Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f1fe64f768ae1ec35b83f7b644993b101916c0fe.cer
File:                     f1fe64f768ae1ec35b83f7b644993b101916c0fe.cer (raw, json)
Hash identifier:          e+9ab8NX2GMXWIV9Nqu540BRPtj5ymFudS5YfVVAKR8=
Subject key identifier:   13:34:78:5D:8B:78:06:CC:EE:4A:FD:4F:DC:1E:38:36:0B:63:57:43
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FF4951
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/68e3de49-5ddd-4195-965d-eadff4ab8bbb/f1fe64f768ae1ec35b83f7b644993b101916c0fe.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/68e3de49-5ddd-4195-965d-eadff4ab8bbb/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Sun 29 Oct 2023 17:14:23 +0000
Certificate not after:    Wed 18 Jun 2025 15:19:04 +0000
Subordinate resources:    AS: 61639
                          IP: 131.100.152.0/22
                          IP: 138.219.164.0/22
                          IP: 2804:1c20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16730449 (0xff4951)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct 29 17:14:23 2023 GMT
            Not After : Jun 18 15:19:04 2025 GMT
        Subject: CN=f1fe64f768ae1ec35b83f7b644993b101916c0fe
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:4a:07:c8:f4:53:df:e7:a3:7b:88:bd:88:
                    fb:a9:2d:59:6b:e5:b8:ae:3e:57:47:44:38:90:ce:
                    96:01:e3:a7:bd:80:f8:94:c8:1c:36:2c:18:c4:cc:
                    6d:06:99:02:84:17:9d:fe:af:f3:57:5a:5a:6a:47:
                    95:ee:58:23:3e:0c:e1:0d:05:22:06:96:40:7b:9a:
                    7d:2b:d4:83:bc:d5:a5:e7:d7:e7:63:13:03:a3:5b:
                    50:6b:cc:a2:f7:7e:2a:a8:66:10:a2:72:2a:bd:11:
                    b1:3d:16:76:51:26:fe:1a:fa:ac:19:f7:7d:98:c3:
                    be:53:4a:6b:0b:6a:8d:12:47:28:81:c9:7c:a7:94:
                    58:9a:4e:34:6c:80:4c:3c:74:de:ba:cf:8c:21:77:
                    4f:f7:70:fd:de:a5:f1:9e:2f:9c:de:fb:6e:1c:b7:
                    22:1e:e4:5b:d7:68:a4:da:4a:08:13:a7:15:7a:cc:
                    94:7a:6b:48:52:59:87:9d:46:aa:bd:ad:9a:01:e4:
                    45:53:de:3f:e9:78:a8:6b:2f:63:a8:28:70:c3:cc:
                    b5:6f:17:76:7e:9e:ee:d1:a8:c3:68:02:fb:7b:08:
                    27:40:32:2e:94:5e:d8:b6:c9:81:9e:5e:8b:b8:70:
                    f7:d1:46:d2:bf:cd:98:85:68:cf:67:95:5f:c7:2d:
                    2f:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                13:34:78:5D:8B:78:06:CC:EE:4A:FD:4F:DC:1E:38:36:0B:63:57:43
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/68e3de49-5ddd-4195-965d-eadff4ab8bbb/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/68e3de49-5ddd-4195-965d-eadff4ab8bbb/f1fe64f768ae1ec35b83f7b644993b101916c0fe.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  131.100.152.0/22
                  138.219.164.0/22
                IPv6:
                  2804:1c20::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  61639

    Signature Algorithm: sha256WithRSAEncryption
         97:72:8b:88:7e:5c:e7:a1:1c:9a:16:1f:33:5b:dd:21:20:ec:
         2d:87:24:a8:84:98:04:04:88:ee:a9:71:6d:52:46:aa:63:91:
         f1:95:69:99:a1:89:86:d0:b0:35:68:88:f8:6a:b0:71:a7:7a:
         0b:9c:b5:b5:ef:9b:6a:eb:00:53:2c:5a:60:47:d9:fd:96:18:
         15:83:d5:73:87:56:03:3a:86:da:93:05:0e:a3:9d:6f:9c:75:
         37:d0:25:19:19:58:71:37:3e:9b:c5:6d:e6:fc:b1:63:ad:3c:
         61:56:eb:81:a7:70:2d:f9:a6:8a:6a:56:e6:55:9c:d0:86:3e:
         92:6c:00:f7:bf:f8:84:8d:a2:e4:7d:36:8c:0b:f6:8f:bc:3f:
         26:ca:41:e5:5c:9b:e1:08:46:85:3c:6d:c4:ff:a1:51:0e:be:
         dd:5a:13:14:0c:1c:fe:28:f0:82:cf:cd:0d:97:b7:e8:cc:1a:
         1b:ba:bd:68:db:23:00:8f:2f:f7:9e:56:cc:d3:1f:c1:7b:1c:
         f6:3a:3c:ed:94:1d:9c:35:ec:3b:39:49:4d:1c:c2:64:7e:95:
         14:c5:07:b4:45:b2:b2:ac:2e:3b:1d:b4:67:f7:71:bd:7e:37:
         d7:47:45:90:e9:9d:6c:6d:59:b1:6d:ef:b9:84:7f:d5:bc:90:
         5f:5b:56:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----