a:fa:
                    b1:17:ea:24:2e:14:b5:6b:39:df:2f:bc:26:ee:15:
                    66:95:5f:5f:17:0f:08:8a:00:67:80:c9:1e:f8:8d:
                    55:9e:10:bf:3a:3b:9b:8f:b0:a4:60:2b:b2:a8:d8:
                    7b:c2:66:73:cf:69:ec:76:bf:4a:0b:4b:07:a8:9c:
                    a3:2b:51:7a:ba:6a:5f:c4:9a:66:77:b2:a0:62:b0:
                    25:6c:ef:1a:f2:b6:86:71:2b:78:07:75:78:b2:9c:
                    df:8a:43:f1:f5:1e:46:0a:f2:14:66:0c:9e:3c:d3:
                    b4:81:50:f5:cd:7d:ae:47:78:f9:71:52:fb:0e:6e:
                    52:d0:34:60:57:79:31:bc:42:da:16:cc:c6:b7:58:
                    4f:61:f8:10:5a:08:e3:76:78:5f:31:b1:e1:9d:9a:
                    dc:d2:e4:fd:85:da:35:cd:67:09:c3:0f:3f:92:06:
                    c9:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:48:2B:9D:EB:CD:1B:5F:A9:CD:6D:31:4B:A8:30:DF:28:95:AA:25
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/6919f5e5-8d38-46c6-9fae-0681b2f2f2d6/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/6919f5e5-8d38-46c6-9fae-0681b2f2f2d6/edba985abb9aa8c868630a6e72152bc9c99aa7cb.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.36.92.0/22
                IPv6:
                  2803:86c0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265645

    Signature Algorithm: sha256WithRSAEncryption
         9d:36:e4:b7:82:cf:af:02:78:74:9c:6b:e2:a1:2c:7d:b7:ee:
         de:75:83:7e:58:0b:5f:7f:5c:0e:7a:cb:c4:36:64:ac:e5:b6:
         9b:5d:1c:e5:bd:16:d6:97:0b:22:2c:68:1a:fe:5c:1a:ec:8a:
         10:1f:40:9a:05:be:a1:bd:da:19:51:5e:7f:65:55:f1:84:a6:
         1e:08:b5:23:e8:f2:cd:6d:43:8a:74:1b:74:5b:95:0f:74:71:
         ec:c0:c5:28:ce:1b:c8:fa:04:bc:fd:b7:7d:0a:13:33:95:58:
         f7:92:84:9c:62:b1:9a:2a:39:22:65:54:40:cb:6b:1c:19:67:
         41:7a:6c:e3:ef:8d:26:0a:6a:dd:58:a4:a8:de:00:a1:6f:72:
         a2:d5:33:ca:2c:ff:89:5a:1d:91:77:51:a7:54:a7:0a:0f:92:
         a5:9f:92:74:31:fd:4a:b8:db:32:37:58:25:60:b5:04:98:dd:
         99:18:fa:6c:f7:c4:80:11:24:c4:8d:31:7c:d7:c5:c5:fb:ed:
         b8:17:d2:a0:22:ed:56:1f:af:a8:0a:a1:e4:ca:81:1d:fd:7f:
         d1:3c:c0:2f:f7:4a:fe:63:ca:fe:12:41:70:1e:50:6f:44:2b:
         fb:23:6f:ab:18:67:a1:df:65:b9:9c:cd:dd:09:bb:48:1f:9a:
         17:54:e6:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----