Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fc0b4688b00e67535f6f902aaf643eeb1fa8e4fc.cer
File:                     fc0b4688b00e67535f6f902aaf643eeb1fa8e4fc.cer (raw, json)
Hash identifier:          wqPWdIaz7C9MPar0GvLBXCldh5kMX3ilkiq0Xle3CXY=
Subject key identifier:   61:60:49:7C:D8:FD:F2:B3:80:0F:5B:10:18:BF:09:57:1D:97:E1:0F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F39C3F
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/8b2975f4-5afa-4f62-83a6-48b8dcbbde1d/fc0b4688b00e67535f6f902aaf643eeb1fa8e4fc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/8b2975f4-5afa-4f62-83a6-48b8dcbbde1d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 01 Aug 2023 13:35:48 +0000
Certificate not after:    Mon 23 Sep 2024 19:53:01 +0000
Subordinate resources:    AS: 265883
                          IP: 45.227.164.0/22
                          IP: 200.59.220.0/22
                          IP: 2803:fe20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15965247 (0xf39c3f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug  1 13:35:48 2023 GMT
            Not After : Sep 23 19:53:01 2024 GMT
        Subject: CN=fc0b4688b00e67535f6f902aaf643eeb1fa8e4fc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:81:05:4b:20:da:c0:86:63:f8:ef:32:aa:6c:
                    c4:25:77:85:96:1d:91:3e:57:c1:0b:a9:57:17:17:
                    11:9f:a2:58:dc:ae:b6:2d:0d:31:3a:4a:01:e8:b3:
                    93:72:1b:79:b4:dc:18:c9:66:8c:a2:81:57:1a:9b:
                    bb:52:41:38:74:8d:9f:aa:bb:7c:a7:85:69:bc:13:
                    47:1d:a6:24:54:9d:df:d6:f4:69:89:dc:77:5b:5b:
                    b9:00:cf:96:ce:0f:62:46:87:01:82:21:b8:96:16:
                    55:9d:cd:2b:4d:d9:f3:aa:a1:49:a3:7a:7d:20:76:
                    97:b2:13:5a:7b:c9:3e:64:6e:b2:2f:85:a8:ff:ea:
                    1f:4f:ff:cd:f6:86:07:07:f5:ca:9b:75:1f:25:8a:
                    ff:e5:7a:78:4b:af:c5:77:3b:97:7d:73:dc:d9:a6:
                    4f:0d:a7:54:e1:83:77:e8:05:43:bb:0c:2f:49:b4:
                    20:65:4c:71:4d:d0:c6:34:93:f8:f9:fb:0c:80:22:
                    11:1b:78:4b:d7:51:cf:04:dd:36:cb:8f:19:36:80:
                    54:a0:2a:a4:9d:6c:41:46:6c:c5:69:82:9f:ba:3a:
                    51:83:f4:07:87:2d:04:35:23:00:89:6f:7a:00:1e:
                    9b:20:5c:76:9d:7a:ca:32:2d:81:57:47:f9:e2:7b:
                    cb:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:60:49:7C:D8:FD:F2:B3:80:0F:5B:10:18:BF:09:57:1D:97:E1:0F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/8b2975f4-5afa-4f62-83a6-48b8dcbbde1d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/8b2975f4-5afa-4f62-83a6-48b8dcbbde1d/fc0b4688b00e67535f6f902aaf643eeb1fa8e4fc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.164.0/22
                  200.59.220.0/22
                IPv6:
                  2803:fe20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  265883

    Signature Algorithm: sha256WithRSAEncryption
         5a:46:09:55:70:38:fa:39:18:e1:0c:07:5c:00:65:61:7a:2d:
         11:a7:5f:aa:1b:5b:8d:58:83:08:c6:47:19:51:96:8b:20:56:
         93:5f:8d:80:2a:6b:bc:b3:d1:a4:09:8c:20:72:8a:ab:49:ee:
         bb:e9:24:af:fc:be:c1:4a:47:dd:e2:65:07:82:ad:88:f5:28:
         5c:d1:78:d0:25:a6:92:c2:99:c7:14:3c:fe:b6:b4:d0:e5:2d:
         a4:ed:a6:c5:6f:97:f7:e4:54:db:6d:8e:6e:ae:3b:a9:64:6e:
         fe:44:76:35:53:7d:54:bc:58:cb:94:d1:cd:50:b2:90:a8:2d:
         b8:8b:ac:f9:4c:2a:ae:85:38:42:6d:32:b4:a2:81:e9:ab:b8:
         bd:94:e7:a2:7d:f3:62:b6:94:99:55:9d:c0:cb:05:8a:6d:27:
         3d:54:8a:d0:a3:bf:dc:94:92:cc:ad:f8:b5:ca:69:0a:44:c6:
         50:fe:6b:a3:60:92:64:b4:68:b4:ca:4a:a0:bb:60:cc:67:88:
         c8:90:8a:b5:23:19:85:9f:b4:6f:3d:4a:f7:a6:8c:87:1c:df:
         4e:41:95:7c:95:84:57:42:2b:04:3a:ae:f6:97:98:3e:8b:43:
         44:a9:eb:ae:45:c6:ff:7c:f2:c2:d5:71:a1:e7:af:e8:39:37:
         4c:84:b4:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----