Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f9f2f8ceb6f86b00b67f7cdfc354229b28957266.cer
File:                     f9f2f8ceb6f86b00b67f7cdfc354229b28957266.cer (raw, json)
Hash identifier:          K964eR1U54GBXtKq4RhG3GEUY9mNykBE1MR3jeHTRNE=
Subject key identifier:   20:1F:60:94:36:9F:F0:C2:16:CC:55:7C:12:32:56:1A:CA:FC:31:29
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E8F33D
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/218d5cc1-28fa-42b0-b4d9-b0e337214686/f9f2f8ceb6f86b00b67f7cdfc354229b28957266.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/218d5cc1-28fa-42b0-b4d9-b0e337214686/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 08 May 2023 16:02:53 +0000
Certificate not after:    Fri 31 Jan 2025 20:03:57 +0000
Subordinate resources:    AS: 271897
                          IP: 179.51.206.0/24
                          IP: 2801:16:e800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15266621 (0xe8f33d)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  8 16:02:53 2023 GMT
            Not After : Jan 31 20:03:57 2025 GMT
        Subject: CN=f9f2f8ceb6f86b00b67f7cdfc354229b28957266
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:2d:a7:aa:b0:80:9b:7e:5c:d0:bd:a1:2c:a8:
                    a0:75:0a:ad:6a:4d:d0:2a:7f:1b:c4:a8:af:f6:1d:
                    5d:fa:c3:b8:7d:54:c6:e2:f2:b4:25:24:73:39:70:
                    48:d1:56:80:58:3d:34:9d:2f:b7:42:f1:db:dd:39:
                    2a:6c:46:22:56:7e:6e:5c:a2:ce:96:5a:56:55:f8:
                    36:2c:b7:07:87:f4:f3:04:05:af:14:d7:f8:53:af:
                    55:b9:04:17:c2:b9:09:ff:f4:df:f4:82:3f:80:89:
                    28:4a:28:54:eb:24:ef:19:1a:7a:4c:c0:1b:fc:78:
                    b6:70:3f:32:b2:08:e7:82:e0:63:5c:68:2b:04:ad:
                    50:45:47:a3:9e:ee:36:f8:b2:d8:13:20:cb:29:49:
                    7d:9e:38:d7:69:c6:b1:43:41:00:0f:1f:48:43:4f:
                    75:4f:76:87:11:f3:50:6e:5f:0a:6a:26:d3:63:32:
                    05:92:64:39:5d:f7:63:20:40:01:39:ee:33:8c:8f:
                    46:2e:62:81:7d:0b:5b:49:68:55:d9:f2:be:af:9f:
                    e1:3b:8b:a6:99:4a:43:f2:7d:9b:21:95:e7:d9:3c:
                    91:1b:1c:fc:b4:9e:c6:35:c3:f6:89:c6:13:67:1a:
                    f5:f5:36:a7:e4:c9:73:6b:8d:39:7e:1f:dc:6f:04:
                    6c:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:1F:60:94:36:9F:F0:C2:16:CC:55:7C:12:32:56:1A:CA:FC:31:29
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/218d5cc1-28fa-42b0-b4d9-b0e337214686/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/218d5cc1-28fa-42b0-b4d9-b0e337214686/f9f2f8ceb6f86b00b67f7cdfc354229b28957266.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  179.51.206.0/24
                IPv6:
                  2801:16:e800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  271897

    Signature Algorithm: sha256WithRSAEncryption
         ab:df:2c:1b:30:24:f3:ec:61:2f:5b:98:40:5f:f0:81:06:8a:
         b0:9c:62:8e:fe:49:19:a4:32:26:cf:18:68:b1:10:b4:15:70:
         6a:c5:e6:1f:97:c4:00:85:c1:5e:f3:75:85:e6:a2:00:c3:04:
         bd:53:f1:c3:57:b5:52:34:5f:3b:fa:67:58:1f:a0:be:e4:79:
         41:65:62:bf:53:4a:17:0b:46:c4:0a:13:16:fa:20:9d:88:12:
         b5:97:c7:10:14:fd:c8:62:e4:22:67:1b:9d:f5:fe:89:e2:fa:
         8c:70:f7:57:90:66:ae:ad:5f:b6:1c:e4:f2:19:3d:66:ef:a6:
         96:0d:ab:d7:c4:1b:49:48:f8:68:a8:a2:69:13:75:a7:95:0b:
         bb:cd:80:3e:73:4b:44:51:b7:1a:cd:06:2e:88:ce:30:b9:fd:
         62:2c:0a:57:7b:20:5b:a0:30:2f:92:86:c6:58:e4:7f:d1:1e:
         3c:04:86:08:0b:a5:2f:b7:b5:05:d6:75:73:76:24:be:15:f3:
         0d:98:81:a9:cb:5b:3d:14:20:6d:e5:0d:35:e3:bc:02:ce:7d:
         f7:21:2e:a0:b0:d5:eb:6e:2c:3d:58:9a:b3:2c:4e:61:93:74:
         b9:d2:2b:4a:a0:7a:73:49:39:f9:53:84:4a:1e:64:df:15:87:
         32:d8:6f:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----