Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/0017ee9b0e653d899a68c748c58a04a9bbaad1d7.cer
File:                     0017ee9b0e653d899a68c748c58a04a9bbaad1d7.cer (raw, json)
Hash identifier:          +5wMQmVcPa+C5HvDn1drgyiIQc3fKHbGz7sluDoEq7s=
Subject key identifier:   C7:73:92:99:75:5B:4F:4E:E4:8F:83:DC:6A:DB:EC:9A:26:A5:07:9F
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       01039492
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/3b7fcb54-5853-46a5-a22d-a3f72a7e978f/0017ee9b0e653d899a68c748c58a04a9bbaad1d7.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/3b7fcb54-5853-46a5-a22d-a3f72a7e978f/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 12 Dec 2023 04:03:46 +0000
Certificate not after:    Sat 04 Oct 2025 05:00:00 +0000
Subordinate resources:    AS: 266662
                          IP: 45.227.60.0/24
                          IP: 2801:16:b000::/48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 17011858 (0x1039492)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Dec 12 04:03:46 2023 GMT
            Not After : Oct  4 05:00:00 2025 GMT
        Subject: CN=0017ee9b0e653d899a68c748c58a04a9bbaad1d7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:8a:e6:f9:da:13:2d:d3:28:1b:79:d4:12:33:
                    75:5d:84:43:25:cc:1e:dd:3e:26:c7:cd:4a:e5:00:
                    d4:c1:98:10:a0:f3:bb:47:a0:e6:17:12:3b:b8:c1:
                    73:2a:b9:d5:bf:82:f8:fd:6e:b1:a6:22:75:f2:1f:
                    d7:0a:90:0b:7c:54:80:ec:81:5e:03:98:a3:6d:50:
                    bf:9f:bd:e8:31:95:d9:25:b8:f4:b3:e8:ab:d7:12:
                    b3:b3:1f:e7:1f:ef:ab:8a:58:28:70:00:d1:6c:7f:
                    fa:28:89:27:89:26:73:49:b2:18:0f:50:c2:79:4f:
                    80:a4:ba:84:d7:ff:58:df:7f:19:57:7f:75:7f:00:
                    c5:97:a6:8c:2d:8c:3c:e3:14:1b:1d:ce:52:5b:6d:
                    c3:34:99:33:df:bf:69:f0:89:70:e1:84:50:af:06:
                    da:9e:f2:c9:a0:79:fc:d1:a0:40:53:5d:96:ca:f3:
                    48:50:ff:02:4f:ad:ff:43:c4:d7:33:6e:33:ff:34:
                    82:70:6c:b0:1a:82:29:a6:6b:34:36:8e:fd:95:8b:
                    ed:fa:68:c8:2f:04:d8:88:51:dc:8e:54:5f:98:29:
                    d0:a1:9d:e7:4d:aa:4f:7d:62:99:e7:54:58:3c:4b:
                    9f:d0:9c:3c:74:e9:fa:4d:7b:78:a7:84:c8:06:b4:
                    6c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:73:92:99:75:5B:4F:4E:E4:8F:83:DC:6A:DB:EC:9A:26:A5:07:9F
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/3b7fcb54-5853-46a5-a22d-a3f72a7e978f/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/3b7fcb54-5853-46a5-a22d-a3f72a7e978f/0017ee9b0e653d899a68c748c58a04a9bbaad1d7.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.227.60.0/24
                IPv6:
                  2801:16:b000::/48

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  266662

    Signature Algorithm: sha256WithRSAEncryption
         1a:20:13:4d:07:9a:f1:0e:c8:9e:6a:c9:aa:53:db:3c:05:3a:
         4e:79:72:c6:e7:24:30:9c:e8:30:60:74:e6:ba:a7:aa:4c:5a:
         41:85:ed:ab:d4:39:c9:a8:43:91:c6:4a:34:92:aa:ef:5e:6c:
         98:f5:f0:df:b6:77:50:d7:f1:8b:0b:6a:72:e3:77:51:16:fb:
         9a:a9:43:1c:b7:f5:bd:4e:0a:84:17:34:c1:a9:0e:64:60:3a:
         4b:2e:48:aa:50:f1:fc:cc:5d:9c:86:37:8a:37:cd:6a:43:7b:
         31:c4:bb:25:1f:ad:8c:7d:94:c7:99:10:32:fb:52:12:af:d9:
         6b:a6:27:be:f1:7b:5b:31:ac:6e:5d:0f:24:ac:9c:2b:79:32:
         40:a5:c9:fe:4e:b2:6b:62:22:6f:ea:b6:f5:90:1a:62:69:44:
         52:fd:d7:bb:c0:30:ef:e1:b7:90:d7:d2:ed:6c:65:01:c7:be:
         49:b1:b2:cc:8b:35:6e:62:9e:12:46:ae:0a:44:09:46:41:40:
         bf:fd:83:0f:44:34:a0:d2:7c:36:62:86:05:b8:44:0c:8c:a6:
         dc:70:e3:fc:9e:96:e7:26:aa:64:1d:3f:f2:da:e2:d3:70:3e:
         d3:77:4c:c5:de:e8:13:1b:6f:43:3e:fa:35:96:4f:9a:b6:9d:
         ed:40:93:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----