Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5b57ec865ac261e0ae36d05374102c7827e41e4c.cer
File:                     5b57ec865ac261e0ae36d05374102c7827e41e4c.cer (raw, json)
Hash identifier:          SGSiR5Dpowep6vq6FbQ9UT9hpDu6b6iVl0palJMxxJU=
Subject key identifier:   93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       D46E11
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5b57ec865ac261e0ae36d05374102c7827e41e4c.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Oct 2022 15:27:04 +0000
Certificate not after:    Fri 05 Jul 2024 06:00:00 +0000
Subordinate resources:    AS: 262182
                          IP: 131.161.100.0/22
                          IP: 190.52.112.0/20
                          IP: 2803:f00::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13921809 (0xd46e11)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 11 15:27:04 2022 GMT
            Not After : Jul  5 06:00:00 2024 GMT
        Subject: CN=5b57ec865ac261e0ae36d05374102c7827e41e4c
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d5:72:08:53:74:c7:b7:c3:18:5f:c6:0e:c5:
                    ac:41:65:5d:5a:0b:49:8f:f2:31:1d:67:d1:cf:34:
                    da:0b:a2:a3:36:99:11:b0:3c:7f:cd:70:70:b2:6b:
                    65:6c:35:ab:37:89:18:1c:71:b0:ff:37:c2:92:bd:
                    8b:52:ab:a9:54:47:53:a2:23:3e:87:39:46:0f:f2:
                    02:f0:b8:c4:3c:00:51:02:64:dd:31:0b:6c:42:9b:
                    9f:47:c0:c5:3b:08:0c:2e:84:71:29:04:b7:ca:4a:
                    e0:e5:cb:ce:50:7d:cf:3f:84:95:79:16:d1:4c:ee:
                    4d:62:85:4e:44:bb:7e:dd:1d:1f:7d:62:82:ab:a8:
                    c9:7e:31:58:83:c0:2a:eb:56:a7:22:98:24:f7:be:
                    4f:fe:68:fb:ae:3d:e1:00:54:16:c6:0d:69:c1:11:
                    bd:45:b0:dc:71:da:38:f5:74:3b:88:ca:7c:32:69:
                    2a:0f:b1:d4:29:4e:b8:c5:03:62:2c:a1:8d:1f:9a:
                    ce:34:b7:b9:20:86:bc:e8:69:20:10:55:89:b3:26:
                    48:10:85:f2:e1:57:e6:9b:ab:b8:bd:f2:20:f7:98:
                    22:e3:62:6d:c1:94:f8:25:7e:23:62:c7:81:af:0e:
                    d2:de:6f:c4:76:68:55:14:7c:69:44:fd:5f:b0:dd:
                    f8:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:20:ED:01:88:81:BB:02:C8:2D:EA:13:20:D6:89:79:B8:68:A0:E7
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d2356873-54df-4a2d-8734-524b0d50fda2/5b57ec865ac261e0ae36d05374102c7827e41e4c.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.161.100.0/22
                  190.52.112.0/20
                IPv6:
                  2803:f00::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  262182

    Signature Algorithm: sha256WithRSAEncryption
         b5:df:34:f8:c6:ac:94:05:6e:46:05:f3:c4:c4:e5:8d:db:bb:
         3c:f6:d5:dc:36:35:aa:1e:2d:c5:35:6e:b3:73:76:38:e7:d9:
         81:a5:d3:db:b0:48:c0:88:fb:18:4b:52:51:b5:e3:aa:c9:2e:
         0d:9a:7e:08:e1:00:f6:f0:0d:a6:55:7d:da:44:23:60:8a:3a:
         e7:7b:f2:c7:f7:33:fa:cd:24:e0:6c:06:a9:0a:f5:46:55:77:
         88:28:df:74:3e:44:f2:a1:1f:e1:76:64:bf:21:de:70:69:88:
         9d:79:fa:8b:86:c8:90:64:20:45:2f:dc:8d:4c:2f:73:96:f8:
         bd:64:b4:b3:fb:0c:46:8b:e6:e7:93:87:01:f5:35:ec:21:81:
         e6:db:d8:8c:df:51:81:6d:62:49:8a:06:d8:99:a5:ac:af:0b:
         93:57:0b:93:fa:44:8e:c8:e5:4f:55:05:db:5b:6e:c1:54:74:
         9d:1f:7a:d3:5c:4b:8d:0d:63:48:4d:ba:3b:33:95:f3:42:93:
         4a:b7:10:08:9d:5b:09:6b:aa:1a:99:da:d9:99:38:48:27:ff:
         fb:23:5e:68:05:9d:bb:cd:77:b1:55:12:64:e2:d5:9a:e4:92:
         ac:4b:1c:80:04:71:dd:28:6d:61:6c:9c:4b:a0:cd:7a:3d:f8:
         39:42:fb:ff
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----