Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/d87cacea641658717abecb35689ebe8932f40ead.cer
File:                     d87cacea641658717abecb35689ebe8932f40ead.cer (raw, json)
Hash identifier:          UQdw6MM3HaRYTihmk3AIwZdU6fe44biGGuJJAO5DnLY=
Subject key identifier:   50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01039D78
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d87cacea641658717abecb35689ebe8932f40ead.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 21 Apr 2022 02:28:37 +0000
Certificate not after:    Sun 12 Jan 2025 16:18:59 +0000
Subordinate resources:    AS: 267796
                          IP: 45.172.184.0/22
                          IP: 2803:5fa0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17014136 (0x1039d78)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 21 02:28:37 2022 GMT
            Not After : Jan 12 16:18:59 2025 GMT
        Subject: CN=d87cacea641658717abecb35689ebe8932f40ead
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:1f:89:fa:20:fb:e1:e9:70:f5:88:dc:0f:9d:
                    42:12:b6:bf:20:d0:cf:85:99:2a:7b:4a:89:ca:29:
                    4f:4e:c0:a0:62:71:08:ad:fd:67:30:4d:40:2c:10:
                    20:d0:bc:d7:1d:93:32:c7:4c:a3:a5:5c:68:49:57:
                    b6:bc:df:ff:37:59:06:66:3d:29:b4:8e:50:69:97:
                    04:19:a7:63:6a:2e:73:44:02:6d:b7:a9:1e:67:7f:
                    c1:b7:1e:57:55:4d:04:54:a1:ce:e2:54:fb:0c:76:
                    db:84:7a:01:d2:1d:cb:f9:c5:57:7f:10:42:81:3a:
                    9a:48:3f:9a:17:b5:88:e4:93:ca:37:c6:ff:6f:2b:
                    90:89:6d:87:23:63:86:c6:44:d0:84:3e:35:72:f8:
                    6b:34:66:71:b7:94:85:16:12:19:b8:19:48:02:d5:
                    39:48:00:c0:04:08:ba:11:bb:77:1f:a8:48:0c:98:
                    d5:fc:40:21:c6:4c:1c:2c:ca:2d:53:07:51:e0:2b:
                    c3:e0:45:c7:f1:d8:17:e6:74:a9:cc:d9:51:35:32:
                    2c:f1:81:b1:7b:46:dc:4c:36:44:97:85:da:a7:31:
                    96:30:75:20:e5:e7:29:e1:19:f6:ea:d3:64:38:72:
                    e0:58:17:21:1b:19:bf:f6:a4:b0:e7:ef:35:9d:63:
                    8c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:1B:9A:0E:A8:35:4F:1C:D8:B5:3D:36:E7:DC:B0:0F:B4:F4:6D:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0efbfa1c-4ea9-4d1b-ad95-5bf749e86bbc/d87cacea641658717abecb35689ebe8932f40ead.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.184.0/22
                IPv6:
                  2803:5fa0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267796

    Signature Algorithm: sha256WithRSAEncryption
         83:21:3b:c6:0a:a8:f7:95:b0:f0:e7:c6:d7:bb:4d:ba:1b:f0:
         1d:36:e9:7a:ca:8c:b6:9b:85:c1:04:09:ad:4c:5d:53:d7:9b:
         a1:aa:20:d0:36:88:2f:19:9f:e1:8f:6b:ab:09:4c:73:33:39:
         26:fe:72:fa:60:f0:dd:e1:5e:7d:27:29:c7:ab:81:b9:f2:e3:
         69:a7:a0:b0:3d:95:50:d4:32:79:30:6d:df:b6:74:e9:ba:75:
         1d:4d:bc:16:9f:84:d8:6b:7d:28:49:12:3b:b5:82:8c:90:f9:
         20:28:7a:42:1a:89:9f:5d:70:1c:a0:9d:7a:ab:34:1d:f8:03:
         4d:0b:a1:ca:21:09:e9:c2:b5:7d:40:fa:79:80:a3:50:1d:11:
         26:a2:f6:2d:3e:a1:77:53:5e:18:46:74:8e:01:f4:04:7b:5c:
         4a:d3:21:af:0e:e2:81:8b:3e:91:39:e5:a1:d3:2c:02:66:0e:
         a4:46:c1:44:6f:cc:3c:bb:3d:dd:66:f9:5b:2f:53:42:45:12:
         b1:cf:16:37:a8:82:6a:3a:bb:2c:db:ba:8b:a5:63:ec:d1:db:
         74:94:6f:84:e3:17:2a:ab:07:0c:0b:d9:47:ea:fe:1f:5b:b7:
         ac:3e:fa:74:2a:09:66:5c:6f:10:5c:f5:cd:9b:76:41:36:57:
         e8:40:24:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----