Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fe33d419231aedacd744b7739b47250bd272dee4.cer
File:                     fe33d419231aedacd744b7739b47250bd272dee4.cer (raw, json)
Hash identifier:          1OrTApClDoTikhoEQlrSjZi6yb7vFJ+217FbO+Ohhfc=
Subject key identifier:   F1:B1:80:65:83:6B:38:66:76:8A:56:F0:66:4F:F8:23:64:5C:9D:E9
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01006F1A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/bc3b875e-e2fd-4354-b9fa-68346ccc2613/fe33d419231aedacd744b7739b47250bd272dee4.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/bc3b875e-e2fd-4354-b9fa-68346ccc2613/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 07 Nov 2023 19:00:58 +0000
Certificate not after:    Wed 18 Sep 2024 15:00:00 +0000
Subordinate resources:    AS: 11802
                          IP: 200.19.192.0/19
                          IP: 200.192.64.0/20
                          IP: 2801:80:50::/48
                          IP: 2804:1f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16805658 (0x1006f1a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Nov  7 19:00:58 2023 GMT
            Not After : Sep 18 15:00:00 2024 GMT
        Subject: CN=fe33d419231aedacd744b7739b47250bd272dee4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:c2:a7:7e:41:95:d7:1d:b1:ac:f3:58:88:a7:
                    13:83:1b:9c:b0:c4:a3:9d:cf:df:0e:6a:c4:b7:11:
                    aa:4c:65:43:ab:eb:85:16:94:6f:4e:58:01:d9:d9:
                    78:d4:cd:58:c5:b5:eb:c8:6c:4d:ad:52:6d:6b:9e:
                    80:95:47:fc:9c:02:95:2d:51:4d:ae:d5:9c:8c:42:
                    cc:e9:a1:3c:51:1e:f0:6c:84:4e:6e:06:95:53:87:
                    5e:c2:94:33:1b:33:72:dd:a1:34:f3:9b:81:1e:b0:
                    b4:f3:22:b9:5a:90:75:8c:5f:05:8d:0f:78:f1:16:
                    d1:f9:81:ec:81:25:e7:00:41:e6:84:4e:48:41:69:
                    dc:6e:5f:df:59:2f:c6:45:e8:d4:ea:a1:f9:82:bc:
                    9c:c3:97:70:b2:e0:ff:d9:1c:f8:6d:d7:39:9b:52:
                    ba:15:a3:42:8e:87:8e:1d:4d:c1:04:92:2c:b5:3d:
                    b0:98:ae:40:53:36:08:76:92:c8:e2:93:11:31:ae:
                    f3:ff:68:ff:7a:16:9e:12:d9:0f:2d:0a:d9:56:35:
                    54:55:05:42:55:0e:36:ec:c2:8a:82:b0:dd:bf:93:
                    64:e9:83:9b:38:c5:57:a8:1c:bf:a8:66:d7:d2:fb:
                    f0:37:e5:a6:40:62:df:43:37:e1:fe:a6:b0:cb:1a:
                    3a:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:B1:80:65:83:6B:38:66:76:8A:56:F0:66:4F:F8:23:64:5C:9D:E9
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/bc3b875e-e2fd-4354-b9fa-68346ccc2613/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/bc3b875e-e2fd-4354-b9fa-68346ccc2613/fe33d419231aedacd744b7739b47250bd272dee4.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.19.192.0/19
                  200.192.64.0/20
                IPv6:
                  2801:80:50::/48
                  2804:1f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  11802

    Signature Algorithm: sha256WithRSAEncryption
         12:24:d2:82:e6:0b:15:98:ab:64:84:0d:f8:54:98:c4:2d:4b:
         e7:c9:71:37:28:af:7a:a2:e1:9d:e9:b8:86:32:13:de:fe:56:
         46:c1:bb:d0:39:bf:5c:b5:33:d1:ad:74:3d:56:87:6b:24:04:
         02:97:dc:8c:72:71:6f:58:11:ba:2f:83:29:55:3c:1b:78:c2:
         c5:5b:5e:18:e8:0f:f0:a4:ba:7d:17:c7:26:06:ad:42:ef:6c:
         3d:f4:5d:3e:30:36:d8:36:c2:31:51:2f:ab:d5:b8:54:d0:f5:
         8b:23:96:6f:9f:4c:64:3d:ae:ff:53:c1:4c:93:7c:b3:09:4d:
         3f:13:58:d1:2f:c8:da:6d:81:6e:d4:10:9f:03:14:43:c8:61:
         14:83:77:56:a3:52:bd:2f:60:de:4a:e1:fe:6e:8f:69:97:e6:
         bb:6f:10:81:48:47:39:6b:e4:f0:0f:45:2b:3a:a7:1a:2d:b9:
         72:d8:73:8b:12:07:b2:b8:e8:7f:ac:85:6f:87:89:91:bd:a1:
         8e:39:3c:4e:3a:e2:23:36:e0:14:61:0e:22:9f:f7:9c:2b:ad:
         95:b2:c8:70:3e:e0:f6:9b:f0:3a:90:7c:65:3d:64:57:e1:c5:
         01:5d:e6:3a:0e:bd:d2:f1:1d:80:b9:1b:e4:93:ca:80:5c:bc:
         dc:5a:c9:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----