Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1146b8e0a358dfa5245cf8d7e221554209deae6.cer
File:                     f1146b8e0a358dfa5245cf8d7e221554209deae6.cer (raw, json)
Hash identifier:          O8OhQ4di5OTu9t9Zg0Dw7WQlFW+Lxo0MP5eij4oOfw4=
Subject key identifier:   CB:A4:E3:8A:25:01:AB:8D:E1:58:6F:E8:30:65:7A:53:C4:12:DC:30
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010D3FD7
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7e75257d-4f39-4f73-89c1-b15cb232698c/f1146b8e0a358dfa5245cf8d7e221554209deae6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7e75257d-4f39-4f73-89c1-b15cb232698c/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 08 Mar 2024 13:36:15 +0000
Certificate not after:    Fri 11 Apr 2025 11:07:17 +0000
Subordinate resources:    AS: 270139
                          IP: 189.85.36.0/22
                          IP: 2806:3bb::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17645527 (0x10d3fd7)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Mar  8 13:36:15 2024 GMT
            Not After : Apr 11 11:07:17 2025 GMT
        Subject: CN=f1146b8e0a358dfa5245cf8d7e221554209deae6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:85:52:0e:21:0e:05:5f:00:c5:dd:0e:67:ca:3e:
                    b8:43:e0:4d:90:56:b3:12:a3:eb:ae:b2:00:29:11:
                    5a:2a:f1:01:42:1a:ff:df:67:0a:0f:e1:43:28:de:
                    83:32:56:d4:04:2a:62:1d:04:17:da:2d:54:b3:17:
                    ce:fd:cd:da:b6:2f:2d:a5:ba:b7:ca:a9:2d:48:70:
                    72:33:bd:05:10:9a:19:4e:99:41:3e:65:94:35:7d:
                    f1:58:2c:32:c3:9c:8e:27:0f:22:e9:a2:75:58:3d:
                    b5:39:a7:c1:ba:c0:21:54:05:e5:5b:0f:9e:7b:16:
                    ca:72:df:c9:90:e4:e0:a2:b3:1b:f3:34:c5:a0:b9:
                    84:4f:ad:d2:87:bd:94:bb:4a:25:ad:54:ad:be:ef:
                    ff:a1:4c:16:57:df:4a:60:60:58:91:44:87:ce:70:
                    31:ef:c5:f7:16:bd:99:73:20:d4:0d:b9:45:76:ee:
                    55:6b:54:a9:f6:b2:8f:f6:e0:54:07:bd:86:44:4b:
                    a1:78:76:57:f0:99:37:70:de:bc:28:57:28:ac:31:
                    1f:be:16:40:33:dc:e4:c7:be:25:99:7c:64:d1:14:
                    7e:93:1d:7b:5a:30:d3:61:ea:0c:42:8d:73:93:f8:
                    d1:d4:ad:b2:89:d8:5c:79:1f:fe:29:b9:ab:ed:86:
                    99:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:A4:E3:8A:25:01:AB:8D:E1:58:6F:E8:30:65:7A:53:C4:12:DC:30
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7e75257d-4f39-4f73-89c1-b15cb232698c/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7e75257d-4f39-4f73-89c1-b15cb232698c/f1146b8e0a358dfa5245cf8d7e221554209deae6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  189.85.36.0/22
                IPv6:
                  2806:3bb::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270139

    Signature Algorithm: sha256WithRSAEncryption
         02:8d:ab:2f:68:10:7a:66:ce:cf:ce:1f:9e:e8:bb:ab:69:30:
         b2:93:3d:5c:ad:78:75:e2:34:ba:7d:eb:6d:f3:f6:74:72:14:
         c5:54:fd:ee:97:c7:e2:45:9c:92:40:e7:04:6a:98:1f:90:d0:
         73:d5:8d:fc:30:ba:84:3a:3a:d6:4a:6f:03:2b:d3:98:8c:82:
         03:95:26:59:57:99:f0:36:d4:12:1c:4d:cc:c7:1a:63:d9:5e:
         6d:91:b9:c1:26:a0:bf:7b:26:82:a0:7b:ea:17:cf:09:fa:e8:
         95:ad:11:1c:d4:bc:53:2d:41:30:28:2a:b0:5f:1c:03:61:1b:
         c9:99:23:33:20:34:11:f1:99:b4:4d:76:e7:c1:cd:27:cc:f5:
         27:7d:07:62:b9:a0:f7:0c:d1:9f:4b:2c:f2:28:9c:a9:b2:8b:
         cb:28:6e:c7:76:3e:c8:e9:8b:e8:f8:b2:5d:9e:13:bf:85:4f:
         b8:42:46:cb:e1:bb:2d:0a:b6:bf:c8:2d:85:fb:5e:ca:59:c9:
         1d:1c:46:40:63:1a:00:ce:56:1e:55:8e:cc:6b:fd:85:c2:70:
         1b:36:65:94:72:42:82:05:6f:20:09:55:5d:62:c6:ac:ff:a7:
         fe:7c:48:16:59:a8:bf:fd:86:4b:28:ad:ee:fb:0e:97:28:35:
         ec:a6:e8:79
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----