Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/9fee35c8af90054942a4f1bdf8f13a7f46f12d67.cer
File:                     9fee35c8af90054942a4f1bdf8f13a7f46f12d67.cer (raw, json)
Hash identifier:          rv4midhbOSOFEXvI6EHtdTp0bbWLxJrUDZ3HAas/xV8=
Subject key identifier:   E7:F0:09:BB:47:2F:88:BA:63:51:41:D2:C4:5E:3C:4C:05:4E:EF:12
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       0103A93A
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/e1eaffe3-40b7-4acf-af6e-efc30482fddc/9fee35c8af90054942a4f1bdf8f13a7f46f12d67.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/e1eaffe3-40b7-4acf-af6e-efc30482fddc/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 05 Jul 2022 22:46:06 +0000
Certificate not after:    Sun 12 Jan 2025 17:12:57 +0000
Subordinate resources:    IP: 45.232.92.0/22
                          IP: 2803:3b20::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17017146 (0x103a93a)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jul  5 22:46:06 2022 GMT
            Not After : Jan 12 17:12:57 2025 GMT
        Subject: CN=9fee35c8af90054942a4f1bdf8f13a7f46f12d67
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:90:04:a8:bc:de:01:17:7d:03:28:78:10:01:1c:
                    79:a2:27:5e:4f:f4:8d:bd:a0:7b:f2:90:b4:70:74:
                    27:4e:0e:76:5a:ce:e5:a7:35:f2:95:a6:ce:1d:72:
                    0e:a7:78:fd:38:18:1f:42:ba:78:8a:40:7b:49:10:
                    a0:20:8d:13:0a:b4:64:fb:5d:a8:67:5f:ce:16:9f:
                    1c:50:15:60:67:b7:1b:c4:ad:05:01:d1:ed:5f:c1:
                    e2:41:d7:cd:ca:41:5b:aa:18:3f:35:c2:b5:a4:2b:
                    bf:9f:a6:73:2a:6b:d8:ae:f2:c9:d8:01:a0:b7:f8:
                    48:84:e8:ce:62:78:81:ed:59:0e:3f:38:8f:91:0d:
                    b5:e4:7c:6c:aa:ba:48:42:b1:89:d5:ad:0a:91:aa:
                    81:29:46:7a:a2:74:33:1b:03:f8:d4:89:7f:d4:65:
                    4d:d7:bc:86:ef:df:06:99:77:f2:ae:70:71:c9:d8:
                    40:b8:58:51:da:3e:02:97:c9:5e:22:f4:df:5b:0c:
                    c7:07:3d:47:a7:5d:34:2a:2e:09:7b:e1:f3:63:dd:
                    fd:d2:d4:be:15:95:7a:9a:e3:e4:b2:ee:91:fb:67:
                    38:62:5e:1b:bb:91:00:c2:bd:a8:5a:a8:88:ad:1c:
                    73:6a:e5:0c:57:7f:64:e8:29:ee:6c:00:10:b1:0e:
                    ba:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:F0:09:BB:47:2F:88:BA:63:51:41:D2:C4:5E:3C:4C:05:4E:EF:12
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/e1eaffe3-40b7-4acf-af6e-efc30482fddc/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/e1eaffe3-40b7-4acf-af6e-efc30482fddc/9fee35c8af90054942a4f1bdf8f13a7f46f12d67.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.232.92.0/22
                IPv6:
                  2803:3b20::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:01:69:e7:a5:fa:a5:56:f2:a1:c6:24:55:be:11:70:71:a9:
         a6:31:67:d1:88:d5:b2:f3:27:c5:da:47:81:28:67:db:33:8f:
         71:7b:4c:ef:ae:91:0b:90:a1:6d:67:c5:42:e1:bf:e9:0e:16:
         d5:df:b8:9f:ad:0e:57:d3:56:3c:e2:ba:6f:4c:25:07:58:80:
         9b:d6:29:72:b3:ec:8f:93:2f:6a:f4:06:14:27:6e:1b:27:52:
         1d:7d:ae:26:21:e0:fc:97:51:a6:c6:ce:5a:8a:b4:38:11:c0:
         0c:0c:ea:25:10:1c:ac:db:f9:4c:b2:2f:32:59:96:d7:60:9a:
         6b:9e:46:1a:89:52:d4:f8:30:cb:0c:a3:6e:80:c0:04:22:e6:
         07:21:9e:83:d8:99:68:db:4f:68:e0:d8:c5:74:23:4c:1a:ec:
         90:74:4c:11:59:39:33:f1:b0:ae:9a:ac:be:c9:3d:d9:0c:67:
         17:e8:aa:36:27:84:44:83:db:be:9d:c0:05:3f:7f:6a:33:cf:
         02:d4:68:1b:cc:8c:34:99:f4:13:11:a5:69:19:3f:b9:a4:b7:
         25:80:27:9e:63:f7:cb:85:1d:37:67:c4:f5:c3:5e:31:0c:87:
         a2:5b:97:c1:b0:c5:70:9a:4e:d6:a3:6e:b7:ac:3d:cd:13:0b:
         8e:4f:94:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----