Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer
File:                     fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.cer (raw, json)
Hash identifier:          XfLbXSIoLBsPn2e/aOJ0MRTP0TImws1Wk/LgxlnkzBc=
Subject key identifier:   27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FE0F57
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 12 May 2022 18:10:30 +0000
Certificate not after:    Sun 24 Nov 2024 20:42:36 +0000
Subordinate resources:    AS: 267858
                          IP: 170.244.168.0/22
                          IP: 2803:eac0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16650071 (0xfe0f57)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 12 18:10:30 2022 GMT
            Not After : Nov 24 20:42:36 2024 GMT
        Subject: CN=fa51358f08e5b961b8771fd9e9a858af6e1a4b4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:1c:4d:e6:f7:82:6b:f2:0f:d3:c7:4d:21:74:
                    7a:6b:db:78:24:e6:5d:c3:9c:6b:4a:4f:8b:44:7a:
                    13:f8:89:97:ba:d3:15:b1:f8:f6:73:e3:87:02:57:
                    f2:55:9b:df:44:15:2c:9b:dd:44:91:2e:a4:7d:12:
                    86:c9:58:ce:e2:d4:2b:a5:c1:19:11:ef:25:3d:4d:
                    16:5d:6c:a1:41:de:c1:0d:1e:bd:33:8c:8c:d2:00:
                    b5:27:93:3d:8c:f3:34:be:3e:ce:9c:10:57:b0:3c:
                    35:bf:04:f6:c3:24:9b:22:5a:9f:c9:a1:23:c4:d0:
                    3c:06:4d:69:85:46:07:3a:50:99:c0:85:40:ac:38:
                    c5:fd:0b:eb:ed:6e:c7:2f:55:a1:97:4a:c5:4f:bc:
                    84:13:7a:83:98:e4:bb:44:87:f7:bb:52:bb:b9:fe:
                    b3:d1:77:b2:aa:c1:50:fb:74:7d:1a:71:4d:50:6c:
                    26:63:d8:24:76:2f:f9:02:4e:af:29:53:3a:b6:a8:
                    74:95:21:04:60:f9:d5:bf:38:f3:d7:e4:81:07:11:
                    98:71:08:44:8c:d4:5f:7a:49:fd:7f:1d:ce:83:b7:
                    90:15:3d:24:ad:17:79:6e:c3:3d:07:56:39:60:a6:
                    99:71:bb:cb:6b:64:18:61:17:e4:8f:0c:0b:ed:1d:
                    ec:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:5D:8C:C6:B0:4B:F0:2A:37:A8:B9:45:1A:34:E9:6E:F2:9A:5D:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1cb73da2-794f-46c0-8cd1-ea0cf0947f87/fa51358f08e5b961b8771fd9e9a858af6e1a4b4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  170.244.168.0/22
                IPv6:
                  2803:eac0::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267858

    Signature Algorithm: sha256WithRSAEncryption
         5c:19:88:b5:5c:9b:ef:c1:73:ae:47:97:9f:aa:61:c8:2c:1b:
         2a:68:a8:d4:e0:b8:83:29:03:9e:9f:46:c7:5a:99:e8:7d:36:
         8c:9d:ef:5a:09:d2:f9:7f:14:53:fb:e9:77:4a:6f:fd:5f:04:
         83:c3:a4:e1:c5:06:ed:4b:d5:72:54:05:c6:3f:69:b4:94:48:
         19:46:7c:fa:52:fb:0b:b9:2c:02:24:ce:ca:18:20:d7:01:bd:
         8e:f5:99:0f:55:f6:94:96:46:30:bd:94:9a:5e:6b:a0:25:0d:
         72:35:33:95:94:a5:77:28:a8:a9:bb:32:a8:70:87:9f:58:d0:
         f9:46:0b:5b:29:2a:39:75:17:c4:e3:23:29:05:55:74:68:b7:
         d7:19:b5:49:e6:0a:be:d3:72:6a:32:37:0f:7c:a2:03:21:d4:
         0b:bf:aa:6e:58:58:fe:0f:cf:ab:44:83:f4:72:09:d7:ce:75:
         7b:4d:e1:ee:c1:6d:f5:48:2e:54:14:33:37:56:b1:2e:a0:0f:
         ab:95:ec:88:4a:6b:be:33:fa:87:9f:1a:f3:2f:47:bf:33:ef:
         9d:58:63:65:1b:0b:3c:1b:e2:a3:b6:c2:36:f2:ce:75:53:08:
         50:b9:73:39:31:8c:9a:b1:f6:f2:f3:50:6e:48:63:d3:68:2a:
         39:58:45:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----