Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/a7f9ed94b559a4db41aea1589c5195ae51090fc5.cer
File:                     a7f9ed94b559a4db41aea1589c5195ae51090fc5.cer (raw, json)
Hash identifier:          dz9rSG/yeWTWnYah/VqDD5DWvxlJFkCWmUdmnPm8LkI=
Subject key identifier:   8C:06:AE:3D:3B:08:9B:E7:72:62:7F:59:34:43:28:2C:E3:19:E0:C1
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       F1CF42
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/a7f9ed94b559a4db41aea1589c5195ae51090fc5.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Fri 14 Jul 2023 16:49:37 +0000
Certificate not after:    Sun 06 Apr 2025 20:23:15 +0000
Subordinate resources:    IP: 45.237.52.0/22
                          IP: 2801:1f:7000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15847234 (0xf1cf42)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul 14 16:49:37 2023 GMT
            Not After : Apr  6 20:23:15 2025 GMT
        Subject: CN=a7f9ed94b559a4db41aea1589c5195ae51090fc5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:83:ff:b0:22:b6:71:93:35:8b:66:1f:c5:cf:b3:
                    2d:df:0a:00:4f:7d:d5:88:40:0a:9e:7a:69:d2:b1:
                    ce:6a:d6:40:fb:ec:74:f0:11:38:eb:36:ee:3e:ff:
                    b8:ee:2f:c2:d8:1c:14:31:c6:12:80:42:3f:91:fc:
                    e2:2a:2d:c4:de:69:45:70:72:25:3a:75:93:d1:53:
                    26:16:8c:25:5b:3f:1b:51:cf:0e:b1:38:d7:13:9e:
                    29:3f:ea:a9:d2:3f:26:f6:8e:0b:83:c5:a8:b1:29:
                    8d:38:a6:57:6f:fa:e5:88:f8:68:d6:7f:ec:5b:85:
                    56:c1:9d:99:f5:aa:8b:0b:30:08:c1:98:fd:20:c4:
                    f7:06:ed:a7:3c:73:68:52:d0:3c:d5:24:d3:7b:88:
                    ab:bf:18:d9:32:de:7f:2f:ac:c5:91:50:02:c9:3f:
                    11:1b:50:49:8a:90:83:41:3c:b1:5b:b5:78:ec:8c:
                    44:41:fa:ee:60:bf:d9:7e:3b:bf:33:2f:6d:50:41:
                    8b:40:65:21:cf:1e:cb:d9:77:fc:71:82:e1:08:67:
                    0f:ac:9a:94:63:0b:f3:5a:22:18:9c:b0:72:19:d7:
                    2a:f2:56:4e:e1:16:99:e2:88:90:0d:33:b7:74:e3:
                    66:c6:74:19:35:64:bc:ec:fa:c8:84:7e:9f:99:03:
                    a1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:06:AE:3D:3B:08:9B:E7:72:62:7F:59:34:43:28:2C:E3:19:E0:C1
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/0f1a0901-a9b9-403a-a996-7322b3ed4c2f/a7f9ed94b559a4db41aea1589c5195ae51090fc5.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.237.52.0/22
                IPv6:
                  2801:1f:7000::/48

    Signature Algorithm: sha256WithRSAEncryption
         c7:84:05:c2:ad:e8:39:af:2f:8e:c2:aa:b5:18:85:d2:fb:56:
         6b:ac:15:93:3a:5b:8a:8f:b3:fe:18:dc:38:24:80:6f:25:4c:
         54:1d:de:49:ea:3c:09:49:74:25:9f:ee:6c:3a:03:7d:15:92:
         21:54:f1:0f:fb:52:ea:1a:e2:21:e7:58:7f:0f:07:a8:3b:8c:
         77:fa:2a:bd:df:04:e5:ce:bf:fb:72:23:60:9a:57:ab:ad:30:
         af:b4:bd:16:b2:ba:79:22:75:7f:67:a6:19:c8:2c:1e:91:87:
         af:f2:e3:8f:2e:d5:ea:05:66:ae:0f:aa:a7:15:0f:36:3f:5b:
         a9:f1:b5:28:ed:36:4c:45:a4:93:0a:0a:77:49:b8:3b:1e:ee:
         7a:06:11:46:e3:1c:f9:fb:06:8a:83:ac:f3:b0:fc:6b:fc:94:
         2c:ad:8a:0c:7e:80:83:df:c8:e3:0f:d6:1f:81:f0:db:3c:09:
         7e:47:32:a7:ea:f4:16:4c:4f:be:39:30:d3:7e:34:69:10:ad:
         ec:14:4d:a7:55:b7:75:88:05:21:51:33:3d:53:21:36:2f:b0:
         22:e1:1f:34:70:b8:72:c5:ad:a5:c0:83:49:73:60:81:72:5e:
         6f:b5:a0:a7:89:0b:51:9e:96:0d:54:49:82:30:c3:68:02:e1:
         03:10:3e:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----