Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5cb6e20b5e34ff451e2f3aa02333e225a81bfbdf.cer
File:                     5cb6e20b5e34ff451e2f3aa02333e225a81bfbdf.cer (raw, json)
Hash identifier:          QsLs2EDGDJKL81fvgwJK69K5yBi7jRidNjHKYVQ2n64=
Subject key identifier:   88:47:12:57:20:63:CA:D2:E7:F6:19:6F:68:34:2E:63:E3:4E:FB:DD
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F22BD5
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/51352d78-eff8-43c8-bdc4-72c9af6230dc/5cb6e20b5e34ff451e2f3aa02333e225a81bfbdf.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/51352d78-eff8-43c8-bdc4-72c9af6230dc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 18 Jul 2023 15:24:25 +0000
Certificate not after:    Mon 30 Sep 2024 20:52:53 +0000
Subordinate resources:    AS: 264662
                          IP: 200.33.51.0/24
                          IP: 2801:15:1000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15870933 (0xf22bd5)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 18 15:24:25 2023 GMT
            Not After : Sep 30 20:52:53 2024 GMT
        Subject: CN=5cb6e20b5e34ff451e2f3aa02333e225a81bfbdf
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:6a:9c:c9:af:90:e7:4e:b3:e0:45:f5:9d:b8:
                    8b:d0:a0:98:e9:a2:a3:50:f9:54:d8:72:79:92:60:
                    a5:21:dc:77:20:d7:9c:2c:0b:de:e4:ff:49:c9:c3:
                    c4:3b:b2:5d:7a:30:ed:3f:fe:3e:a5:c8:3c:63:10:
                    25:94:65:a1:a3:ae:55:0f:0a:b6:09:4d:9a:54:ab:
                    da:38:c0:b2:74:a6:b5:ec:ac:59:12:c7:fa:c9:f3:
                    9c:3b:9a:94:ac:56:93:2a:41:7d:67:be:a7:b5:2c:
                    27:9b:a7:91:ab:0e:a5:e1:da:bf:17:15:25:7e:1d:
                    34:7d:5f:46:4f:1b:1a:e2:20:08:2c:9e:93:39:cf:
                    4a:f6:37:75:5a:8e:64:e9:23:ae:41:77:70:18:72:
                    89:3b:b8:e0:53:5a:57:4d:51:51:24:ce:e4:30:4e:
                    fc:d5:5a:fe:f4:95:0c:80:2d:76:05:ca:71:03:d8:
                    b2:42:f5:40:e4:3a:66:20:b7:72:04:aa:6a:7f:5d:
                    07:45:12:49:5d:8d:c6:b9:77:25:2a:a6:2c:8e:ca:
                    4e:5a:39:bd:b2:1a:fd:4a:fb:af:c8:17:6b:d6:21:
                    3b:20:48:1f:c2:b6:ff:00:e8:5a:5d:88:b9:17:a0:
                    69:e7:1c:3e:b5:8f:b5:ac:0d:fe:6d:7a:d7:6a:9e:
                    d0:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:47:12:57:20:63:CA:D2:E7:F6:19:6F:68:34:2E:63:E3:4E:FB:DD
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/51352d78-eff8-43c8-bdc4-72c9af6230dc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/51352d78-eff8-43c8-bdc4-72c9af6230dc/5cb6e20b5e34ff451e2f3aa02333e225a81bfbdf.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.33.51.0/24
                IPv6:
                  2801:15:1000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  264662

    Signature Algorithm: sha256WithRSAEncryption
         80:b1:87:27:a2:c3:3f:63:60:46:47:4d:79:54:19:c2:54:5f:
         09:47:a8:65:b3:75:23:50:fc:a1:06:a5:01:c2:1c:82:4a:c5:
         a4:23:7b:a4:0d:03:1b:60:80:2d:e9:7d:bf:61:dd:9c:ea:43:
         3a:51:21:e0:63:59:93:13:cc:af:01:c5:20:75:b6:11:ca:58:
         14:6d:8f:d1:70:89:83:52:7a:22:c5:61:a8:34:61:31:e4:05:
         32:82:84:cf:ba:68:ec:83:e1:58:27:2d:6a:34:37:56:9e:85:
         52:6a:35:f0:3f:a2:4b:7c:a4:59:ae:0d:22:21:06:a2:7f:2c:
         8f:80:87:f9:30:cf:f2:b3:95:df:7d:cf:f4:27:1d:b7:83:c5:
         2e:18:66:0d:ee:0b:be:65:49:c0:a8:83:14:dc:53:9b:98:a8:
         7c:f8:3d:0d:c5:90:16:73:df:61:c4:38:4c:cb:57:b2:b6:3e:
         97:2b:b1:0a:9a:50:cc:c2:dd:d2:96:5f:d4:f8:ac:e8:57:d3:
         9d:1f:ad:12:f4:2d:a2:b3:79:7c:0a:a6:ae:f0:0d:ab:84:78:
         f6:b9:ff:87:81:6a:30:fa:1a:4f:85:6b:83:5d:de:95:f0:dc:
         1a:62:df:fa:2b:2e:c2:ba:65:b9:bc:11:74:c4:4e:f3:e9:c7:
         8a:a9:e4:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----