Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f3a05bdb86c0d94abfb2a46e721512e0fce81378.cer
File:                     f3a05bdb86c0d94abfb2a46e721512e0fce81378.cer (raw, json)
Hash identifier:          QUMNMeKxGpF2UZwm7ZGDjDkmTmLWXlH/DZP7MjtvgJE=
Subject key identifier:   48:CE:AC:AD:6D:23:FB:50:BF:02:35:58:AB:18:84:F7:F2:C4:CC:95
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E78E14
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/f3a05bdb86c0d94abfb2a46e721512e0fce81378.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Thu 27 Apr 2023 16:52:13 +0000
Certificate not after:    Fri 21 Feb 2025 19:40:38 +0000
Subordinate resources:    IP: 201.130.16.0/22
                          IP: 2801:1c4::/44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15175188 (0xe78e14)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Apr 27 16:52:13 2023 GMT
            Not After : Feb 21 19:40:38 2025 GMT
        Subject: CN=f3a05bdb86c0d94abfb2a46e721512e0fce81378
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:3b:1a:b8:bd:c0:a3:88:d8:9e:b0:8c:4c:de:
                    b7:92:3c:89:86:e1:52:3d:aa:c3:28:93:35:2a:fa:
                    dc:0d:16:21:e4:2d:03:1d:d2:fd:99:65:99:5b:e7:
                    0e:58:25:81:a9:27:bd:e7:02:92:87:76:c2:54:a7:
                    28:6d:55:a8:16:c5:b1:12:40:0c:ca:07:29:94:e7:
                    a1:72:b6:a0:f8:eb:f8:83:01:ba:68:6e:61:ff:63:
                    fb:02:96:7b:c4:e4:00:ed:99:d0:c5:3a:a5:c2:f0:
                    15:36:d1:57:93:72:7d:ad:54:cc:6d:6d:64:6d:4d:
                    76:b2:a3:9f:61:c1:50:1a:4f:27:02:16:59:71:31:
                    ff:9e:71:41:f2:64:40:28:d1:08:2b:36:14:39:1c:
                    42:46:c3:9d:d2:f4:1d:34:5b:dd:cf:6e:e9:7d:aa:
                    10:ad:d3:9b:a7:46:66:d3:a8:33:e6:c2:01:3d:25:
                    12:b3:59:04:fb:28:b0:51:bd:5e:9e:f7:28:93:79:
                    a5:e8:c6:82:79:f7:b9:15:92:11:69:65:0e:bf:9d:
                    3f:99:dd:fc:1d:48:60:61:17:2f:cd:d0:d8:be:c1:
                    67:1d:8b:51:88:12:bb:b6:c3:4f:76:4f:a7:d3:cc:
                    a7:20:85:36:28:4e:da:27:65:9e:71:8e:9d:c7:50:
                    95:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:CE:AC:AD:6D:23:FB:50:BF:02:35:58:AB:18:84:F7:F2:C4:CC:95
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/a7e2b6b2-4c2e-4934-8d31-74e09994d07b/f3a05bdb86c0d94abfb2a46e721512e0fce81378.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  201.130.16.0/22
                IPv6:
                  2801:1c4::/44

    Signature Algorithm: sha256WithRSAEncryption
         b2:27:ae:a2:a4:23:7b:68:2d:29:81:6a:be:15:2d:1d:5b:61:
         b0:45:e4:d8:7c:39:bc:e6:bc:f6:1e:ca:3f:a3:a3:92:22:99:
         58:29:cc:28:bd:fa:bc:d5:5d:e2:aa:d7:28:f4:3c:d5:ce:b1:
         19:b3:5c:2a:ca:1a:b7:ea:c6:ef:5b:4f:c0:ed:ac:49:23:ff:
         3b:a8:53:f5:c3:10:d3:39:ca:59:50:50:60:10:e6:37:ef:b5:
         af:da:fc:fd:39:e0:5a:48:c8:26:d7:bd:a6:c1:81:fb:e0:f0:
         d7:d1:22:7c:74:83:20:21:95:7a:ab:1c:2e:91:38:19:ca:3d:
         13:e4:12:5e:04:a3:20:ad:79:01:c6:f5:de:1d:21:37:95:53:
         f5:71:c1:2e:2c:57:54:ab:9c:44:02:e0:70:81:cf:1e:e6:81:
         35:d5:23:0f:4d:a0:9d:2f:b8:b3:23:58:b2:4a:1f:cc:64:a1:
         3a:f7:50:52:16:4d:42:66:d8:ac:db:51:c9:3d:b6:8a:41:96:
         80:d2:9f:70:fd:f0:7f:7c:27:18:63:df:c3:8d:a7:14:ce:36:
         b9:1e:63:21:6a:0f:3c:c8:01:ae:4a:b2:f2:a1:df:ef:cf:38:
         37:59:4c:1d:5d:e2:1e:36:06:cd:fd:c4:b5:76:dd:07:c3:12:
         7d:5d:fc:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----