Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer
File:                     f74a648ac87e2ce7fafa327bd89fc95e35a06596.cer (raw, json)
Hash identifier:          Gx2d3y9xds0rbuYSqTENXRBP8URbbMqiW7wGWBIHTmE=
Subject key identifier:   B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0108DE8B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/f74a648ac87e2ce7fafa327bd89fc95e35a06596.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 30 Jan 2024 20:14:09 +0000
Certificate not after:    Mon 19 May 2025 21:26:45 +0000
Subordinate resources:    AS: 265551
                          IP: 45.238.188.0/22
                          IP: 2806:302::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17358475 (0x108de8b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jan 30 20:14:09 2024 GMT
            Not After : May 19 21:26:45 2025 GMT
        Subject: CN=f74a648ac87e2ce7fafa327bd89fc95e35a06596
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0d:31:eb:09:e2:ce:5c:aa:1c:6c:07:77:4e:
                    5b:e1:cb:d4:a7:87:ff:0c:f1:a8:ba:cb:a9:d5:40:
                    d6:c7:b6:be:69:13:a4:ac:74:c7:c8:f1:de:6a:dd:
                    33:e8:ff:7c:47:bc:9b:b7:07:3b:e8:f0:87:c0:e1:
                    87:75:ad:7d:3a:85:13:83:28:f5:b5:dc:df:1c:b6:
                    28:58:84:d4:6a:a2:86:16:6f:39:d3:e8:82:29:bc:
                    12:b8:6f:b6:59:48:5b:f2:b4:4f:f0:f3:b9:f8:34:
                    74:01:ad:bd:af:8f:83:1b:3b:b4:ab:30:2f:98:3d:
                    e3:85:05:3d:15:a6:20:49:e7:7b:18:a4:8e:07:bc:
                    2c:75:c3:5f:42:45:71:b7:07:89:17:4a:46:b4:33:
                    3f:17:e7:7f:14:cd:98:95:d0:21:82:f5:41:62:2c:
                    99:05:c5:6f:de:c2:3e:b7:a2:81:01:0d:5e:d0:c8:
                    43:52:2e:be:e5:dd:95:50:1a:23:83:d5:02:7c:89:
                    23:3f:be:db:a7:12:5b:f4:bc:9c:c6:be:88:ac:43:
                    18:d2:b3:e5:94:d7:d4:5f:a0:99:36:a7:b1:3c:f3:
                    3f:4e:90:b2:fd:7b:c5:40:8f:83:ec:d2:f4:ae:82:
                    9e:cf:9d:14:a0:e7:87:b4:01:b8:c7:54:d6:ff:d6:
                    bd:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:89:EC:A7:82:B8:5D:44:9A:D2:3B:22:DE:74:D7:EA:76:33:23:74
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/acd94e59-d252-4fd6-81ab-d2db3213888a/f74a648ac87e2ce7fafa327bd89fc95e35a06596.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.188.0/22
                IPv6:
                  2806:302::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265551

    Signature Algorithm: sha256WithRSAEncryption
         48:67:6d:f7:f1:92:fa:fd:ea:89:90:13:83:58:af:db:62:6e:
         55:35:4e:9c:80:bb:44:03:7b:36:aa:30:08:dc:2e:28:a9:f4:
         da:44:13:22:d3:db:37:d2:0d:0c:d2:65:06:48:f3:cb:8c:85:
         8e:46:8f:57:0f:33:36:7a:3f:5f:75:31:26:f6:11:79:6d:e1:
         7b:08:b5:07:9c:ca:ae:c3:e0:45:7a:23:8e:55:82:23:75:fb:
         4e:22:0d:36:6c:4d:b0:b3:d1:d5:07:95:fd:da:a9:22:d7:75:
         bc:e6:9b:36:65:ac:fd:db:7c:88:63:81:e7:35:c9:ab:67:e4:
         a9:81:8d:b1:2d:5f:8d:29:0a:f9:3a:71:0d:27:83:7d:08:26:
         11:d9:d0:e0:29:72:33:a3:a0:7c:de:81:2f:84:6c:06:ec:14:
         7d:7e:68:f0:b2:29:96:a8:71:bf:15:01:e1:da:a9:8e:c3:7e:
         e4:ae:84:e1:84:a8:ee:e7:9f:33:85:c5:31:67:19:15:fc:d7:
         22:74:ed:ea:8f:ae:5b:dc:bb:6d:d1:f3:70:f8:4f:c2:55:18:
         f8:4d:5b:98:85:69:70:84:a9:58:5d:24:27:d4:98:73:34:1b:
         05:e5:76:be:25:df:7a:3a:a4:ec:e0:52:59:05:99:79:9f:01:
         dc:db:90:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----