Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/3476fd496b3fa9d336c8e155ff2575d684f68bf9.cer
File:                     3476fd496b3fa9d336c8e155ff2575d684f68bf9.cer (raw, json)
Hash identifier:          RsuRDvn6F4efeGAKzYWyai8Y72y54XgI8pP64QcRtro=
Subject key identifier:   CC:EB:BA:C1:F9:27:06:5E:44:CE:E7:6E:48:D4:E5:A9:17:4B:0C:AB
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       DDD52B
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/c1ded89d-f822-47bb-add4-e8e0a9f74b07/3476fd496b3fa9d336c8e155ff2575d684f68bf9.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/c1ded89d-f822-47bb-add4-e8e0a9f74b07/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sat 04 Feb 2023 05:26:23 +0000
Certificate not after:    Sun 06 Oct 2024 22:20:25 +0000
Subordinate resources:    IP: 45.228.56.0/22
                          IP: 2803:920::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 14538027 (0xddd52b)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Feb  4 05:26:23 2023 GMT
            Not After : Oct  6 22:20:25 2024 GMT
        Subject: CN=3476fd496b3fa9d336c8e155ff2575d684f68bf9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:23:41:be:72:bb:2b:20:9e:4a:e8:11:24:19:
                    1f:1a:89:79:61:62:00:84:84:3d:17:d0:f4:2c:bb:
                    a4:71:c8:e9:71:f8:91:05:e7:63:bd:1b:05:dc:55:
                    f0:52:83:58:1c:76:8c:4d:5a:a3:38:0e:1e:ca:98:
                    17:a6:25:7a:86:2d:5e:b0:20:2d:2a:cf:cc:3e:65:
                    97:e5:2d:ee:28:dc:42:9b:6a:f0:44:01:aa:39:5e:
                    31:8b:f5:aa:80:1a:ae:32:ba:48:f2:ab:4d:c9:0a:
                    da:02:a8:a0:17:45:37:9d:93:71:03:31:3c:ef:f5:
                    d5:1b:41:78:32:dc:de:2e:78:da:87:8c:e9:8d:fc:
                    be:74:53:07:6f:68:00:40:50:87:e1:30:d0:55:c7:
                    d9:1f:a5:c2:69:86:cb:0d:ca:64:f5:13:a3:da:0c:
                    72:2a:47:23:c3:98:4d:33:0a:e7:20:1f:e0:f7:bf:
                    67:94:f8:29:62:9b:f2:ca:ee:16:48:b1:fc:41:57:
                    ad:7e:aa:a3:0c:1f:d9:b1:13:eb:06:25:7d:91:10:
                    38:21:15:9b:74:a2:d7:23:64:11:f6:fc:41:ad:be:
                    bc:07:50:26:b7:2a:aa:fe:6b:10:03:8f:7b:da:4f:
                    8f:12:2d:8d:60:92:20:3e:31:77:1b:57:f9:f6:d7:
                    2e:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:EB:BA:C1:F9:27:06:5E:44:CE:E7:6E:48:D4:E5:A9:17:4B:0C:AB
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/c1ded89d-f822-47bb-add4-e8e0a9f74b07/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/c1ded89d-f822-47bb-add4-e8e0a9f74b07/3476fd496b3fa9d336c8e155ff2575d684f68bf9.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.228.56.0/22
                IPv6:
                  2803:920::/32

    Signature Algorithm: sha256WithRSAEncryption
         b6:20:6c:31:8d:fb:39:31:4f:fe:47:2f:44:ba:a1:f2:77:a6:
         c6:eb:cf:45:8f:51:df:1e:8d:62:b0:ec:14:35:00:0a:6c:ad:
         59:23:01:16:7d:a0:48:4b:b2:50:ab:b7:e2:92:63:43:dc:d5:
         19:8a:aa:f8:e6:89:d9:72:d7:55:76:b5:5a:7b:a7:01:7b:f0:
         2c:4c:71:ce:ff:b6:e2:c4:2b:2f:82:72:38:57:f1:da:47:6a:
         5a:61:80:d4:59:1f:f4:9a:97:42:3a:02:de:3c:dc:5c:be:dd:
         32:01:8d:d0:bd:dd:91:d4:f0:80:d3:f1:25:5d:1d:da:8f:bf:
         60:b6:97:b2:f6:0a:d1:9c:25:2a:8e:e8:aa:04:86:2e:00:e6:
         ae:96:da:61:18:81:52:e7:a8:76:56:c8:81:00:42:4f:05:19:
         21:e6:c1:18:ed:5f:12:f2:92:08:80:19:32:fb:e6:18:97:f2:
         c7:12:7c:99:2e:da:bc:84:ba:b6:95:92:2a:a8:a4:55:ab:94:
         b9:f1:52:07:fd:4f:6b:39:53:1a:2b:d2:ab:b4:43:45:06:c1:
         44:c9:1b:dc:ed:d3:15:ba:80:38:88:75:c3:5d:c1:c6:ad:26:
         7f:d0:58:ec:21:24:7a:5c:1b:48:5a:d4:aa:2d:40:5b:0c:4b:
         8f:f9:ff:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----