Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/f542a7bf3e6dcd0cfbd143d5f80671299203e540.cer
File:                     f542a7bf3e6dcd0cfbd143d5f80671299203e540.cer (raw, json)
Hash identifier:          nf48FdMg7ER0NoScMTVz6d8CiD/MCztDOR9o6UmgPas=
Subject key identifier:   94:E7:42:F8:B7:2F:4E:AC:61:30:12:B0:F8:75:24:1F:40:AD:EF:9A
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       FC5205
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/f363ef72-7932-422c-8142-c8988f65cd39/f542a7bf3e6dcd0cfbd143d5f80671299203e540.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/f363ef72-7932-422c-8142-c8988f65cd39/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 09 Oct 2023 18:34:25 +0000
Certificate not after:    Sat 12 Apr 2025 17:55:29 +0000
Subordinate resources:    IP: 45.238.28.0/22
                          IP: 2803:14a0::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 16536069 (0xfc5205)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Oct  9 18:34:25 2023 GMT
            Not After : Apr 12 17:55:29 2025 GMT
        Subject: CN=f542a7bf3e6dcd0cfbd143d5f80671299203e540
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:ca:97:d3:91:d6:22:a2:7f:eb:de:c0:bc:9b:
                    fc:6e:aa:e5:46:8d:47:14:88:b3:67:04:e8:23:29:
                    f4:77:c2:b0:8e:2b:7e:4f:1a:68:0d:09:d3:d6:23:
                    d2:0a:24:f0:3a:06:f4:10:10:a4:1c:3c:24:4a:d7:
                    f8:01:6d:c2:19:f7:bf:61:55:ce:43:ac:2d:96:de:
                    3a:c2:6c:e7:30:ea:b5:f2:ae:4e:aa:63:ae:1d:0a:
                    0f:6f:2f:7b:2b:f3:89:b2:a2:ac:90:2c:c5:40:64:
                    09:f7:8e:7a:43:38:65:3a:62:61:f3:ba:3d:20:3d:
                    9d:93:29:94:6c:1d:bb:3b:4d:6a:80:88:19:25:7b:
                    74:9b:3f:1c:ba:f5:b3:d9:de:b9:23:0f:d5:4e:ba:
                    4b:74:00:65:e7:91:66:7a:a8:2f:e8:55:0a:e4:04:
                    d4:88:76:a2:77:2c:37:be:39:77:98:a4:ef:13:2a:
                    37:ca:af:8d:c3:6a:f6:c6:b6:42:ab:73:32:ad:e5:
                    6b:16:44:35:81:c4:60:0c:84:1b:ba:ee:a0:4d:d6:
                    18:02:7e:3c:c3:8f:7e:f8:71:5f:af:c2:2e:46:c2:
                    7f:c4:59:1f:ab:c0:59:c5:e5:1a:51:bb:48:ca:d7:
                    39:70:be:09:13:b4:de:29:45:f6:8f:49:42:97:67:
                    1d:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:E7:42:F8:B7:2F:4E:AC:61:30:12:B0:F8:75:24:1F:40:AD:EF:9A
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/f363ef72-7932-422c-8142-c8988f65cd39/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/f363ef72-7932-422c-8142-c8988f65cd39/f542a7bf3e6dcd0cfbd143d5f80671299203e540.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.238.28.0/22
                IPv6:
                  2803:14a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         19:31:04:1b:30:d9:84:16:a2:1f:7f:de:a0:65:8a:23:7b:af:
         dd:de:73:94:bb:4f:73:d4:dd:5f:d4:f3:05:be:73:df:15:06:
         8d:b8:8e:fa:04:bd:5b:2f:33:3a:56:d2:16:07:6a:0c:e1:8f:
         9b:3b:b6:84:b0:d3:a2:e6:9c:1a:c5:db:1d:df:fd:2d:9d:8c:
         be:b5:d3:97:a3:3c:d7:cd:93:39:62:96:e6:6d:05:5e:88:8d:
         07:bb:82:85:87:d6:70:1d:0b:ff:e9:fb:3a:dd:ee:c1:69:cf:
         23:e3:1f:3a:7d:00:e2:77:00:f6:19:e0:ce:9f:04:f6:bb:6a:
         85:82:b4:ab:bd:36:e7:e7:d7:73:a8:d9:1d:d9:54:6a:c2:ed:
         b5:0e:d2:2b:91:51:ac:c5:50:54:ca:cb:5d:6d:34:a2:d8:26:
         d8:d2:57:cc:7b:79:b7:28:f6:2c:94:8e:4b:4a:fd:01:20:00:
         83:ab:9d:96:13:25:90:6b:4c:d5:d5:2e:22:0b:78:3d:91:2b:
         bf:68:32:9f:1f:3c:ff:72:3f:ce:08:4f:c9:4f:ff:9e:86:63:
         87:7e:be:6b:ad:11:8f:d4:bd:35:3d:c3:8f:3d:06:f8:ba:92:
         f0:c3:e8:1c:e7:c8:64:23:90:6b:12:1a:a4:c7:6b:39:c1:7e:
         44:56:3c:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----