Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/13943d79ee0f9b1f7f70a77c686f97df17e8f220.cer
File:                     13943d79ee0f9b1f7f70a77c686f97df17e8f220.cer (raw, json)
Hash identifier:          n2oQSU4KNzwGcgiokTz6MU2JzWYTKVtIDtC8tElMvV8=
Subject key identifier:   F6:46:98:A1:6E:B4:6F:AF:30:17:0C:B3:78:0F:51:AF:6C:A9:34:A1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EABA5E
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/487c0d08-3511-4527-ae3a-cffe680b0d29/13943d79ee0f9b1f7f70a77c686f97df17e8f220.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/487c0d08-3511-4527-ae3a-cffe680b0d29/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 22 May 2023 16:13:45 +0000
Certificate not after:    Fri 24 May 2024 19:35:25 +0000
Subordinate resources:    IP: 45.239.88.0/22
                          IP: 2801:1a:f000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15383134 (0xeaba5e)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May 22 16:13:45 2023 GMT
            Not After : May 24 19:35:25 2024 GMT
        Subject: CN=13943d79ee0f9b1f7f70a77c686f97df17e8f220
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:fe:46:33:35:80:f4:4b:8b:03:43:7b:c0:94:
                    5c:95:3e:fc:26:50:7a:12:c6:78:44:5e:fd:a1:76:
                    ad:7c:9d:7d:aa:4f:c6:b1:27:42:5d:44:c0:6d:56:
                    87:1b:5b:2e:32:c4:2c:2f:e9:2f:a3:5e:f6:1c:e6:
                    92:de:59:d0:e2:c7:5a:2c:8f:23:ed:98:48:c3:9a:
                    1d:74:7c:08:d8:0d:85:c4:7e:0e:77:ee:cf:be:5c:
                    17:14:77:5b:0b:4b:85:45:43:b1:f0:04:9c:18:a5:
                    48:a9:26:d9:35:df:a4:ba:54:8e:de:14:6d:3e:51:
                    95:48:df:a4:0e:1a:3f:25:86:8e:5c:ae:7b:b7:8a:
                    d7:7c:7d:82:cb:89:aa:05:fa:18:cb:36:83:11:6b:
                    3a:38:a0:36:1a:64:fe:56:06:5d:5f:44:62:d6:11:
                    03:8f:e1:7c:18:91:ef:a4:64:00:10:d6:6c:7d:8d:
                    fe:81:bf:93:d3:c3:e7:40:fc:12:ec:ef:e0:ee:a8:
                    ac:8d:7c:a2:80:64:8f:c6:e6:19:19:43:6b:78:9d:
                    ad:6f:63:71:7a:38:33:b3:8b:49:a3:8e:ab:e6:c5:
                    9f:45:a5:d9:54:c1:f0:61:8c:de:4c:24:e2:28:9d:
                    57:fd:a0:63:b8:5e:52:4d:04:2a:5f:4e:30:8e:f2:
                    f3:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:46:98:A1:6E:B4:6F:AF:30:17:0C:B3:78:0F:51:AF:6C:A9:34:A1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/487c0d08-3511-4527-ae3a-cffe680b0d29/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/487c0d08-3511-4527-ae3a-cffe680b0d29/13943d79ee0f9b1f7f70a77c686f97df17e8f220.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.239.88.0/22
                IPv6:
                  2801:1a:f000::/48

    Signature Algorithm: sha256WithRSAEncryption
         65:90:39:58:00:7a:20:07:18:7f:e0:0a:5f:5a:bd:ae:3f:3a:
         52:99:5a:4b:12:29:2f:eb:1d:d0:c8:ab:52:fe:41:34:57:1c:
         ba:6a:4d:b3:f1:00:e5:4e:64:b9:2e:11:1c:9d:1e:d4:34:cc:
         6e:7a:9e:d1:a9:87:64:e6:8a:89:5d:89:1a:7e:4c:a3:45:30:
         2f:9e:bc:5a:6a:42:98:fd:06:bf:e9:12:b2:7f:a7:59:4e:87:
         33:be:ee:3b:e2:2e:71:2f:92:18:80:31:9a:b2:f4:a2:6b:47:
         89:d8:87:e9:f1:ad:da:f3:39:6d:93:ed:57:fa:21:4f:3d:89:
         bf:b4:de:02:32:7e:bf:60:34:07:ed:21:be:50:05:b9:fe:cc:
         41:ea:c8:90:ae:59:5d:23:4a:62:3d:92:6c:13:75:9b:02:2c:
         83:58:c4:1b:5f:2e:04:80:f4:3d:71:ba:fd:dd:49:2c:6d:61:
         94:d8:36:bf:f6:6b:b6:3d:58:48:1d:c9:23:55:70:26:da:4a:
         6f:c1:3a:19:57:89:7c:75:0c:dd:2d:47:92:b7:41:37:92:b4:
         bd:d4:3a:56:d7:fc:fb:5f:46:62:80:0e:5f:a8:55:73:17:73:
         02:79:ec:36:06:61:ae:b3:ae:bb:fe:01:3c:80:dd:f3:81:f3:
         fa:8d:03:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----