Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5f575a7cc01c4a3e0b479278d65f83fdc65148ab.cer
File:                     5f575a7cc01c4a3e0b479278d65f83fdc65148ab.cer (raw, json)
Hash identifier:          TW8hX8BMupOQhmedLLhVc6sSD6mtM14B8v7jVFMDSSk=
Subject key identifier:   D2:94:48:59:8B:19:A5:75:8A:81:F1:B2:EB:30:70:0D:CB:A1:4E:3F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E4F83C
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/7775eafb-2166-4b64-bd44-debcf9f6b28d/5f575a7cc01c4a3e0b479278d65f83fdc65148ab.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/7775eafb-2166-4b64-bd44-debcf9f6b28d/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 11 Apr 2023 20:56:19 +0000
Certificate not after:    Sat 12 Oct 2024 22:15:25 +0000
Subordinate resources:    IP: 45.168.104.0/22
                          IP: 2801:14:800::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15005756 (0xe4f83c)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 11 20:56:19 2023 GMT
            Not After : Oct 12 22:15:25 2024 GMT
        Subject: CN=5f575a7cc01c4a3e0b479278d65f83fdc65148ab
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:1e:30:8e:1c:b2:63:ef:11:35:e1:5c:d1:
                    88:18:1d:a7:ef:ff:de:4f:71:90:cf:f8:f6:0c:6e:
                    ba:02:89:18:b9:26:88:9a:55:d4:17:ab:71:b3:59:
                    2d:7b:4f:17:9d:3f:9d:ed:75:44:3f:68:de:7f:90:
                    93:09:b8:b9:64:ef:90:9a:9c:f1:d8:98:c7:a1:6b:
                    98:df:e2:a6:e8:a6:4c:e5:59:6a:ad:56:70:bb:78:
                    75:77:71:e9:d5:5b:74:11:68:10:1a:11:d6:e0:c5:
                    65:e9:b6:9b:1a:a0:8e:e7:8a:6e:c9:d5:73:e3:67:
                    ec:7c:29:8e:61:29:7c:63:0a:4c:35:98:53:4d:ec:
                    47:d9:4e:2f:62:72:c2:be:f8:94:72:cc:2d:1d:a6:
                    36:cc:d2:99:63:aa:7c:fa:82:38:d3:b4:25:02:0f:
                    4b:a7:38:42:f0:2a:f8:b2:60:0a:07:e6:7f:63:ef:
                    10:3c:ef:bf:3d:21:42:0c:a3:cd:de:4d:f5:42:5d:
                    51:1b:24:29:82:dc:74:e2:e4:5f:22:ab:15:a9:be:
                    a0:76:7b:f2:a3:dd:d9:b6:8b:c8:cb:28:6b:6c:34:
                    58:3c:02:73:a0:a2:a4:44:09:a0:25:27:8c:31:96:
                    39:d4:7d:63:66:18:4e:8b:ab:ef:0f:ce:a7:46:d7:
                    67:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:94:48:59:8B:19:A5:75:8A:81:F1:B2:EB:30:70:0D:CB:A1:4E:3F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/7775eafb-2166-4b64-bd44-debcf9f6b28d/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/7775eafb-2166-4b64-bd44-debcf9f6b28d/5f575a7cc01c4a3e0b479278d65f83fdc65148ab.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.168.104.0/22
                IPv6:
                  2801:14:800::/48

    Signature Algorithm: sha256WithRSAEncryption
         26:81:3d:98:f1:c6:f2:fe:25:88:bf:15:8d:c9:9a:0a:62:81:
         0c:7c:be:b1:f8:e7:80:1c:57:df:8f:6b:29:8e:bc:ad:6b:67:
         7d:af:12:e9:22:d3:18:e4:09:e3:11:5b:ae:39:02:f8:3f:36:
         c8:46:10:b4:3a:3a:a3:05:88:98:65:41:b5:8f:b8:82:dc:23:
         f8:6c:3d:24:38:31:f8:3e:6b:c1:70:13:44:4e:81:4c:2b:be:
         c8:14:be:e7:2e:3b:a1:40:00:57:75:68:14:8a:63:6c:4a:58:
         d4:01:b1:a1:75:8b:d6:e3:85:02:c3:6c:3e:a0:8d:d0:70:83:
         c7:2a:d7:7a:3c:3a:07:3f:51:fa:28:a8:2d:ca:c9:00:78:c7:
         65:aa:34:fb:4d:4d:67:0e:eb:7c:85:10:0a:2e:3a:59:0b:71:
         ab:8c:c3:31:88:29:7c:72:c7:e5:15:4f:8e:a1:74:7f:e3:4b:
         19:74:a2:4e:a7:ef:3b:14:c4:d3:11:56:c0:46:d3:87:63:77:
         a2:03:cc:a0:b4:78:ee:24:c6:28:91:fd:8a:4b:dd:aa:f0:4a:
         4f:fc:ef:bb:d0:0b:95:bf:0b:b3:ee:65:bb:ef:8f:60:c6:61:
         12:29:f2:b3:5e:a3:31:cc:62:1e:57:90:95:9d:ef:6f:22:54:
         37:8a:21:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----