Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff4550d3d82c559a449fffffd85b3bd1c0bb4847.cer
File:                     ff4550d3d82c559a449fffffd85b3bd1c0bb4847.cer (raw, json)
Hash identifier:          +IDJZGaCxHCCnnMe3ddcU4MDc8liDAP5qnv74SBCw/Q=
Subject key identifier:   3E:E4:69:78:50:49:32:81:26:81:89:20:72:49:28:5E:9A:0A:5A:71
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E5F7E2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/debcc3fe-9718-4c8c-a7da-e9de347e50de/ff4550d3d82c559a449fffffd85b3bd1c0bb4847.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/debcc3fe-9718-4c8c-a7da-e9de347e50de/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 17 Apr 2023 23:33:19 +0000
Certificate not after:    Sat 24 Feb 2024 17:50:06 +0000
Subordinate resources:    AS: 269985
                          IP: 190.106.224.0/22
                          IP: 2801:1e:2800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15071202 (0xe5f7e2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 17 23:33:19 2023 GMT
            Not After : Feb 24 17:50:06 2024 GMT
        Subject: CN=ff4550d3d82c559a449fffffd85b3bd1c0bb4847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:86:03:d2:28:16:7e:97:2e:f4:e3:24:2d:e4:
                    d9:26:59:3d:29:69:75:85:48:ed:a8:d8:7b:12:83:
                    7b:5c:5d:6a:4f:6c:ce:60:f7:c9:ff:04:1d:01:75:
                    b6:f2:c7:53:29:c8:38:c8:b8:35:46:0b:0c:5f:68:
                    21:db:98:fd:7f:20:ae:d0:b3:40:a5:22:aa:27:d3:
                    bb:a8:d2:0d:70:c5:44:29:88:ec:ed:2e:0b:d7:d0:
                    4e:8b:9e:78:71:99:ce:6c:a3:c7:75:24:c4:a5:d1:
                    f8:56:5b:08:23:1c:b7:1f:27:1f:46:e4:94:2a:f9:
                    80:26:f0:80:67:7a:96:61:aa:0c:23:cf:b0:da:64:
                    67:2b:b5:f4:4a:a6:24:58:58:11:7d:07:ea:9e:63:
                    f9:f3:49:70:0b:9d:8a:5b:e5:41:93:f8:05:f3:c2:
                    36:94:7f:39:e0:09:79:0f:58:01:9c:c7:87:f0:51:
                    8a:7f:25:45:14:f1:60:79:65:c5:1a:ed:ec:f9:7b:
                    6c:33:6f:4d:90:69:cf:d1:38:2b:e9:ad:61:d3:60:
                    5c:41:69:51:cb:bb:78:30:97:1a:1e:a0:bb:d1:26:
                    ca:89:68:fa:4a:fd:23:b2:20:66:ef:ea:ea:ef:fd:
                    38:31:42:b3:a7:2f:1e:16:08:d6:7c:b2:e5:17:b3:
                    75:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:E4:69:78:50:49:32:81:26:81:89:20:72:49:28:5E:9A:0A:5A:71
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/debcc3fe-9718-4c8c-a7da-e9de347e50de/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/debcc3fe-9718-4c8c-a7da-e9de347e50de/ff4550d3d82c559a449fffffd85b3bd1c0bb4847.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  190.106.224.0/22
                IPv6:
                  2801:1e:2800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  269985

    Signature Algorithm: sha256WithRSAEncryption
         6e:00:89:12:00:32:63:45:0f:05:1e:ac:2e:a6:08:40:49:fa:
         ae:f6:b3:ff:54:ac:5e:c0:0e:94:d7:e6:cf:ba:cd:c9:98:df:
         61:1e:8a:08:bf:c9:1d:a9:da:ab:58:84:bd:c6:c1:19:72:b1:
         60:6a:29:0d:29:d5:75:29:5f:db:ba:a8:f7:66:76:07:79:33:
         29:2f:1f:52:a4:00:19:5d:0c:6f:3f:e4:22:91:ee:3e:26:db:
         39:04:4c:32:43:ef:19:d0:4d:90:42:db:ff:d4:e7:1e:8a:05:
         8e:3c:ff:b9:fa:4e:64:c3:98:7d:82:26:e5:45:05:85:e4:fc:
         d4:31:5d:8e:d9:84:94:a8:ca:09:ed:2a:bc:2c:26:6c:f3:1b:
         16:93:5e:ae:d2:ed:71:10:d2:1d:26:73:fa:de:83:97:d5:10:
         6a:d1:f8:4d:d2:e9:0f:10:b8:9c:c2:23:2b:60:8b:4d:0e:69:
         2b:64:f3:46:e5:09:9a:2f:f0:17:58:cb:b8:5c:2e:3e:a6:da:
         a1:67:0c:7e:2f:d7:5f:70:eb:62:52:7a:28:14:93:c2:ba:c9:
         5b:4e:53:fa:5f:a8:63:17:76:67:03:6b:b5:b3:0f:21:49:90:
         48:a9:fd:84:7a:20:f2:ad:c6:b3:49:33:b7:76:d9:c7:e4:ba:
         eb:69:9a:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----