Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/5ff55de7e93d3d4804d1cb1a152e73fc9c6ba848.cer
File:                     5ff55de7e93d3d4804d1cb1a152e73fc9c6ba848.cer (raw, json)
Hash identifier:          0kOPr8jVXCGhOkfZbC0b4tYj/IHMe2U+0JF+YDDerCQ=
Subject key identifier:   48:6A:64:44:39:B7:B4:24:79:2B:89:49:0B:13:9A:71:91:C0:40:ED
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E842A2
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/d5b61026-89f8-4922-a8f7-4d0607005641/5ff55de7e93d3d4804d1cb1a152e73fc9c6ba848.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/d5b61026-89f8-4922-a8f7-4d0607005641/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Wed 03 May 2023 21:38:58 +0000
Certificate not after:    Fri 01 Nov 2024 14:00:00 +0000
Subordinate resources:    IP: 200.14.128.0/18

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15221410 (0xe842a2)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  3 21:38:58 2023 GMT
            Not After : Nov  1 14:00:00 2024 GMT
        Subject: CN=5ff55de7e93d3d4804d1cb1a152e73fc9c6ba848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:82:b8:30:08:f8:89:bc:4d:51:35:3c:65:27:16:
                    9f:81:64:81:11:d6:1b:46:50:49:52:d6:3e:3f:e3:
                    3f:73:83:4e:74:25:26:ef:84:c4:a4:cd:84:a0:c3:
                    a2:ab:15:c2:5a:08:27:68:b2:b3:66:92:ab:c0:9e:
                    9b:0a:ad:3e:8d:3b:b2:51:c2:f5:cb:66:d2:40:ee:
                    e3:83:f4:5d:4c:04:66:b2:32:e3:a7:aa:64:8d:7a:
                    c1:4a:a0:cf:7a:ea:1c:c4:c5:9c:c9:61:f4:66:c4:
                    5e:8f:16:22:d3:5d:fb:51:35:82:60:97:76:af:8b:
                    71:5b:f8:51:a6:b8:64:8c:d1:6f:22:a2:55:8d:cf:
                    a7:c0:dd:a4:ee:b3:71:0f:b7:7d:2e:76:01:03:6e:
                    35:d7:18:e0:b8:0c:90:f0:6a:46:eb:09:13:3e:49:
                    df:1c:82:63:ea:21:b3:fb:3a:40:0c:e4:44:87:6b:
                    dd:ee:2a:7c:d5:d8:7b:8c:17:ab:44:66:db:12:86:
                    f4:b6:2a:a8:69:43:a5:bd:59:64:49:89:a8:a7:51:
                    28:52:c8:50:40:3e:cb:5e:90:b1:eb:bc:f1:b2:1f:
                    06:d8:99:5a:44:95:35:39:64:c2:8d:3e:8d:05:91:
                    28:64:96:f6:3a:f7:d8:54:6a:da:56:12:bc:1c:bb:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:6A:64:44:39:B7:B4:24:79:2B:89:49:0B:13:9A:71:91:C0:40:ED
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/d5b61026-89f8-4922-a8f7-4d0607005641/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/d5b61026-89f8-4922-a8f7-4d0607005641/5ff55de7e93d3d4804d1cb1a152e73fc9c6ba848.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  200.14.128.0/18

    Signature Algorithm: sha256WithRSAEncryption
         25:dc:ae:2e:65:53:de:4e:a9:0b:66:a6:fe:53:29:2e:31:da:
         cf:7f:6d:d1:31:0b:bf:5b:6d:e3:14:47:7c:28:6e:5f:4e:9d:
         13:6c:3c:b8:0c:b3:a2:6b:35:30:fd:81:7d:9f:ce:c0:21:5b:
         69:a8:62:e6:47:95:90:7d:d0:7b:c5:e5:79:46:96:2d:5c:87:
         a7:f0:16:ae:79:9f:43:0a:18:bc:28:6a:27:c2:b6:65:ca:38:
         0d:0d:f5:fb:c2:8b:7f:8b:15:74:3a:0a:a5:a9:8c:bb:5e:dc:
         53:54:ce:20:ac:47:c9:bb:92:20:91:56:f3:39:36:8b:0c:40:
         88:47:df:bc:b8:90:3a:fd:8e:a9:e4:09:ac:8f:e4:31:97:46:
         d6:00:4a:6c:90:b8:60:8d:69:d2:3e:f5:aa:ea:60:f0:4c:d1:
         dc:1b:6c:17:29:d9:6b:10:a9:bd:05:42:ef:17:7b:30:f4:04:
         46:f6:7d:53:ec:5a:d0:82:76:02:46:73:af:62:ca:0b:37:a2:
         c9:3c:3d:50:1e:e1:29:99:fa:21:a5:7f:b7:47:2f:65:df:5f:
         ce:9f:de:87:22:e9:7a:cf:84:b5:52:d5:19:b3:fd:fc:33:e2:
         21:e5:bb:67:35:10:a5:66:0d:2b:20:f9:b1:65:36:e1:02:03:
         39:b6:c1:3b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----