Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/479272c58a8b5bb9a048cad946514b13c1dfe5c6.cer
File:                     479272c58a8b5bb9a048cad946514b13c1dfe5c6.cer (raw, json)
Hash identifier:          Yinhmy+pdshNZsUCk/I4/s8Ef5UDND+uu8bUmc61U88=
Subject key identifier:   EE:13:81:5B:2C:24:97:60:6A:3D:E3:6D:41:B6:52:67:1A:B6:CB:4B
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E81864
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/1ed29fd9-73c8-46df-bc6d-1f035b805f50/479272c58a8b5bb9a048cad946514b13c1dfe5c6.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/1ed29fd9-73c8-46df-bc6d-1f035b805f50/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 02 May 2023 15:50:22 +0000
Certificate not after:    Mon 24 Feb 2025 03:26:45 +0000
Subordinate resources:    IP: 45.235.172.0/22
                          IP: 2806:2fe::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15210596 (0xe81864)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  2 15:50:22 2023 GMT
            Not After : Feb 24 03:26:45 2025 GMT
        Subject: CN=479272c58a8b5bb9a048cad946514b13c1dfe5c6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:77:23:22:fe:e2:a4:ff:c2:46:e7:bf:fb:49:
                    e3:ec:7a:c9:d5:a7:f5:08:e3:4d:ad:bf:e5:93:fd:
                    30:b3:f0:14:0f:2f:95:19:47:e4:c1:6e:9d:9e:66:
                    03:d4:1b:d7:9f:ea:a4:f2:12:75:d7:28:ef:9f:dc:
                    e8:32:be:c0:d2:4e:74:42:f6:59:72:3d:b7:54:47:
                    da:aa:0c:9b:76:4e:a3:19:94:34:d8:c5:b7:03:f6:
                    52:94:30:0d:97:d5:d7:64:3b:fb:35:25:65:82:3a:
                    57:d3:65:c2:57:03:d8:1d:6c:ae:59:e5:dc:b7:42:
                    3d:4a:92:1a:a2:b8:b5:9d:9a:f2:4d:82:82:90:a6:
                    5a:47:72:9e:c5:e1:4c:45:ce:c1:20:23:ff:83:d4:
                    15:3c:65:b0:45:e9:5e:37:20:f7:ea:b1:50:36:9d:
                    db:54:42:e7:e0:ab:b5:bd:de:2e:c5:31:70:a5:3f:
                    f0:ca:52:3f:56:ab:6f:9e:50:cb:1a:b5:9d:c9:61:
                    e9:a9:89:cf:4e:2e:0f:a5:bc:0c:2c:0f:dd:49:fc:
                    c6:e5:f7:d5:8e:1b:94:db:ae:f8:4e:b5:f5:6c:76:
                    99:fc:f2:12:0c:df:96:c2:80:90:03:04:ee:43:98:
                    e3:d8:19:71:d8:03:ad:48:86:87:cc:37:57:c8:bb:
                    67:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:13:81:5B:2C:24:97:60:6A:3D:E3:6D:41:B6:52:67:1A:B6:CB:4B
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed29fd9-73c8-46df-bc6d-1f035b805f50/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/1ed29fd9-73c8-46df-bc6d-1f035b805f50/479272c58a8b5bb9a048cad946514b13c1dfe5c6.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.235.172.0/22
                IPv6:
                  2806:2fe::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:69:a4:fa:d2:b2:f1:67:1f:a4:fc:3a:7d:95:e8:e7:d8:17:
         80:36:76:95:61:02:9f:ce:18:ca:37:bd:52:7d:f4:cd:84:86:
         0e:f8:6b:a3:e1:3c:f4:87:9b:7e:a1:3f:19:db:2c:75:84:79:
         3c:37:77:5a:f9:a8:1c:71:a4:fe:1e:e3:a7:f6:15:0f:51:9e:
         3e:dc:60:0c:c4:6a:76:ac:6f:57:28:6d:cc:3b:9b:0b:0e:b5:
         cc:bd:d6:b9:f7:61:30:7f:7f:7e:32:2d:de:c7:5b:da:dc:fc:
         6c:7b:19:bb:e6:be:cf:ea:1f:bf:d8:b1:81:ad:1b:60:71:1f:
         84:53:8f:c5:f3:1a:e4:5b:22:30:fe:29:81:a7:ce:21:94:d0:
         35:6b:a5:b0:b2:9a:6f:b0:e5:89:43:2f:12:96:b6:af:2b:e9:
         45:d6:01:2c:0d:19:fd:f2:4b:77:d4:24:3a:7a:41:5d:c3:7b:
         de:24:db:f6:38:b7:4c:1a:c7:54:54:15:23:33:ca:ac:20:dc:
         38:23:29:75:b1:50:b5:82:48:bd:1e:7a:c8:16:cb:f0:e0:29:
         6a:73:77:e0:ce:0a:45:37:af:e4:bd:89:8c:0b:8b:90:ad:af:
         a0:7b:9d:c9:84:d0:60:0a:e6:d1:9c:90:30:49:ca:9c:e2:17:
         fc:ed:ec:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----