Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/86674220777cea4b6d4eda807c328713edd18343.cer
File:                     86674220777cea4b6d4eda807c328713edd18343.cer (raw, json)
Hash identifier:          Ph4LKzC+aBFNbnlRKw7P356sWRKg2fKhL7ibqu9cQ5g=
Subject key identifier:   1C:3F:C6:84:DF:38:49:FA:17:2C:3A:D1:76:9E:05:7A:4A:68:6E:F8
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010431E0
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/280205e9-48db-47e1-9885-f0ac6e55a91e/86674220777cea4b6d4eda807c328713edd18343.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/280205e9-48db-47e1-9885-f0ac6e55a91e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 13 Apr 2022 21:04:49 +0000
Certificate not after:    Fri 17 Jan 2025 17:22:57 +0000
Subordinate resources:    AS: 270157

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17052128 (0x10431e0)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 13 21:04:49 2022 GMT
            Not After : Jan 17 17:22:57 2025 GMT
        Subject: CN=86674220777cea4b6d4eda807c328713edd18343
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:80:e3:35:4d:2a:bc:70:09:fb:5d:ac:c8:1c:90:
                    24:42:4c:cc:37:80:2f:2e:1f:6e:8b:b0:14:56:ee:
                    2f:bb:e7:70:27:40:95:d9:38:5c:99:b3:0d:2d:6e:
                    c1:1c:6c:9d:0d:b6:59:94:a5:5f:d8:6b:0a:16:f9:
                    54:17:76:70:1e:03:cf:76:ad:88:0e:d5:20:00:bd:
                    00:04:d6:d0:e7:0d:35:6b:a3:11:50:3d:0b:34:c2:
                    9d:e0:c8:35:97:f0:9c:ca:8e:c9:b6:ff:26:6e:ca:
                    1f:66:6f:0f:f8:8a:4c:0a:ab:a9:82:8a:a8:a9:02:
                    ba:98:e0:98:64:22:63:e6:9c:51:a6:8a:a1:e2:0f:
                    ba:82:7e:0c:02:cc:f0:b5:a3:aa:72:86:d5:5d:17:
                    7d:d2:eb:8d:f2:9e:6d:b4:25:36:00:a6:e4:14:d5:
                    46:54:c3:d1:81:3d:e9:b9:f8:d4:82:b5:89:a4:69:
                    fe:8f:32:84:db:1e:fd:e7:57:77:4d:27:8f:80:37:
                    ea:c9:3c:71:30:60:94:ed:16:37:29:98:30:83:02:
                    8a:86:cf:d7:60:7a:d6:52:ec:79:07:9c:3f:09:79:
                    15:e9:11:7e:f1:18:f1:33:af:31:6b:57:b1:bc:b5:
                    c7:0a:01:76:7a:95:e3:82:3c:b4:d1:49:61:c6:ad:
                    af:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:3F:C6:84:DF:38:49:FA:17:2C:3A:D1:76:9E:05:7A:4A:68:6E:F8
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/280205e9-48db-47e1-9885-f0ac6e55a91e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/280205e9-48db-47e1-9885-f0ac6e55a91e/86674220777cea4b6d4eda807c328713edd18343.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  270157

    Signature Algorithm: sha256WithRSAEncryption
         0c:0a:69:1c:dd:af:e9:01:d0:09:91:23:8c:6d:0e:80:ec:87:
         46:d8:d5:85:4f:01:8f:7f:ec:1f:f2:36:ea:04:2c:85:c5:f1:
         a4:98:3a:45:29:b4:23:68:14:a9:6d:2b:a9:f3:c3:c1:f6:52:
         9c:58:62:a6:75:24:cc:88:1f:47:d1:44:53:69:18:e3:07:d6:
         79:d7:29:bb:6e:f9:fc:d0:62:69:8a:e0:42:ee:2a:fa:7b:e6:
         5c:30:9a:79:cb:56:30:96:1c:08:a0:93:22:72:1f:b7:13:41:
         aa:c0:5f:ec:49:cd:81:b3:65:8c:d1:00:fd:4c:30:0e:03:ef:
         df:ea:2f:f1:59:b2:5c:ee:fd:42:74:9c:f2:57:35:09:cf:d7:
         09:f4:17:2d:17:b2:dd:6e:95:2a:3a:27:79:a8:a3:f2:84:dc:
         8f:4d:a0:01:f2:2f:a5:cf:1f:84:a7:91:55:0e:37:5d:5c:02:
         3e:ad:68:59:e7:d2:2a:83:17:1d:6e:42:33:b7:18:14:0b:f4:
         05:1c:78:a3:48:a2:e5:53:27:74:29:37:ae:0d:f0:eb:e8:28:
         6a:02:27:cc:2b:1e:ce:dc:21:7b:a3:32:c4:3f:98:7e:49:10:
         d4:e7:f1:a9:5c:2b:8f:01:ff:6e:31:15:86:a9:57:c6:3d:05:
         e3:46:3e:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----