Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/fb45453e1f36b68a9b9b14fe7d802a194a3332a0.cer
File:                     fb45453e1f36b68a9b9b14fe7d802a194a3332a0.cer (raw, json)
Hash identifier:          HJ2vJpnCEqCY4cHmyyyDgzoJ/JgvhgTD0s1uvCAyeu8=
Subject key identifier:   54:56:0A:2F:32:32:57:E4:A4:FA:40:79:9E:D3:AD:B4:04:5C:8C:D3
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       E7E412
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e1803af2-80f7-407f-958e-30ca5e8e5a90/fb45453e1f36b68a9b9b14fe7d802a194a3332a0.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e1803af2-80f7-407f-958e-30ca5e8e5a90/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Mon 01 May 2023 15:02:54 +0000
Certificate not after:    Mon 20 Jan 2025 22:04:35 +0000
Subordinate resources:    IP: 45.172.136.0/22
                          IP: 2803:4060::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15197202 (0xe7e412)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: May  1 15:02:54 2023 GMT
            Not After : Jan 20 22:04:35 2025 GMT
        Subject: CN=fb45453e1f36b68a9b9b14fe7d802a194a3332a0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:84:15:b8:23:71:d2:bd:9d:9b:e6:a8:d2:e5:7e:
                    ab:3c:fb:93:fa:f7:23:f4:56:af:cf:8c:c4:37:af:
                    3f:e0:dc:4f:19:cc:8c:08:e7:c8:e6:f0:55:6c:4e:
                    e8:5f:e2:89:2e:e1:7b:0c:ac:04:66:07:13:a8:67:
                    40:e9:34:d3:7c:bf:b9:21:33:8f:d1:62:81:de:a4:
                    c5:8b:2e:1e:5a:80:3f:31:9a:9b:ba:f7:4c:d0:ae:
                    ad:b1:61:02:54:fe:ef:ee:cb:6b:f3:76:b5:01:a5:
                    55:44:b8:81:eb:f2:25:91:78:f0:8b:85:97:12:64:
                    5a:9f:80:cc:7b:4a:ab:2a:1b:50:3e:35:c3:79:90:
                    56:12:f7:26:47:ae:ac:98:22:18:8c:cd:f4:f9:85:
                    ca:1c:27:1d:55:17:f1:6c:e5:be:f6:00:79:b2:c1:
                    ba:1d:a6:0d:b0:6e:0b:c2:5f:9f:a0:3a:66:0d:3a:
                    a0:fd:57:41:56:96:4b:2f:ef:5a:df:14:f2:2b:a0:
                    51:0d:91:cb:c4:8e:11:c3:ca:39:fa:47:c2:0b:32:
                    97:1d:a5:2b:07:38:ca:6e:f1:20:e4:23:41:b2:3b:
                    f7:18:38:6b:ec:c9:45:1b:ba:f8:cb:d4:cb:91:c7:
                    c2:88:d9:f5:55:21:e1:1c:31:58:e3:c8:fb:ee:e3:
                    ca:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:56:0A:2F:32:32:57:E4:A4:FA:40:79:9E:D3:AD:B4:04:5C:8C:D3
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e1803af2-80f7-407f-958e-30ca5e8e5a90/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e1803af2-80f7-407f-958e-30ca5e8e5a90/fb45453e1f36b68a9b9b14fe7d802a194a3332a0.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.172.136.0/22
                IPv6:
                  2803:4060::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:26:b4:fb:b7:83:0a:fa:d0:91:bd:61:50:e8:03:8f:cc:01:
