Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/2fa755565c5494b865bd93ad3d4e1021fe518380.cer
File:                     2fa755565c5494b865bd93ad3d4e1021fe518380.cer (raw, json)
Hash identifier:          erwUCK5oP+ino4XbKrIrZFN5OOYrkkAkdifi4F10yRk=
Subject key identifier:   A1:78:01:96:FF:F1:56:BE:11:92:E7:8F:DE:93:A8:FA:81:18:AC:60
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7330C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/647de75b-46e2-4369-8812-7201e4706e39/2fa755565c5494b865bd93ad3d4e1021fe518380.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/647de75b-46e2-4369-8812-7201e4706e39/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 25 Apr 2023 17:01:47 +0000
Certificate not after:    Wed 15 May 2024 18:12:40 +0000
Subordinate resources:    AS: 28394
                          IP: 138.255.60.0/22
                          IP: 170.245.188.0/22
                          IP: 200.0.90.0 -- 200.0.93.255
                          IP: 2806:217::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15151884 (0xe7330c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 25 17:01:47 2023 GMT
            Not After : May 15 18:12:40 2024 GMT
        Subject: CN=2fa755565c5494b865bd93ad3d4e1021fe518380
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:25:e2:f8:98:e8:f4:9a:dc:9a:6b:b1:6e:b4:
                    d2:bb:45:0f:1f:46:da:7c:e3:a1:02:45:7d:1b:ef:
                    37:44:7f:33:89:76:1d:a7:02:e0:a9:62:87:9d:dc:
                    9a:cd:7a:ea:c9:ef:d7:38:3a:06:04:0a:ba:36:9c:
                    1a:b9:aa:b8:65:f2:ec:45:37:af:60:b8:ea:ef:88:
                    84:68:c7:51:c7:f5:a4:88:71:a0:7a:32:a3:9c:63:
                    c2:85:5f:98:af:ea:1f:3d:ef:64:64:f6:4e:4e:23:
                    6c:18:66:87:22:f5:85:29:e8:32:52:d9:dc:5d:53:
                    da:e4:e0:64:c7:8b:01:c0:19:0c:fd:93:38:2b:c7:
                    13:85:67:95:76:ba:eb:28:79:6c:f3:ee:09:10:e5:
                    2d:51:c5:a9:aa:8e:16:1d:dc:92:67:2e:fa:bd:58:
                    a0:74:5e:04:b4:fc:b5:0d:d0:18:81:e7:85:4b:f6:
                    60:6a:92:2d:8f:3f:97:b7:66:a0:4d:7f:14:a0:22:
                    5b:d8:e1:1f:e1:95:3c:30:7d:48:e0:8a:62:35:4c:
                    b9:b6:74:ee:5b:ea:fe:e0:62:45:fa:04:40:ae:b1:
                    c2:d9:09:72:01:55:18:a3:9f:63:ce:9d:23:c6:c8:
                    5b:45:f8:1e:7a:fc:fb:38:37:07:50:f9:26:5a:23:
                    67:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:78:01:96:FF:F1:56:BE:11:92:E7:8F:DE:93:A8:FA:81:18:AC:60
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/647de75b-46e2-4369-8812-7201e4706e39/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/647de75b-46e2-4369-8812-7201e4706e39/2fa755565c5494b865bd93ad3d4e1021fe518380.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  138.255.60.0/22
                  170.245.188.0/22
                  200.0.90.0-200.0.93.255
                IPv6:
                  2806:217::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  28394

    Signature Algorithm: sha256WithRSAEncryption
         29:44:48:04:74:bc:36:66:75:42:f6:bc:6d:28:f2:2c:b4:9f:
         d6:6a:ea:ec:99:a1:b3:4a:8e:c2:a0:34:30:18:b7:16:55:23:
         ae:a0:85:9e:a2:b3:b2:45:bd:12:1c:00:3c:00:3f:b0:45:df:
         76:b3:38:f6:90:6f:fb:18:59:d2:77:71:d0:4e:40:eb:09:df:
         30:19:5f:6a:c9:8d:8b:99:9c:08:3b:4c:36:b4:c2:eb:b4:9d:
         b7:4a:c3:b3:b8:6b:e7:98:1e:8c:e3:12:66:c6:d7:4b:b0:8e:
         18:65:a6:7f:56:4d:40:00:ce:c9:ab:0e:81:e2:72:e4:7a:90:
         9d:d4:c7:48:8d:49:2c:ea:91:25:eb:ba:92:71:d2:36:cd:5c:
         51:51:1f:0a:c5:a7:8a:cd:89:87:09:e1:39:97:53:71:c7:0d:
         7a:42:e3:48:b0:c3:a2:49:03:1f:b4:3c:e9:25:da:22:08:0b:
         e8:1e:03:60:a5:13:ba:9a:ca:72:02:7f:0a:d9:95:f2:f6:f0:
         3c:c3:bb:e4:5c:ad:e3:8d:36:41:ad:79:23:2f:6a:50:dd:de:
         bc:ff:56:14:bd:4d:39:84:b1:e2:e6:1a:9b:7e:85:55:18:75:
         01:41:2e:77:87:6b:66:49:8a:94:05:4d:c1:e0:86:c7:22:da:
         01:6c:b9:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----