Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/00f895a901e0aed32bfbbc27ec311633b2051670.cer
File:                     00f895a901e0aed32bfbbc27ec311633b2051670.cer (raw, json)
Hash identifier:          8kZkwUSl6fkBsx74az0o+sg6oJshDb+1aReop9rXHac=
Subject key identifier:   37:7B:B5:9D:EF:14:62:E3:C5:35:D7:B2:0A:05:E2:E1:E9:A3:4F:B2
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0100A4BE
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/00f895a901e0aed32bfbbc27ec311633b2051670.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 29 Jun 2022 23:00:16 +0000
Certificate not after:    Mon 09 Dec 2024 04:00:00 +0000
Subordinate resources:    AS: 262218
                          IP: 170.79.108.0/22
                          IP: 186.159.116.0/22
                          IP: 2803:3000::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16819390 (0x100a4be)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 29 23:00:16 2022 GMT
            Not After : Dec  9 04:00:00 2024 GMT
        Subject: CN=00f895a901e0aed32bfbbc27ec311633b2051670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:cd:0d:b2:ae:58:03:44:b2:bd:97:99:ea:ec:
                    b1:d5:3e:19:39:e1:83:99:ec:22:d2:2c:bb:56:4c:
                    b4:5e:b5:25:4a:29:75:fb:df:0e:fc:94:9d:a6:b1:
                    d7:a6:52:3c:44:55:1e:dc:10:7d:2f:ee:10:20:d8:
                    df:1e:21:58:29:00:c2:c4:ab:57:d1:db:f2:d1:44:
                    e0:9e:b9:8e:67:1e:a1:52:f3:96:59:f2:df:2b:47:
                    87:ce:ec:80:8a:ca:06:f8:a2:a6:b0:6d:1d:c3:7b:
                    40:3e:f5:45:9a:fb:56:9b:c8:d6:34:77:24:10:46:
                    40:3a:75:76:ef:3e:7c:34:1f:1f:2a:01:98:ed:0e:
                    2e:16:0b:da:53:64:9c:be:68:19:34:79:d8:a5:ce:
                    37:34:d1:32:e1:c9:33:d6:1e:3a:fd:45:f7:b0:92:
                    15:91:a7:47:ea:3c:6f:54:d5:a8:c3:8a:59:3f:e4:
                    17:7f:cf:fd:0b:8c:0f:53:56:d3:e1:9e:b5:6f:df:
                    a0:e5:da:b0:c0:da:06:64:15:63:5b:f4:02:94:1e:
                    dc:c0:13:84:4c:17:69:16:4c:8e:7d:2e:1d:f6:41:
                    d8:b3:ec:4f:48:f1:f9:2a:cb:e8:21:d4:53:24:21:
                    4e:a8:4e:cc:62:9e:2f:ea:30:cf:36:1b:62:d2:77:
                    7e:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:7B:B5:9D:EF:14:62:E3:C5:35:D7:B2:0A:05:E2:E1:E9:A3:4F:B2
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/ad687eaa-9bc5-4975-9693-736459df7b01/00f895a901e0aed32bfbbc27ec311633b2051670.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.79.108.0/22
                  186.159.116.0/22
                IPv6:
                  2803:3000::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262218

    Signature Algorithm: sha256WithRSAEncryption
         6c:fd:1b:a7:b4:14:d4:c4:94:1b:09:35:73:db:e2:a9:7f:47:
         ea:22:1d:76:b7:62:26:91:45:63:e7:2c:1e:3a:1e:da:3b:95:
         e1:f9:4f:1d:5b:09:22:8d:4b:0b:66:dd:3d:3e:d3:06:33:39:
         4d:93:ec:2c:27:59:bd:a7:9f:b8:39:f9:04:83:4a:1f:e8:76:
         96:9f:48:b5:90:63:ec:f7:18:f8:b3:9d:62:4e:a9:51:cb:65:
         49:e6:2c:f6:06:43:2a:60:15:53:00:5c:9e:f4:af:8d:a4:99:
         05:bc:e7:f1:82:8f:62:ef:47:83:c1:2c:63:91:ce:e3:aa:56:
         01:8f:f7:8c:63:0b:d3:62:2e:d2:7e:ab:d5:71:6b:02:dc:dd:
         a9:15:ff:cf:29:d9:22:0b:4e:61:69:d9:41:18:f9:00:11:ad:
         b0:c2:f8:ca:69:ba:79:f5:16:73:29:8b:ee:04:30:64:72:db:
         06:c5:ce:d1:4b:d2:a2:ad:fc:d7:1f:c0:95:56:2a:b7:b2:c0:
         12:5b:40:56:8b:71:2c:58:39:27:75:c4:e5:81:ae:c8:3a:89:
         03:35:ae:a4:cf:02:b0:9a:e0:aa:24:c0:7e:82:69:c2:f7:79:
         02:c5:8c:51:c5:fc:8e:e2:2e:46:a3:1a:4d:ed:93:af:f5:29:
         bc:2e:14:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----