         2c:cc:ab:cb:ce:8d:db:5a:09:2f:7e:c7:52:b9:16:00:7a:48:
         c8:fa:7a:b4:4f:00:97:83:93:cd:7b:72:e3:b5:02:11:d4:e9:
         07:bc:05:f5:39:a8:a5:25:36:68:af:e0:bb:8a:7f:17:b6:6d:
         e4:fd:27:a0:16:71:15:74:19:23:39:7c:8d:55:35:f2:93:79:
         b6:25:57:42:93:8e:f7:c9:6f:c4:32:4f:2d:02:c8:5b:ba:09:
         26:d9:b2:4c:6f:56:e4:77:15:20:40:38:18:ad:b0:ae:e0:af:
         7b:80:01:19:4d:94:bc:47:a1:91:b8:14:e2:7f:1c:16:36:6b:
         bb:e9:d7:90:22:3d:3d:23:67:59:1f:f2:81:0c:03:21:76:f2:
         5e:f9:cf:49:b8:6f:c7:25:de:53:d2:ed:d9:a3:a2:dc:29:d1:
         79:5c:aa:de:5b:58:38:67:f7:88:31:61:30:1e:7b:3b:50:0a:
         77:44:f2:3d:78:68:e5:6e:f7:ba:0e:b9:7d:cf:24:2f:23:27:
         0b:58:23:68:73:7c:e0:7c:48:96:ae:12:8e:a6:55:e2:34:f5:
         58:47:19:c2:d6:9b:7a:68:e8:15:11:fd:0a:53:68:34:7f:e1:
         09:af:95:ef
-----BEGIN CERTIFICATE-----
MIIFvjCCBKagAwIBAgIEAOfkEjANBgkqhkiG9w0BAQsFADAeMRwwGgYDVQQDExNw
cm9kdWN0aW9uIE89bGFjbmljMB4XDTIzMDUwMTE1MDI1NFoXDTI1MDEyMDIyMDQz
NVowMzExMC8GA1UEAxMoZmI0NTQ1M2UxZjM2YjY4YTliOWIxNGZlN2Q4MDJhMTk0
YTMzMzJhMDCCASIwDQYJKoZIhvcNAQEBBQADggEPADCCAQoCggEBAIQVuCNx0r2d
m+ao0uV+qzz7k/r3I/RWr8+MxDevP+DcTxnMjAjnyObwVWxO6F/iiS7hewysBGYH
E6hnQOk003y/uSEzj9Figd6kxYsuHlqAPzGam7r3TNCurbFhAlT+7+7La/N2tQGl
VUS4gevyJZF48IuFlxJkWp+AzHtKqyobUD41w3mQVhL3JkeurJgiGIzN9PmFyhwn
HVUX8WzlvvYAebLBuh2mDbBuC8Jfn6A6Zg06oP1XQVaWSy/vWt8U8iugUQ2Ry8SO
EcPKOfpHwgsylx2lKwc4ym7xIOQjQbI79xg4a+zJRRu6+MvUy5HHwojZ9VUh4Rwx
WOPI++7jyqUCAwEAAaOCAu0wggLpMB0GA1UdDgQWBBRUVgovMjJX5KT6QHme0620
BFyM0zAfBgNVHSMEGDAWgBQUcJS05Efj7i3MP9UnPUbrncR4BzAPBgNVHRMBAf8E
BTADAQH/MA4GA1UdDwEB/wQEAwIBBjByBggrBgEFBQcBAQRmMGQwYgYIKwYBBQUH
MAKGVnJzeW5jOi8vcmVwb3NpdG9yeS5sYWNuaWMubmV0L3Jwa2kvbGFjbmljL2Zm
MTRlOTA1NWQ1YWZhYTM3ZmJlMjBmNGEyNmJkMTNjOGYxOGQ3OWEuY2VyMIIBNAYI
KwYBBQUHAQsEggEmMIIBIjA5BggrBgEFBQcwDYYtaHR0cHM6Ly9ycmRwLmxhY25p
Yy5uZXQvcnJkcC9ub3RpZmljYXRpb24ueG1sMFsGCCsGAQUFBzAFhk9yc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy9lMTgwM2FmMi04MGY3
LTQwN2YtOTU4ZS0zMGNhNWU4ZTVhOTAvMIGHBggrBgEFBQcwCoZ7cnN5bmM6Ly9y
ZXBvc2l0b3J5LmxhY25pYy5uZXQvcnBraS9sYWNuaWMvZTE4MDNhZjItODBmNy00
MDdmLTk1OGUtMzBjYTVlOGU1YTkwL2ZiNDU0NTNlMWYzNmI2OGE5YjliMTRmZTdk
ODAyYTE5NGEzMzMyYTAubWZ0MIGPBgNVHR8EgYcwgYQwgYGgf6B9hntyc3luYzov
L3JlcG9zaXRvcnkubGFjbmljLm5ldC9ycGtpL2xhY25pYy80OGYwODNiYi1mNjAz
LTQ4OTMtOTk5MC0wMjg0YzA0Y2ViODUvZmYxNGU5MDU1ZDVhZmFhMzdmYmUyMGY0
YTI2YmQxM2M4ZjE4ZDc5YS5jcmwwGAYDVR0gAQH/BA4wDDAKBggrBgEFBQcOAjAu
BggrBgEFBQcBBwEB/wQfMB0wDAQCAAEwBgMEAi2siDANBAIAAjAHAwUAKANAYDAN
BgkqhkiG9w0BAQsFAAOCAQEAACa0+7eDCvrQkb1hUOgDj8wBLMyry86N21oJL37H
UrkWAHpIyPp6tE8Al4OTzXty47UCEdTpB7wF9TmopSU2aK/gu4p/F7Zt5P0noBZx
FXQZIzl8jVU18pN5tiVXQpOO98lvxDJPLQLIW7oJJtmyTG9W5HcVIEA4GK2wruCv
e4ABGU2UvEehkbgU4n8cFjZru+nXkCI9PSNnWR/ygQwDIXbyXvnPSbhvxyXeU9Lt
2aOi3CnReVyq3ltYOGf3iDFhMB57O1AKd0TyPXho5W73ug65fc8kLyMnC1gjaHN8
4HxIlq4SjqZV4jT1WEcZwtabemjoFRH9ClNoNH/hCa+V7w==
-----END CERTIFICATE-----