Certificate

$ rpki-client -vvf repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/02436d56cab83a15c352ec5f7ead6d89a4fd57dc.cer
File:                     02436d56cab83a15c352ec5f7ead6d89a4fd57dc.cer (raw, json)
Hash identifier:          XDN0fVMYiVr/btRs8KY1xcPyeoRFOk1RgQs6Y8Tr9Ho=
Subject key identifier:   0E:8C:40:23:76:99:9B:14:2D:3E:91:CC:22:29:F7:04:63:8E:35:78
Authority key identifier: 14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07
Certificate issuer:       /CN=production O=lacnic
Certificate serial:       EE7D54
Authority info access:    rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer
Manifest:                 rsync://repository.lacnic.net/rpki/lacnic/02610364-84ae-4b70-8af9-cc28e5d9b851/02436d56cab83a15c352ec5f7ead6d89a4fd57dc.mft
caRepository:             rsync://repository.lacnic.net/rpki/lacnic/02610364-84ae-4b70-8af9-cc28e5d9b851/
Notify URL:               https://rrdp.lacnic.net/rrdp/notification.xml
Certificate not before:   Tue 20 Jun 2023 16:08:13 +0000
Certificate not after:    Sun 23 Feb 2025 21:25:14 +0000
Subordinate resources:    AS: 267835
                          IP: 45.175.160.0/22
                          IP: 2803:e460::/32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 15629652 (0xee7d54)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=production O=lacnic
        Validity
            Not Before: Jun 20 16:08:13 2023 GMT
            Not After : Feb 23 21:25:14 2025 GMT
        Subject: CN=02436d56cab83a15c352ec5f7ead6d89a4fd57dc
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:4f:94:4e:d1:37:cc:22:d6:16:17:cd:ea:d9:
                    fa:55:8d:5b:1e:43:e6:47:95:76:78:f6:4c:33:40:
                    8c:9d:94:98:f1:c2:c9:23:3a:11:c8:66:6d:26:58:
                    be:96:d9:cf:05:ec:17:d1:c1:60:98:02:6a:c7:17:
                    c8:2b:5e:4a:a1:da:f4:79:7d:38:c4:71:5e:3a:e8:
                    f7:39:2d:ca:07:12:08:af:19:8b:18:44:5e:b7:65:
                    b3:5d:58:bf:b3:12:16:f3:4f:33:89:2a:4d:e9:1a:
                    b8:0c:f9:bf:e2:1d:5b:e1:0b:66:4d:54:c4:b9:cf:
                    de:f7:84:07:e3:33:20:df:ea:d4:fd:1a:00:a7:e1:
                    d1:b2:ee:ca:c5:d9:f4:23:85:40:59:ac:b3:e3:c2:
                    b3:7b:f2:29:f6:36:0c:c6:89:62:c2:0a:25:fd:fe:
                    5e:21:a8:59:52:ae:f6:5a:94:65:f7:c1:1e:44:39:
                    09:92:ed:da:07:83:05:f5:b5:94:25:ec:36:92:fc:
                    f8:d5:72:6f:03:8d:87:c4:29:35:a7:47:da:c9:84:
                    ea:32:50:4d:db:a3:6a:c0:92:5f:b6:5c:ea:38:46:
                    16:60:c3:d0:fe:2e:43:b2:fa:ef:d4:44:e0:e5:94:
                    07:e4:c8:e8:a2:98:89:bd:33:5a:41:90:f1:10:6b:
                    1e:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:8C:40:23:76:99:9B:14:2D:3E:91:CC:22:29:F7:04:63:8E:35:78
            X509v3 Authority Key Identifier:
                keyid:14:70:94:B4:E4:47:E3:EE:2D:CC:3F:D5:27:3D:46:EB:9D:C4:78:07

            X509v3 Basic Constraints: critical
                CA:TRUE
            X509v3 Key Usage: critical
                Certificate Sign, CRL Sign
            Authority Information Access:
                CA Issuers - URI:rsync://repository.lacnic.net/rpki/lacnic/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.cer

            Subject Information Access:
                RPKI Notify - URI:https://rrdp.lacnic.net/rrdp/notification.xml
                CA Repository - URI:rsync://repository.lacnic.net/rpki/lacnic/02610364-84ae-4b70-8af9-cc28e5d9b851/
                RPKI Manifest - URI:rsync://repository.lacnic.net/rpki/lacnic/02610364-84ae-4b70-8af9-cc28e5d9b851/02436d56cab83a15c352ec5f7ead6d89a4fd57dc.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://repository.lacnic.net/rpki/lacnic/48f083bb-f603-4893-9990-0284c04ceb85/ff14e9055d5afaa37fbe20f4a26bd13c8f18d79a.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4:
                  45.175.160.0/22
                IPv6:
                  2803:e460::/32

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  267835

    Signature Algorithm: sha256WithRSAEncryption
         90:4a:9b:48:36:26:c4:2d:37:d6:af:21:ae:6c:8a:d5:07:6f:
         20:b0:5c:fb:bd:88:f7:ca:5e:5e:4a:22:1b:63:2e:60:2a:6d:
         44:43:72:11:57:33:4a:b6:fa:31:ad:32:06:bd:12:e8:54:b1:
         e6:1e:54:96:49:a9:52:fc:ff:40:b5:40:15:67:ea:63:75:dd:
         de:13:5b:14:d2:81:6f:6f:5b:93:1f:ea:ec:88:07:01:fc:b3:
         f7:8e:69:ba:21:3b:66:f9:63:53:34:fe:c9:d0:c8:62:bf:b1:
         5b:41:6a:83:24:2d:eb:6d:a6:44:0b:36:af:dc:72:4b:5b:1c:
         1b:c9:06:35:8b:eb:4c:65:74:fb:88:4d:ac:15:24:af:4c:d1:
         16:a8:a6:ea:14:4f:ce:7f:e1:f4:45:bb:b2:85:ff:8a:0d:be:
         75:73:e4:e8:71:ae:db:cb:38:a5:4e:01:b4:9a:11:1c:9f:48:
         4a:63:b1:97:a4:39:2e:cd:8e:be:65:b4:c7:a4:15:3c:4c:8c:
         93:01:9c:f8:c0:90:c4:ee:2c:63:89:bc:43:1f:05:fa:98:04:
         04:9a:e4:ea:5f:5a:8a:1c:7f:1d:49:80:e3:f2:09:09:1e:1c:
         e9:30:d6:95:50:dd:e1:7c:8a:06:61:1d:17:91:b9:f5:7f:88:
         eb:98:67:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----