Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/58f96ca109bc5993a1bf6e91b30fce649102e01e.cer
File:                     58f96ca109bc5993a1bf6e91b30fce649102e01e.cer (raw, json)
Hash identifier:          WGf/RCgXy3hK+owERgd0nnFE/ItvoVecUua+V3KZaIA=
Subject key identifier:   69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FA8658
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/58f96ca109bc5993a1bf6e91b30fce649102e01e.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 22 Sep 2023 12:52:00 +0000
Certificate not after:    Sat 08 Mar 2025 06:00:00 +0000
Subordinate resources:    AS: 64153
                          IP: 45.68.40.0/22
                          IP: 2801:19:b800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16418392 (0xfa8658)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Sep 22 12:52:00 2023 GMT
            Not After : Mar  8 06:00:00 2025 GMT
        Subject: CN=58f96ca109bc5993a1bf6e91b30fce649102e01e
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:19:20:2b:25:05:3c:41:c1:ca:d4:52:9d:b2:
                    f5:aa:c6:83:ff:a8:cd:97:cc:55:52:ef:ff:08:f7:
                    c4:54:d3:c4:17:2d:ed:d0:2f:f5:36:71:43:fe:75:
                    01:af:40:28:6b:f9:9c:6f:ea:5d:79:c7:ee:c8:9c:
                    3b:04:b3:1d:fd:a2:78:4e:bd:f0:6b:be:3b:38:9f:
                    1d:f4:82:66:3a:49:94:03:43:35:80:76:42:67:c2:
                    37:92:43:b4:3a:52:d5:61:6d:bf:13:d7:32:72:b2:
                    9d:8a:eb:7b:a9:3c:5b:4c:3d:9e:8a:4b:cc:a9:86:
                    ac:0a:52:e4:8f:74:3a:9a:68:d9:f3:62:29:98:27:
                    d9:d6:90:ba:87:bf:dc:0a:51:88:d3:86:45:14:f7:
                    15:2d:81:cb:f8:a6:e0:c3:e9:a7:3d:08:55:da:8e:
                    d9:6c:03:e8:ed:83:0e:28:08:e5:6a:71:e3:34:9a:
                    2f:af:27:b9:90:1c:28:71:fc:1e:41:84:fa:ee:ad:
                    50:0b:16:0a:af:e9:60:3b:63:b8:cc:a5:75:6a:ee:
                    48:c7:e8:87:06:8a:53:0c:b9:49:d6:28:6c:bc:73:
                    6c:ac:e1:2c:6e:8d:7f:5f:49:f7:08:08:0a:fb:b0:
                    a6:ce:21:0f:08:9d:34:e0:80:5d:e3:16:50:0e:e3:
                    be:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                69:2C:0F:D8:64:11:92:31:6A:77:37:C1:F2:3B:14:13:71:32:74:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f136e942-1849-49a7-a9f8-46f6106ec54d/58f96ca109bc5993a1bf6e91b30fce649102e01e.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.68.40.0/22
                IPv6:
                  2801:19:b800::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  64153

    Signature Algorithm: sha256WithRSAEncryption
         a0:ca:7f:0c:a5:9b:63:53:63:ab:8b:62:e9:99:0b:41:3c:5d:
         c7:3b:13:4d:52:ea:af:62:5e:0f:10:1c:03:9c:44:14:50:1d:
         d5:89:df:3f:74:0e:56:df:46:42:7a:78:43:f6:55:24:d9:2d:
         29:17:ba:fb:99:e4:f5:ff:50:1c:77:c5:35:a1:8c:26:a8:fd:
         d5:3e:f8:ff:b4:e7:cc:e4:fe:89:3f:90:51:dd:11:da:5b:a8:
         91:c4:e6:28:99:91:51:0c:f6:7e:de:85:ef:91:27:3f:c2:55:
         24:67:38:1c:fc:77:13:cb:63:bc:76:bc:16:f4:78:ae:29:76:
         e2:12:f7:fe:8e:ba:38:b8:24:b7:9d:e5:09:0e:89:70:89:cd:
         96:4d:9d:cb:66:52:b2:78:d9:5c:59:35:cb:9b:ab:53:50:4c:
         fe:70:45:45:cc:2a:69:5c:bc:c7:ba:28:f2:8c:b8:9e:85:28:
         41:96:3f:c0:35:64:81:4a:e1:00:20:a1:1c:f7:61:b4:22:95:
         41:68:4b:6c:a8:48:c2:23:98:bb:f8:cf:38:cb:e6:b7:2c:fb:
         b4:c2:ac:db:3f:2e:95:35:08:78:cf:9e:ad:62:73:ca:a3:c6:
         27:1c:2d:eb:96:6b:46:d0:65:34:39:6d:dd:0b:ae:17:57:0c:
         25:8a:b2:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----