Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/50052e8c1569d72a03970f7b5cc9e7a0e2f64b66.cer
File:                     50052e8c1569d72a03970f7b5cc9e7a0e2f64b66.cer (raw, json)
Hash identifier:          OIGLdadOMwmSlPo2lxy4Z8XuNn4a5pQmq/7mKA5fJLs=
Subject key identifier:   B5:56:92:A1:F8:A5:22:86:78:41:C7:6D:A9:E1:74:23:27:32:4D:92
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F744E4
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/2ff770d8-0c17-484c-a799-49f39faa5b4e/50052e8c1569d72a03970f7b5cc9e7a0e2f64b66.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/2ff770d8-0c17-484c-a799-49f39faa5b4e/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 29 Aug 2023 16:01:35 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 192.100.236.0/24

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16205028 (0xf744e4)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Aug 29 16:01:35 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=50052e8c1569d72a03970f7b5cc9e7a0e2f64b66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:5c:6e:ce:80:d5:ba:36:02:3f:a8:22:b8:79:
                    b7:c7:7d:c9:bf:1a:d5:d4:eb:06:fe:f2:01:1f:e0:
                    fd:62:df:07:b0:27:61:e1:36:0b:25:59:c9:3b:7a:
                    83:54:b2:3a:61:8e:73:1f:8e:72:15:38:a8:91:5d:
                    e2:c0:2b:7c:54:22:33:51:9f:b0:d8:37:8f:c9:b1:
                    12:b6:9b:e3:b2:f3:d7:6d:61:79:2a:0f:3f:cc:6b:
                    b7:db:05:9a:fd:b2:14:95:5b:ec:9e:f4:e0:b5:25:
                    09:7c:81:fb:9f:e4:83:0e:eb:85:39:f6:4c:42:f0:
                    26:eb:5c:33:22:9f:80:9e:fe:30:88:9b:64:85:01:
                    6f:78:4c:d8:54:f6:ec:45:42:42:33:6a:da:3a:7a:
                    d8:d1:ae:bd:2d:fb:f7:f3:a1:71:35:ae:9f:9c:3f:
                    83:27:a3:85:3a:17:5b:e6:17:64:17:8c:88:83:86:
                    fc:b9:3f:9a:57:00:e1:3b:bb:84:cd:09:4e:1c:78:
                    fd:1d:4e:56:8b:92:70:fc:88:17:61:37:42:79:0b:
                    fa:99:a8:c1:ae:5e:7c:81:70:3a:93:a7:61:1a:49:
                    f9:77:3c:75:10:c2:ea:d9:db:1b:e1:5f:c6:c4:24:
                    6c:6c:56:9a:de:9b:f8:c2:cd:fb:f5:8f:b0:da:15:
                    28:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:56:92:A1:F8:A5:22:86:78:41:C7:6D:A9:E1:74:23:27:32:4D:92
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/2ff770d8-0c17-484c-a799-49f39faa5b4e/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/2ff770d8-0c17-484c-a799-49f39faa5b4e/50052e8c1569d72a03970f7b5cc9e7a0e2f64b66.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  192.100.236.0/24

    Signature Algorithm: sha256WithRSAEncryption
         61:c8:91:d7:4e:96:32:e0:21:03:f1:52:ad:7c:e9:1f:c0:9a:
         6e:71:24:cf:f6:71:a1:ba:f6:d9:f0:aa:05:39:60:13:35:47:
         45:2e:65:cf:bc:e1:32:82:0f:63:fb:cd:03:44:79:e0:a7:0e:
         63:b2:67:0e:a4:1a:58:a7:e8:78:47:f4:67:58:3f:4a:98:84:
         f0:08:f8:95:99:62:85:ca:b6:ae:7b:38:dd:ce:2f:14:85:c3:
         24:89:d4:92:3e:b0:b6:4b:27:5b:78:1b:35:81:ec:2d:58:7d:
         2d:48:74:a7:e1:99:6b:47:c9:e8:ad:77:89:c6:4c:74:8c:ed:
         d8:d2:35:3f:16:b2:3d:ad:52:7c:24:78:1e:a5:02:47:c4:f4:
         3e:94:e7:1f:ec:a5:e3:2e:0b:18:61:8f:81:a7:0b:77:fa:3f:
         20:af:18:c0:fb:7a:88:3b:2e:8d:89:1c:ea:a9:e8:63:fe:e4:
         c8:3b:55:d0:f3:f9:57:db:9e:0b:68:ca:8a:c6:b7:df:21:7c:
         7f:90:1f:88:cb:a8:4c:e0:b7:d0:76:4e:db:4f:b8:4b:3b:87:
         d7:9a:34:ea:ac:1c:fc:2d:a5:ea:bb:8e:27:4a:38:e4:2e:70:
         9c:d2:97:77:60:ac:32:19:34:76:5b:b4:dd:d3:88:79:4f:d8:
         55:7c:81:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----