Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa17fa162b8c63daa4db78d5049749365ad3d60b.cer
File:                     fa17fa162b8c63daa4db78d5049749365ad3d60b.cer (raw, json)
Hash identifier:          GMfVolVjm71C2sdYTCSiaimC92JvK+bMC56I9Ivj5Os=
Subject key identifier:   0D:D0:B1:C1:C5:51:BE:21:8B:9B:99:DA:9F:C5:19:33:E6:66:86:26
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       010350EC
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/fa17fa162b8c63daa4db78d5049749365ad3d60b.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 06 Oct 2022 13:47:15 +0000
Certificate not after:    Thu 09 Jan 2025 15:04:42 +0000
Subordinate resources:    AS: 264680
                          IP: 168.227.4.0/22
                          IP: 2803:7d40::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16994540 (0x10350ec)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  6 13:47:15 2022 GMT
            Not After : Jan  9 15:04:42 2025 GMT
        Subject: CN=fa17fa162b8c63daa4db78d5049749365ad3d60b
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:f7:19:0e:59:57:04:30:7d:db:e1:af:e6:9f:
                    82:97:14:3e:e4:06:cd:32:9f:e0:ef:e2:62:86:12:
                    a4:23:62:32:a8:f4:b7:e2:ae:7e:8d:24:39:bd:67:
                    bf:f0:bd:bc:52:e5:8f:88:51:2d:e1:b8:e4:44:3c:
                    98:9a:07:8b:53:53:80:b4:97:2c:86:92:bb:9c:e6:
                    a4:c2:37:bd:7a:ea:9b:69:75:20:23:a8:4d:c0:61:
                    5f:c4:2d:8c:7f:62:72:43:65:a1:3d:80:ab:73:b3:
                    fa:ad:58:9e:87:e8:82:3f:1b:6f:71:8f:21:89:40:
                    ac:51:67:33:34:f1:e8:5f:7f:a4:8a:f9:96:1a:2e:
                    4a:9d:57:37:9d:03:4b:6a:48:ca:9f:6f:b8:f7:40:
                    e9:6a:ee:56:6b:0e:36:e2:5a:5a:01:b7:b1:0c:e4:
                    21:2d:9e:98:50:ba:57:ef:71:93:91:34:fe:c8:63:
                    3e:23:0b:54:32:7a:2e:f9:d3:fd:b6:80:71:3b:12:
                    a1:4b:07:c1:57:ec:00:b0:64:a0:d1:81:93:cc:ff:
                    d8:44:81:77:25:22:d5:68:63:89:39:30:04:07:48:
                    69:e9:75:51:49:d2:ce:82:60:e2:e1:5e:5c:35:af:
                    a4:da:44:7b:55:fe:9b:46:43:cf:2a:b2:12:c7:13:
                    6f:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:D0:B1:C1:C5:51:BE:21:8B:9B:99:DA:9F:C5:19:33:E6:66:86:26
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3b1c359c-ea18-4773-b98d-de8f644d5bdf/fa17fa162b8c63daa4db78d5049749365ad3d60b.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  168.227.4.0/22
                IPv6:
                  2803:7d40::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264680

    Signature Algorithm: sha256WithRSAEncryption
         a5:c3:23:ca:d2:72:6d:ba:7d:83:e8:9d:95:41:9f:ca:c1:5f:
         99:ee:7d:b9:02:bf:91:af:55:ca:38:f1:60:d8:11:e3:0a:da:
         e5:58:59:c8:c1:ea:67:80:ef:83:08:db:f4:a6:cd:c7:6d:bb:
         f7:eb:ce:5f:5b:f7:92:32:8e:77:57:43:0a:8c:f9:9e:38:64:
         5d:5c:75:d9:6a:04:f6:8a:81:dd:81:a8:af:79:cb:e2:aa:4b:
         f5:a5:62:7c:aa:ce:0a:e8:f4:26:d4:63:b7:25:77:f4:d4:c6:
         01:bc:10:a9:1b:93:6c:3b:9c:9d:0e:b5:28:73:dc:3d:25:f5:
         77:d0:72:61:a7:b0:14:b8:73:86:78:2f:b6:11:20:db:4f:6f:
         6b:b5:73:4b:30:fc:89:cb:79:d4:69:02:f8:e8:34:2c:8d:9e:
         cf:ed:ce:38:37:fd:37:1c:b3:77:cb:e8:f3:d9:73:f2:b6:f0:
         1d:03:88:5d:2d:77:bc:12:4e:4b:61:ac:d0:7f:8d:32:bb:55:
         6e:4f:df:ff:78:68:05:1a:af:2e:e9:9a:f5:45:e2:86:5f:f2:
         7a:6c:1f:2c:d0:24:53:bb:11:cf:51:86:4a:98:19:69:c9:e0:
         38:72:1d:99:28:df:c9:0a:bb:56:ac:5d:e1:7d:3e:fe:fa:ff:
         c4:88:7b:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----